Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: Ji6AwQaEXj5PRzDDA/lDwZvvhDxUyYIw6sV2ImIwoH4=
Subject key identifier: 14:CD:22:85:6B:9C:3C:4A:98:18:D9:B5:82:D7:BE:10:22:C6:F9:8A
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 019E2881E7E5244FD33FF76BD5B5BBB2F6E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 1411
Signing time: Thu 14 May 2026 22:01:02 +0000
Manifest this update: Thu 14 May 2026 22:01:02 +0000
Manifest next update: Fri 15 May 2026 22:01:02 +0000
Files and hashes: 1: 1-r9qYFCluKH7Ma8TQ_Akyltf1Lc.roa (hash: GVSG8HQq960x0d4CpK5jN+FSCHq1SzLhEkFhDXdwhwI=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: ZygA8rA3BwFKFzYDumGbTWKXYDLiaULeAsAnp9OfYyo=)
3: Pk5JLOSd1QInAh2OTvMfyyR1NPI.roa (hash: O7rw9h1GQCgx5zvERGlnO4YLbgkL7RaVJgOWvuy279I=)
4: oVjc2gbj8Z3HA7eAzKIRnl2lQMA.roa (hash: zAAZk1U4VBtTI0cONSxWT3e4cbR3Hkt4vRra+VHSqCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 22:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:81:e7:e5:24:4f:d3:3f:f7:6b:d5:b5:bb:b2:f6:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: May 14 22:01:02 2026 GMT
Not After : May 15 22:01:02 2026 GMT
Subject: CN=14cd22856b9c3c4a9818d9b582d7be1022c6f98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:30:dd:5c:d2:e9:50:50:99:1c:c3:26:66:84:
de:4e:b9:89:00:85:c7:e7:18:c0:8c:41:ed:8e:4e:
d8:6f:74:48:a8:e9:c3:94:c8:3c:31:4c:a9:ae:ee:
39:4e:a8:0a:27:93:89:3e:66:bb:d1:ff:f2:f2:94:
13:fb:e3:37:2b:5c:3e:78:17:5e:f6:77:b6:88:85:
51:82:1a:40:70:d1:04:b1:86:c8:d2:15:57:35:e6:
9e:e2:49:43:29:c9:86:b9:10:e8:09:34:16:10:11:
df:c7:be:28:18:bb:46:75:cb:a3:63:be:00:44:c8:
83:3b:25:59:70:0b:ce:87:10:21:c0:b7:98:01:f3:
b2:98:94:9a:ee:3c:99:48:10:64:e8:2c:2e:db:90:
61:60:96:1c:62:79:c6:63:17:d4:2a:ab:ec:64:b4:
6a:e8:dc:79:07:54:44:81:61:56:01:84:d3:09:7d:
ff:da:d9:fc:48:d5:38:3f:61:c0:4d:b0:dc:4c:89:
aa:23:64:eb:52:35:6e:c1:61:9f:c8:16:26:a4:da:
bd:a3:a2:3b:6f:a3:38:84:07:6c:ef:69:9d:a3:3c:
06:c4:c8:b4:91:79:9b:5b:09:8c:73:ed:d4:f4:d1:
84:f5:ba:10:92:0a:52:d4:19:6f:50:36:93:75:bc:
12:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CD:22:85:6B:9C:3C:4A:98:18:D9:B5:82:D7:BE:10:22:C6:F9:8A
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:09:83:78:9d:16:8a:df:38:b2:8b:0e:c3:a3:70:d6:65:6f:
13:67:65:bf:84:a2:44:f9:a9:60:94:92:7f:2e:08:e4:d9:14:
bb:cf:4a:ee:bc:57:54:be:af:b5:ad:ae:12:ce:63:b0:4f:8c:
ab:cc:b3:d8:8c:73:76:e7:5b:e0:af:87:3e:0e:1e:78:d3:5d:
8c:9e:d4:e7:74:61:22:8c:1c:66:35:b4:3a:ec:35:0f:ba:b4:
bf:12:92:07:d8:9b:2b:91:a2:49:e1:d6:5c:9f:8a:32:bc:53:
06:41:09:6e:a1:6a:99:d1:1f:a4:57:4f:6d:ef:dd:2c:bc:63:
d7:bf:aa:2b:df:82:76:b2:b3:c7:86:e9:4a:23:24:1d:75:36:
6e:ca:12:6e:10:a0:43:3d:32:e7:3e:cd:47:b6:58:bb:31:e5:
75:78:5b:a8:e0:a7:d8:5a:61:ca:cf:69:0e:57:23:8f:ff:40:
08:28:66:47:70:f3:f9:ab:25:96:aa:05:07:ab:dd:64:10:f7:
5f:28:47:34:9f:d3:10:cd:86:3c:07:1c:5e:68:41:92:43:99:
14:4e:34:aa:d3:10:35:04:08:7d:57:53:ef:31:5f:2e:b1:69:
1c:e0:f2:51:b0:3e:e4:18:56:cd:43:3d:a0:99:89:b0:40:e9:
68:31:0e:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ogeflJE/TP/dr1bW7svbpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjMwNjRlM2MyN2VjOTJiN2VhYjY2NzY0OWQyMDRlNTY3
MzgzOGUwHhcNMjYwNTE0MjIwMTAyWhcNMjYwNTE1MjIwMTAyWjAzMTEwLwYDVQQD
EygxNGNkMjI4NTZiOWMzYzRhOTgxOGQ5YjU4MmQ3YmUxMDIyYzZmOThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDDdXNLpUFCZHMMmZoTeTrmJAIXH
5xjAjEHtjk7Yb3RIqOnDlMg8MUypru45TqgKJ5OJPma70f/y8pQT++M3K1w+eBde
9ne2iIVRghpAcNEEsYbI0hVXNeae4klDKcmGuRDoCTQWEBHfx74oGLtGdcujY74A
RMiDOyVZcAvOhxAhwLeYAfOymJSa7jyZSBBk6Cwu25BhYJYcYnnGYxfUKqvsZLRq
6Nx5B1REgWFWAYTTCX3/2tn8SNU4P2HATbDcTImqI2TrUjVuwWGfyBYmpNq9o6I7
b6M4hAds72mdozwGxMi0kXmbWwmMc+3U9NGE9boQkgpS1BlvUDaTdbwSVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTNIoVrnDxKmBjZtYLXvhAixvmKMB8GA1UdIwQY
MBaAFA0jBk48J+ySt+q2Z2SdIE5Wc4OOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMt
NWNlZjA0Yjc5NzM3LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMtNWNlZjA0Yjc5NzM3
LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOgmDeJ0W
it84sosOw6Nw1mVvE2dlv4SiRPmpYJSSfy4I5NkUu89K7rxXVL6vta2uEs5jsE+M
q8yz2Ixzdudb4K+HPg4eeNNdjJ7U53RhIowcZjW0Ouw1D7q0vxKSB9ibK5GiSeHW
XJ+KMrxTBkEJbqFqmdEfpFdPbe/dLLxj17+qK9+CdrKzx4bpSiMkHXU2bsoSbhCg
Qz0y5z7NR7ZYuzHldXhbqOCn2Fphys9pDlcjj/9ACChmR3Dz+asllqoFB6vdZBD3
XyhHNJ/TEM2GPAccXmhBkkOZFE40qtMQNQQIfVdT7zFfLrFpHODyUbA+5BhWzUM9
oJmJsEDpaDEO3Q==
-----END CERTIFICATE-----
Generated at Fri May 15 06:58:58 2026 by rpki-client