Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json)
Hash identifier: XBnUZRhPKhFyoi6jiqd3kFbFSvJuonUA7mnaDjCBQSE=
Subject key identifier: 39:EE:8A:CB:0A:C4:2A:AF:9F:BD:83:7F:FD:AF:B9:C4:50:64:0C:24
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 019D386620AEB6DEEDD73B65B5C664F72DC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 07:01:50 +0000
Manifest this update: Sun 29 Mar 2026 07:01:50 +0000
Manifest next update: Mon 30 Mar 2026 07:01:50 +0000
Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: g96tit5UQXBj7/52S275oS0B2rTv3rGCM8dgR1IiKrw=)
2: nLPrlrzFQJke2w0nSv6P6BPs3rs.roa (hash: lHcs6pM3E3th/X7lArO6Gv/GZjzfkX92Szx3cqmHxMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:20:ae:b6:de:ed:d7:3b:65:b5:c6:64:f7:2d:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Mar 29 07:01:50 2026 GMT
Not After : Mar 30 07:01:50 2026 GMT
Subject: CN=39ee8acb0ac42aaf9fbd837ffdafb9c450640c24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:30:d3:55:14:a9:79:83:e7:16:7b:5e:00:5d:
3e:b5:87:97:6f:c6:ed:fd:db:a9:5e:71:fa:e8:83:
2b:77:2e:ab:5c:25:e1:a6:18:ce:db:57:8c:c9:13:
47:bd:1e:e8:cd:9c:82:df:be:b7:0e:01:01:35:51:
93:75:7c:15:58:05:59:09:26:37:73:4c:02:df:6e:
1e:fc:47:4e:fe:eb:9e:88:8a:59:65:5f:d9:ad:ac:
77:fb:ac:2a:a1:92:83:6e:eb:8c:39:a7:c7:13:2f:
d0:f4:bc:d4:ba:4d:50:49:45:f4:9e:3b:b4:67:62:
3b:81:b3:61:fb:eb:d2:54:3a:5d:95:1c:43:aa:7e:
fc:b7:3e:3f:ce:ca:64:3f:6e:fd:ea:df:88:59:5e:
e5:69:0f:87:56:0a:82:74:d4:13:56:36:61:5a:b9:
e9:2d:af:be:ad:9e:43:a7:76:be:45:be:b9:5c:e7:
7c:d9:b7:ea:82:f2:3c:da:c7:24:8d:b9:f8:7e:3d:
f9:f2:54:b7:40:c3:a5:44:cc:d1:3d:e8:b9:21:34:
4e:ab:9b:81:01:1c:c6:34:dd:ef:02:43:da:83:3d:
46:d8:fb:e1:74:dd:4b:fe:07:89:0f:07:3f:9c:45:
0b:6c:1b:d3:8f:f5:1f:fb:a3:d3:ee:04:75:5c:e1:
8c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EE:8A:CB:0A:C4:2A:AF:9F:BD:83:7F:FD:AF:B9:C4:50:64:0C:24
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:3e:18:04:a0:c0:16:ad:94:98:2a:f4:c9:9e:f3:d2:d1:06:
25:6e:ab:ee:f5:1a:b2:92:f1:ba:2f:7a:00:25:7b:33:09:da:
4a:26:1a:18:59:d5:ec:b7:8a:c9:31:7a:35:f2:68:51:e7:d8:
3f:f0:45:b1:1a:53:76:d6:d9:3a:f8:e8:0b:b2:2e:72:35:ce:
e2:48:c8:24:41:4a:f5:08:c0:a0:59:44:e0:e4:4b:b0:d6:f9:
20:fa:86:e5:dc:e0:ad:5d:b1:c4:ed:44:d3:26:49:48:c8:36:
10:46:f9:04:69:0f:db:34:de:27:c1:cc:8c:30:ba:f2:46:09:
ba:c3:63:70:24:7a:e6:d6:a9:ae:5d:aa:a0:44:9c:54:09:9a:
30:0b:5f:1d:64:8d:81:12:e7:d0:0b:b0:29:4e:3d:72:86:22:
0f:a5:c9:fd:bc:4f:55:05:46:e3:e5:c5:d8:2c:17:b7:58:ce:
17:0a:7a:48:55:76:54:4f:d2:0a:cc:3d:24:2e:2b:9a:6b:2e:
52:88:b7:d8:5f:fa:a2:7c:c6:0e:f3:80:a5:da:84:ef:af:2a:
d3:b5:5a:5e:69:73:1e:b9:56:1c:82:ec:d4:ac:95:fd:0d:cd:
05:78:a1:84:77:6d:71:50:55:40:60:1a:6d:59:d1:82:a5:a8:
9d:85:ec:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:45 2026 by rpki-client