Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier: OQltGvzLdZ629pMkTNuA6Y/7d1WdSnByksgAiZ854tM=
Subject key identifier: 3F:8D:17:92:20:D5:5A:D6:E1:AF:9D:EE:36:33:49:DC:F3:70:34:C4
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 019EE9330600B97279C6FBF4E44FD6315DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number: 09AC
Signing time: Sun 21 Jun 2026 08:01:35 +0000
Manifest this update: Sun 21 Jun 2026 08:01:35 +0000
Manifest next update: Mon 22 Jun 2026 08:01:35 +0000
Files and hashes: 1: 0j8mKPNVQTMhrPMoTB8vqumItaY.roa (hash: RfwfX7kQEbOpbeZ05eE31bx2DYFysCnm/nQLdjd7Xnk=)
2: 1-kTvZ0CIAu8uTw7fU1T6vT9hc9c.roa (hash: me+ftvQPzHdAUrIuYjuuG8bbQjdCu8RbriElDkqOOBo=)
3: 5obQTKQQdziyHt3lp7e0Ce026vk.roa (hash: Le5yUrWQi3zm2wIsTvW5Oct4jk04f+5rZXXqRfdqn8k=)
4: 8dffgbceyZZN2GD0DQntG3Z8fxU.roa (hash: 7MA6pNhMj3p3AaurB3f6qiL2uGgtlKFoFp4bhK94tNs=)
5: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: SeTyaPHLuS27IzQqNsxDx7IcPRXQFSjjSrSVeNRNW00=)
6: ZIEMV2zIloE52-qgOXdFi1j85Tk.roa (hash: NwScYVj2gBSbhZaCbwwZMrlWYVdDowjEWEzxULRwSVQ=)
7: g1rCh6JOwkuyFx1RMKVRwzuU63w.roa (hash: i/ipa9GmfRXAeA2Xih2V+tPcO2aG20N/7/cUFxqZ3v8=)
8: zSQtHn132zkYiODR-nP8aHtUQYA.roa (hash: 0IThsqQjeAvQaaBM3736hRL6ffPhT8HNYOS2v2AnKs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 08:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e9:33:06:00:b9:72:79:c6:fb:f4:e4:4f:d6:31:5d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jun 21 08:01:35 2026 GMT
Not After : Jun 22 08:01:35 2026 GMT
Subject: CN=3f8d179220d55ad6e1af9dee363349dcf37034c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3d:9b:9b:a9:d3:fc:0d:4b:1f:79:5b:c5:f9:
3e:5a:f7:ab:2d:63:f0:e2:73:62:ca:7a:5d:24:ab:
d4:48:20:b7:47:51:2f:0a:a5:56:b5:87:32:21:a5:
d0:a4:45:61:f4:99:28:43:4b:6e:98:fb:cc:38:6b:
45:63:b1:f2:3d:47:5a:67:f9:0e:0e:81:7e:53:66:
7b:ae:ec:0d:73:2e:87:9f:e6:ee:12:90:31:b1:9e:
77:07:82:c0:86:bd:da:34:53:0b:c2:9a:10:d3:bf:
5f:f1:b7:06:46:6d:0b:b4:d7:30:5b:d8:a4:c5:0e:
63:87:c4:63:71:de:6f:83:6e:83:81:eb:78:f8:92:
a5:d4:06:26:ca:8b:5e:9b:f4:f0:6b:79:45:16:86:
48:ff:d8:f3:38:e3:46:31:8b:23:e8:fe:30:60:eb:
33:fb:62:d9:6b:01:09:13:48:12:05:e3:8a:c3:12:
5d:9a:11:f8:dd:72:52:17:a9:ff:92:27:e1:ae:c0:
e9:7a:3d:f8:9d:b0:f7:e1:66:f9:6b:ca:d6:09:38:
47:07:dd:94:c4:4e:80:d9:83:ad:b0:df:f2:c6:f9:
10:bf:b9:ba:32:61:21:df:1a:c7:d8:8f:d6:1d:29:
42:34:2e:85:72:65:eb:10:98:61:6e:54:73:42:e8:
cb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8D:17:92:20:D5:5A:D6:E1:AF:9D:EE:36:33:49:DC:F3:70:34:C4
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c3:49:cb:7b:df:4a:4c:ec:72:fb:3b:9c:2f:cc:5a:b5:8c:
65:45:ed:ef:cb:59:bc:9f:b4:92:5b:82:8a:fd:70:f9:04:ff:
5d:ea:1f:a4:1b:c4:25:a5:02:9c:a7:09:7c:73:fc:c2:b6:3b:
ec:10:1a:7a:ed:b0:fe:0f:7d:62:84:bf:d9:69:d6:36:1c:07:
04:c9:ad:bb:7c:4c:74:a7:60:bf:18:5b:55:d6:e2:f0:5b:d2:
11:bb:86:5c:f0:16:6c:bd:c0:55:1e:29:ad:1c:d8:69:6c:89:
3c:9d:42:4d:55:27:a9:5d:72:00:90:74:26:d7:d9:cd:fa:ab:
cb:b7:08:d9:31:a7:ae:8c:4f:55:a6:ee:30:5b:42:75:2c:05:
57:05:19:26:cb:56:b9:46:d0:86:30:0b:d0:91:37:4a:8b:1b:
d1:c7:c7:38:81:e9:6c:06:1e:3d:98:32:8f:27:06:12:80:86:
99:f8:92:39:6f:5b:f2:18:75:6e:12:07:c8:10:74:a2:ed:38:
66:e9:8e:31:b4:98:38:94:a9:22:38:85:35:42:0e:19:00:c5:
46:3c:d6:30:77:20:38:9b:61:b6:5c:5b:40:ab:7c:81:77:da:
b7:74:b7:3a:f0:7b:8e:f1:6d:b8:3f:86:20:c3:63:aa:d6:8d:
91:ec:19:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 16:45:32 2026 by rpki-client