Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json)
Hash identifier: Wd5aeiDRJPtapzPUoUZsvvGUbYndaXqOII7vaaa8yFU=
Subject key identifier: 95:68:FF:DE:A4:D1:43:54:0C:26:4C:E8:0A:C1:D0:7B:D3:A6:2F:C3
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 01A001013C2027B73C0C504F48FC860F4C62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 16:00:53 +0000
Manifest this update: Fri 14 Aug 2026 16:00:53 +0000
Manifest next update: Sat 15 Aug 2026 16:00:53 +0000
Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: zNLQ/2d3+UucRcPlfxiIFTrXy2lRL6BCu+dX4wSXETU=)
2: nLPrlrzFQJke2w0nSv6P6BPs3rs.roa (hash: lHcs6pM3E3th/X7lArO6Gv/GZjzfkX92Szx3cqmHxMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:3c:20:27:b7:3c:0c:50:4f:48:fc:86:0f:4c:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Aug 14 16:00:53 2026 GMT
Not After : Aug 15 16:00:53 2026 GMT
Subject: CN=9568ffdea4d143540c264ce80ac1d07bd3a62fc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:40:07:33:2e:ea:8b:30:8d:13:b7:e1:19:25:
bf:78:83:3e:98:71:95:10:13:0e:5e:ff:c9:7b:72:
7d:dc:94:20:86:27:c3:91:3a:cc:b2:ea:b5:eb:34:
e8:16:c9:0f:47:9f:a3:49:7d:9e:a4:39:6c:9a:52:
40:c4:63:52:d7:81:d5:cd:2a:7f:5c:9d:eb:3e:a6:
7b:80:87:6f:26:45:37:99:37:0d:27:01:de:d3:8a:
ed:3b:3e:d1:65:c1:e0:19:f0:07:60:04:f2:17:22:
e5:93:12:9d:1e:3d:3a:4d:4c:21:26:76:00:d5:f6:
b2:34:91:64:1b:d9:4b:41:8a:71:58:be:77:8f:5d:
04:20:94:d3:0e:98:30:8c:58:3a:16:5b:cc:87:c0:
ff:56:2f:f4:61:3a:e9:44:ab:42:ef:aa:34:27:2b:
6b:bb:b9:0c:0a:c2:d2:f5:8e:cf:eb:ec:ea:bc:e6:
8c:9b:9a:42:d4:ac:53:bb:4f:ea:da:2c:92:4b:eb:
20:f9:8b:ae:62:41:0c:9f:77:9d:b3:c7:32:15:1a:
17:ed:be:ee:5b:fd:a1:19:5b:a6:c3:aa:54:aa:96:
a5:7d:6b:86:64:74:04:6e:f3:58:6c:10:e2:b1:95:
4f:b3:6e:b0:d8:58:eb:8f:6d:57:3c:7c:fa:ca:58:
2a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:68:FF:DE:A4:D1:43:54:0C:26:4C:E8:0A:C1:D0:7B:D3:A6:2F:C3
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ba:5a:f8:8b:59:b5:a7:89:e5:97:2a:47:63:9c:be:37:8a:
41:ad:cb:e9:a4:b4:d2:14:bf:22:94:ed:6f:a7:7c:1a:26:10:
72:77:ed:1f:5f:03:dd:f2:c5:cc:4a:6f:88:4e:04:07:aa:1c:
1b:51:28:e9:fc:99:58:cc:84:93:c1:13:9d:06:81:28:34:55:
6a:93:70:75:6e:c7:53:88:6c:d8:85:2b:89:9b:5d:ae:1a:f2:
8a:13:2d:85:46:20:46:0d:2d:da:47:7e:78:26:e0:e1:2d:f1:
e9:db:41:03:3e:98:6e:74:39:3a:4b:4c:e7:b5:f7:dc:52:d5:
36:8a:e7:26:32:d3:2e:51:95:01:fb:d8:d9:9d:69:7e:d1:bf:
16:09:95:5d:52:eb:b6:e1:8e:01:79:be:40:b8:ec:e2:ff:1c:
19:d7:30:fd:73:9a:77:05:0d:a7:2a:24:64:0a:06:32:b0:c0:
9e:b0:53:36:3e:b5:1d:8d:97:60:a3:a1:66:c9:cd:b7:b2:74:
23:6a:9d:5f:11:5b:cd:46:bc:a8:69:bd:95:61:e9:7a:85:06:
ab:05:30:6c:cb:72:ea:e3:98:84:cf:39:bd:a5:c3:33:9d:e2:
03:1e:59:99:6d:f4:c1:15:3a:36:4e:74:6b:aa:5a:c5:01:0a:
01:e8:14:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:20 2026 by rpki-client