Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: YtGqMvOjZWbd+TJDWLYxHsG2+MnE7mm4MyHO+NtTdNs=
Subject key identifier: 63:F0:32:4F:45:55:90:4D:3C:5A:9F:32:3B:DA:AA:EB:82:7D:16:19
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 019D371B653E27CB1890382654AD73203848
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 1394
Signing time: Sun 29 Mar 2026 01:00:35 +0000
Manifest this update: Sun 29 Mar 2026 01:00:35 +0000
Manifest next update: Mon 30 Mar 2026 01:00:35 +0000
Files and hashes: 1: 1-r9qYFCluKH7Ma8TQ_Akyltf1Lc.roa (hash: GVSG8HQq960x0d4CpK5jN+FSCHq1SzLhEkFhDXdwhwI=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: 4em5d1Tj7glxrmLFKK2cmn0ErN4gYVQ5j+mgbGJby5k=)
3: Pk5JLOSd1QInAh2OTvMfyyR1NPI.roa (hash: O7rw9h1GQCgx5zvERGlnO4YLbgkL7RaVJgOWvuy279I=)
4: oVjc2gbj8Z3HA7eAzKIRnl2lQMA.roa (hash: zAAZk1U4VBtTI0cONSxWT3e4cbR3Hkt4vRra+VHSqCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:65:3e:27:cb:18:90:38:26:54:ad:73:20:38:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Mar 29 01:00:35 2026 GMT
Not After : Mar 30 01:00:35 2026 GMT
Subject: CN=63f0324f4555904d3c5a9f323bdaaaeb827d1619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d8:47:31:c6:73:b9:da:63:d9:0a:60:bd:57:
22:07:68:29:b7:24:57:4c:e9:7d:cb:e8:bf:5c:7c:
ca:3f:e9:4c:cc:c6:9c:0e:8b:5e:bf:02:12:5a:10:
2b:ba:b3:39:09:9b:11:f9:4d:d1:5c:3c:d8:ea:5d:
b9:7b:dd:d7:40:84:a8:d7:4e:e2:5e:a9:96:f6:23:
fb:d7:01:2a:76:bb:af:6a:3a:a9:55:0c:5e:ec:f5:
e5:7e:64:0a:da:47:18:58:b0:e4:3c:ae:ce:08:e6:
d2:05:fb:5c:df:4a:f3:a1:84:f3:de:6d:d7:5a:67:
65:13:29:fa:5b:28:d6:97:c7:15:bb:46:68:02:7e:
b5:29:3c:60:93:42:9c:f7:7b:d6:c4:b8:ad:3c:62:
e3:43:32:f4:f0:5e:33:c3:64:3e:85:16:5b:c4:69:
c4:d2:c6:db:58:36:f5:d3:70:b7:fb:6a:e4:8c:4f:
51:43:a2:da:48:24:01:47:6e:0c:83:5a:ce:38:c3:
a1:dc:dd:84:be:f9:0d:63:a5:5d:79:88:8b:83:36:
7f:7a:51:1e:8e:d8:84:7c:59:78:f1:c8:ca:0f:71:
34:17:85:3d:0e:a3:ca:fe:ac:6d:38:45:b3:e0:f8:
2e:d9:d5:c9:11:24:7f:ac:96:a1:be:8a:41:ee:ac:
57:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:F0:32:4F:45:55:90:4D:3C:5A:9F:32:3B:DA:AA:EB:82:7D:16:19
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:71:d3:99:11:b6:8b:24:97:a2:03:0f:60:ee:bd:87:8a:73:
40:2a:c7:7e:0e:e8:05:39:3c:a1:c6:06:b7:5d:97:34:09:a7:
