Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier: PVwkfnnO9dCt9ENLOAcY0jk2O91r/gJ6a4asQIHp2Ns=
Subject key identifier: 68:19:13:34:17:78:3C:35:F7:DD:DD:6F:2D:F7:11:36:83:BC:42:48
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 019DE47CD03F08023DAC25B0A5FACC3D4A67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number: 0925
Signing time: Fri 01 May 2026 17:01:17 +0000
Manifest this update: Fri 01 May 2026 17:01:17 +0000
Manifest next update: Sat 02 May 2026 17:01:17 +0000
Files and hashes: 1: 0j8mKPNVQTMhrPMoTB8vqumItaY.roa (hash: RfwfX7kQEbOpbeZ05eE31bx2DYFysCnm/nQLdjd7Xnk=)
2: 1-kTvZ0CIAu8uTw7fU1T6vT9hc9c.roa (hash: me+ftvQPzHdAUrIuYjuuG8bbQjdCu8RbriElDkqOOBo=)
3: 5obQTKQQdziyHt3lp7e0Ce026vk.roa (hash: Le5yUrWQi3zm2wIsTvW5Oct4jk04f+5rZXXqRfdqn8k=)
4: 8dffgbceyZZN2GD0DQntG3Z8fxU.roa (hash: 7MA6pNhMj3p3AaurB3f6qiL2uGgtlKFoFp4bhK94tNs=)
5: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: 1VN4H1j/7lS/0bWbP5e/Z3LM0u07xc07yU1fIFjdMIU=)
6: ZIEMV2zIloE52-qgOXdFi1j85Tk.roa (hash: NwScYVj2gBSbhZaCbwwZMrlWYVdDowjEWEzxULRwSVQ=)
7: g1rCh6JOwkuyFx1RMKVRwzuU63w.roa (hash: i/ipa9GmfRXAeA2Xih2V+tPcO2aG20N/7/cUFxqZ3v8=)
8: zSQtHn132zkYiODR-nP8aHtUQYA.roa (hash: 0IThsqQjeAvQaaBM3736hRL6ffPhT8HNYOS2v2AnKs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 May 2026 17:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e4:7c:d0:3f:08:02:3d:ac:25:b0:a5:fa:cc:3d:4a:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: May 1 17:01:17 2026 GMT
Not After : May 2 17:01:17 2026 GMT
Subject: CN=6819133417783c35f7dddd6f2df7113683bc4248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:21:7b:99:0a:f2:d7:14:5f:ed:89:28:fe:ba:
c6:0f:dd:d5:44:f4:83:3c:e8:b9:06:6f:c4:3d:3e:
e0:ec:84:3b:d4:97:15:94:30:bb:b0:15:0c:4a:0f:
cc:a3:36:81:38:28:ca:90:ab:f1:46:31:0e:7d:8c:
72:39:a5:2a:bc:a8:4b:b3:c5:80:bc:db:55:22:5f:
a0:24:35:df:d7:b3:f4:57:c8:6a:0b:75:06:77:f2:
a2:1d:a7:ff:d9:f1:89:b5:b3:4b:a3:30:86:ea:b0:
28:94:cb:aa:f0:e2:9c:0c:c6:41:14:38:13:7c:55:
9c:1c:b3:ff:79:3b:11:71:15:f2:bf:17:c9:9f:27:
78:27:66:7f:5c:0a:16:b0:c8:39:12:74:35:5a:8f:
d8:aa:70:32:29:6f:bf:8b:a7:1e:7d:9b:f5:10:cf:
10:f0:00:da:be:e4:13:c8:80:fe:74:71:86:43:7a:
32:27:0c:00:0d:0a:5d:1d:f1:de:ef:e9:0b:b5:96:
32:c5:13:df:2a:e0:86:bd:04:65:10:f7:07:17:9e:
f2:38:b4:16:6e:a3:b9:e6:03:b8:d8:d0:9c:30:79:
6d:75:21:1d:28:9e:9a:2a:7e:b2:b5:1d:72:22:69:
20:b7:a0:40:41:e3:97:73:c5:61:41:cf:18:a8:c2:
f4:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:19:13:34:17:78:3C:35:F7:DD:DD:6F:2D:F7:11:36:83:BC:42:48
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:34:9a:4a:04:cd:eb:0e:64:2f:10:82:9c:ed:9f:dc:70:dd:
aa:55:f5:b9:86:d7:7e:33:ae:84:1e:34:46:bb:f1:ed:90:96:
60:55:19:33:de:7a:66:e0:72:a3:72:b3:61:27:ab:a7:a2:16:
4a:7a:3c:aa:6b:3f:63:f0:9d:9a:d8:af:a5:12:b2:94:27:77:
09:70:7d:c3:fa:e5:af:10:4f:b6:c7:d0:ad:3d:35:ec:7c:e1:
ca:93:17:33:8a:db:62:6d:0a:31:0f:c7:ce:93:80:50:23:2f:
a6:30:6f:57:29:a8:e0:c5:c5:1f:87:cd:2b:fd:0e:9c:37:25:
fa:94:e3:7f:f8:84:d3:26:2f:b2:e8:2c:2d:ba:8c:e9:72:83:
34:52:47:6d:4d:dc:b7:1f:7f:69:57:dd:2e:b9:24:a3:a8:9c:
7f:c0:71:30:61:f5:74:22:7b:8d:8a:96:97:ed:0a:03:ee:fc:
64:6e:e1:2a:9c:1e:0f:a7:66:20:ad:c2:ca:83:81:13:60:1d:
d1:73:85:69:e1:51:39:09:d7:b4:64:95:08:7d:b6:fc:ca:90:
69:f3:47:62:5b:b2:b0:8d:20:ed:d2:23:61:30:77:96:e8:e4:
ea:f5:31:15:c6:af:8d:8c:b4:93:71:3e:15:a2:3a:7a:1a:96:
c6:43:43:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 01:29:04 2026 by rpki-client