Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json)
Hash identifier: 3KQlab9HZwJb1oVmgjeOwiCIbkYsSDrBUnlCkpKjIk8=
Subject key identifier: 96:F7:6B:F7:46:22:13:6D:10:64:43:4C:BF:3A:6E:07:FA:30:79:70
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 019F1943CC093A366CB41B86197A8EC2F106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
Manifest number: 198A
Signing time: Tue 30 Jun 2026 16:01:41 +0000
Manifest this update: Tue 30 Jun 2026 16:01:41 +0000
Manifest next update: Wed 01 Jul 2026 16:01:41 +0000
Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: JnWpErxPWTu+FtBuc3A+zbBdgzi5SVxgh+XUz3sZHsg=)
2: nLPrlrzFQJke2w0nSv6P6BPs3rs.roa (hash: lHcs6pM3E3th/X7lArO6Gv/GZjzfkX92Szx3cqmHxMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:43:cc:09:3a:36:6c:b4:1b:86:19:7a:8e:c2:f1:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Jun 30 16:01:41 2026 GMT
Not After : Jul 1 16:01:41 2026 GMT
Subject: CN=96f76bf74622136d1064434cbf3a6e07fa307970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:b1:24:5f:dd:6e:28:b9:6b:07:93:e6:fe:f1:
1e:6f:3b:5d:10:ae:f8:82:73:a1:a3:9d:b4:a8:d2:
3f:90:da:77:7d:e8:7d:c6:85:f7:6d:de:8f:27:a8:
0a:96:d8:d9:9c:06:0f:9f:06:c7:0d:28:d1:24:71:
23:a4:bc:15:42:6c:bc:63:49:ac:7b:3b:1e:83:79:
ec:a8:b4:32:77:c6:1b:12:ff:1d:4f:65:6a:c2:d7:
0c:39:44:ce:4e:e6:42:ff:68:7d:ef:80:8f:c1:b2:
26:8f:db:57:6f:74:e5:b0:63:93:06:f4:b8:8e:3b:
22:95:c5:e4:90:73:ce:5f:e5:8e:a7:56:db:5f:71:
9a:54:3e:e6:da:4e:e5:49:19:5e:4e:02:1e:6d:59:
15:ae:8f:48:ba:c1:7c:e6:dc:c1:6f:85:e8:16:35:
01:8f:ac:65:67:4c:7f:b1:a2:09:09:13:04:5b:56:
cb:9e:97:bd:39:26:fa:48:7d:a4:d6:d8:34:e6:3a:
b6:4c:9b:64:d7:78:ff:71:77:d7:26:fb:d2:76:ca:
de:05:93:d1:da:32:48:78:ef:5a:56:9a:eb:96:35:
3f:f4:2d:98:53:c0:73:08:fc:2f:91:4d:65:90:e0:
63:95:87:65:67:f6:b3:76:ac:96:c7:e2:9b:90:d5:
10:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F7:6B:F7:46:22:13:6D:10:64:43:4C:BF:3A:6E:07:FA:30:79:70
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1c:da:e6:36:ff:c0:2d:38:ca:a1:90:61:26:4e:9e:08:43:
34:10:2a:f7:22:96:bd:89:3d:f7:56:91:1c:8c:2d:56:35:cd:
ce:a2:07:b7:28:62:1f:a2:ab:78:ac:99:57:40:fd:85:11:e1:
b9:15:4a:31:d5:98:7d:90:bd:28:93:ad:f1:1e:f0:cf:ae:8b:
dd:fd:cf:e4:28:22:f5:08:7c:de:7e:85:3d:6d:e9:6a:2b:3c:
09:cd:42:26:1a:16:27:c0:9d:b1:87:55:5a:2c:dd:94:d9:b9:
9f:4f:ad:28:67:90:b2:15:4b:9d:54:aa:fb:84:ad:ab:9f:b9:
d7:f4:87:d6:79:06:4d:c0:59:88:b5:10:a7:69:d1:31:e8:0e:
50:e1:3e:26:ad:10:96:1b:04:00:5c:73:c2:2e:85:aa:c5:df:
53:10:b7:a1:9c:35:74:14:ce:dd:9e:eb:9b:83:72:b7:34:9b:
50:6a:1d:84:0d:93:bd:f6:b3:95:8c:91:bd:a5:d9:7c:fd:75:
94:f7:68:7e:28:06:2c:bd:9e:b3:f6:e9:f1:a9:1f:86:93:3c:
05:fd:21:ed:5d:ea:68:91:d3:fe:7f:b0:76:9c:f3:e2:93:66:
8b:c3:6c:8e:40:b2:62:5a:cf:d1:10:ae:a1:a6:d7:5d:31:24:
6e:0d:b3:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 19:18:29 2026 by rpki-client