94:06:ba:6a:2c:32:89:6b:c7:be:28:6e:51:ff:b9:5c:09:73:
f1:89:e1:b8:e5:39:20:0e:d7:92:5f:20:74:57:9c:78:4a:81:
4d:4f:6c:e7:81:54:7b:c2:01:50:60:ee:3b:1f:20:a1:ef:c0:
4b:30:97:fa:e0:d5:c4:a3:de:6b:f3:36:cd:53:f8:6b:cf:28:
a0:37:6a:bc:f7:6a:cd:f5:3f:0d:d7:d7:dd:1a:03:5d:89:09:
e4:1f:dd:e3:aa:40:6b:5c:57:04:79:cb:03:cc:7d:bc:e9:89:
d0:64:f4:7a:63:98:f4:a0:21:0a:c9:6f:9c:78:24:aa:b1:a3:
a1:85:6e:d5:52:11:06:fa:d5:b0:9e:7b:e8:22:c3:dd:dc:7b:
75:16:11:8b:85:00:9a:3f:b3:d4:dd:0a:5c:5e:11:d1:c4:72:
f0:75:c9:cb:55:dc:45:71:58:a5:5f:e0:7d:a3:b3:26:8c:aa:
82:8d:cc:71:e4:25:72:4e:f2:89:3a:07:18:d5:7f:7c:37:e0:
03:78:10:15:6c:8b:d4:6e:0d:85:63:ed:81:20:7e:b9:a3:bf:
e1:bf:dd:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03G2U+J8sYkDgmVK1zIDhIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMjMwNjRlM2MyN2VjOTJiN2VhYjY2NzY0OWQyMDRlNTY3
MzgzOGUwHhcNMjYwMzI5MDEwMDM1WhcNMjYwMzMwMDEwMDM1WjAzMTEwLwYDVQQD
Eyg2M2YwMzI0ZjQ1NTU5MDRkM2M1YTlmMzIzYmRhYWFlYjgyN2QxNjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAodhHMcZzudpj2QpgvVciB2gptyRX
TOl9y+i/XHzKP+lMzMacDotevwISWhArurM5CZsR+U3RXDzY6l25e93XQISo107i
XqmW9iP71wEqdruvajqpVQxe7PXlfmQK2kcYWLDkPK7OCObSBftc30rzoYTz3m3X
WmdlEyn6WyjWl8cVu0ZoAn61KTxgk0Kc93vWxLitPGLjQzL08F4zw2Q+hRZbxGnE
0sbbWDb103C3+2rkjE9RQ6LaSCQBR24Mg1rOOMOh3N2EvvkNY6VdeYiLgzZ/elEe
jtiEfFl48cjKD3E0F4U9DqPK/qxtOEWz4Pgu2dXJESR/rJahvopB7qxXxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPwMk9FVZBNPFqfMjvaquuCfRYZMB8GA1UdIwQY
MBaAFA0jBk48J+ySt+q2Z2SdIE5Wc4OOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMt
NWNlZjA0Yjc5NzM3LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS83MmZhZWQtYThmOC00YTMzLThkZGMtNWNlZjA0Yjc5NzM3
LzEvRFNNR1Rqd243SkszNnJablpKMGdUbFp6ZzQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHHTmRG2
iySXogMPYO69h4pzQCrHfg7oBTk8ocYGt12XNAmnlAa6aiwyiWvHvihuUf+5XAlz
8YnhuOU5IA7Xkl8gdFeceEqBTU9s54FUe8IBUGDuOx8goe/ASzCX+uDVxKPea/M2
zVP4a88ooDdqvPdqzfU/DdfX3RoDXYkJ5B/d46pAa1xXBHnLA8x9vOmJ0GT0emOY
9KAhCslvnHgkqrGjoYVu1VIRBvrVsJ576CLD3dx7dRYRi4UAmj+z1N0KXF4R0cRy
8HXJy1XcRXFYpV/gfaOzJoyqgo3MceQlck7yiToHGNV/fDfgA3gQFWyL1G4NhWPt
gSB+uaO/4b/dYA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:38 2026 by rpki-client