Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json)
Hash identifier: klacV8psuE813bfsDpk+T2pZz/9uHQloKbgokYnGQuU=
Subject key identifier: 2E:A1:DF:DA:3A:D6:02:5D:7F:63:7B:99:B6:63:EA:62:4A:8E:26:4C
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 01A13FA71E145C663F574BAE6BBC28CE4631
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 13:01:19 +0000
Manifest this update: Thu 15 Oct 2026 13:01:19 +0000
Manifest next update: Fri 16 Oct 2026 13:01:19 +0000
Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: 6s1dInlx7JOtww2Ul2NI1UyiPrV355oDe+jZfKE3Tf8=)
2: nLPrlrzFQJke2w0nSv6P6BPs3rs.roa (hash: lHcs6pM3E3th/X7lArO6Gv/GZjzfkX92Szx3cqmHxMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3f:a7:1e:14:5c:66:3f:57:4b:ae:6b:bc:28:ce:46:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Oct 15 13:01:19 2026 GMT
Not After : Oct 16 13:01:19 2026 GMT
Subject: CN=2ea1dfda3ad6025d7f637b99b663ea624a8e264c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:85:7b:2f:3a:e6:cc:07:c8:77:6c:2f:18:36:
5c:7a:92:60:4c:d4:48:b3:bd:29:75:a1:c7:cd:34:
ac:a2:72:36:c8:7c:a2:57:83:50:5f:04:c9:78:82:
f5:fe:36:20:72:6b:b6:06:15:d9:ac:fe:e3:f1:64:
4d:d2:43:52:f4:cd:1d:bf:09:fe:c2:d7:f1:4e:84:
1e:71:6a:0b:30:fd:a0:65:7c:c8:8e:03:ae:14:6a:
94:51:6e:63:63:b6:3e:50:9b:6b:f1:56:7e:93:eb:
ec:19:dc:8b:b7:1e:13:68:d9:53:90:e1:ca:a1:85:
f6:4c:ac:7d:b6:86:cb:79:e1:8b:59:69:83:4f:df:
18:dc:e3:ec:8b:4a:24:7d:dd:70:23:64:f4:d8:2d:
c4:53:22:e3:04:ba:90:4e:a0:3b:e4:ce:0b:d0:63:
fb:28:c8:20:ef:fd:49:d7:62:ce:fd:b4:a5:87:e1:
c5:73:60:ff:62:06:58:2b:85:b3:25:e1:f1:29:ea:
0f:10:e6:4f:80:ac:26:02:1d:9b:52:47:ec:cf:06:
a7:35:37:2e:de:27:e4:eb:e7:f4:61:52:38:dc:26:
87:18:a9:c5:4e:c8:60:e0:fd:21:a4:d4:60:b8:c7:
04:8f:d7:ee:43:cf:6e:12:42:01:aa:f9:6a:a4:86:
78:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:A1:DF:DA:3A:D6:02:5D:7F:63:7B:99:B6:63:EA:62:4A:8E:26:4C
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ec:95:f2:3c:a3:66:67:04:f5:79:cd:f9:9b:7c:90:2b:e0:
c9:4e:85:30:82:84:c6:b1:37:7d:9b:10:52:d7:47:37:93:be:
2c:21:56:82:cd:07:6d:b4:4a:78:72:01:7f:b5:5b:a1:29:ed:
77:76:be:07:f6:c3:16:64:37:22:be:31:06:62:0a:4c:15:70:
f4:8b:64:4b:c4:cd:b1:2d:81:76:f5:1a:5f:ac:82:f1:7d:3c:
15:8b:1b:73:0d:c9:c5:f5:3c:26:63:37:33:01:63:94:04:71:
41:fa:be:7b:b6:58:10:78:34:42:79:ec:32:ad:10:3e:c7:97:
9a:2c:42:b8:22:e3:ba:96:02:88:96:9e:62:4f:a4:b7:d9:8e:
69:3b:6e:42:f3:08:fd:16:c4:ff:1e:c5:b8:5c:4d:fa:e3:d4:
de:6e:02:de:83:8d:a8:17:9c:7b:eb:6d:73:44:b5:b8:b1:31:
02:b8:c0:33:8c:d5:78:4a:e7:cd:e2:02:d8:92:4e:75:22:7e:
d0:30:b7:56:f0:29:47:a0:00:7e:e4:d6:1f:bf:c4:ad:89:2a:
07:b7:ad:ae:6a:77:eb:ce:c4:6b:82:cb:d8:4e:db:d5:d2:3c:
63:8b:ed:96:62:d2:01:73:d8:a3:42:d2:4a:ee:ed:03:be:d5:
ef:b9:f5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 15:21:40 2026 by rpki-client