Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
File: DMgdB0NX3l0y-KZc2e56WFvz7G8.mft (raw, json)
Hash identifier: pGDhlvO1Ij/TM8ZqZygpvMnkbfbhRD8EZqomXui7aYk=
Subject key identifier: 7B:82:20:D1:88:F6:37:AF:3A:8D:1E:61:3F:94:CB:53:E0:FE:D2:0A
Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Certificate serial: 01A14015E656D6BE136E93687D3FA5CB7E94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
Manifest number: 1AA7
Signing time: Thu 15 Oct 2026 15:02:19 +0000
Manifest this update: Thu 15 Oct 2026 15:02:19 +0000
Manifest next update: Fri 16 Oct 2026 15:02:19 +0000
Files and hashes: 1: CAvDZl0qMFdxZ8LVZocBKtdLzHI.roa (hash: EZnthEIUE9SeMIsjqwd3wJXvbqbZ76IbJjPCTSp53A8=)
2: DMgdB0NX3l0y-KZc2e56WFvz7G8.crl (hash: rDk/ZqwbAs/9lqtdQptAUx4s8gQkOk2AYBtMPTrkpx4=)
3: SmZkHgccxI-QnnzFVIpMIGKDK7g.roa (hash: oqBJFsJvqV6Ndgclkr3Sw2YFLuZdnX/bnH7vu2GgJ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:15:e6:56:d6:be:13:6e:93:68:7d:3f:a5:cb:7e:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Validity
Not Before: Oct 15 15:02:19 2026 GMT
Not After : Oct 16 15:02:19 2026 GMT
Subject: CN=7b8220d188f637af3a8d1e613f94cb53e0fed20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:20:37:9e:05:d5:35:64:a0:9a:ba:ec:54:
be:37:e1:b6:55:47:8d:10:37:54:75:c8:f0:59:d1:
07:bd:7a:c7:c5:1d:a5:ad:99:01:3c:b3:1f:ef:2e:
6a:a1:0c:7f:24:ba:69:c9:be:4d:dc:37:3e:21:35:
9c:e3:0d:d5:e0:e9:3a:3a:e2:06:3f:7a:d6:b0:21:
12:5a:c5:3c:c0:fc:94:bf:a6:d1:12:d3:cc:c7:ad:
9b:4d:f1:0c:2b:4e:34:e4:79:ea:43:96:9e:0a:9d:
4f:ce:b1:f3:6e:6b:bd:d7:99:e2:04:4b:a6:a4:2c:
7f:d3:d0:5d:bc:f3:2b:4e:5b:d2:7b:f4:47:f1:52:
1b:bb:6d:8f:7c:d5:61:f8:67:fc:27:00:6b:ac:2c:
74:85:df:a5:d6:60:82:d1:ee:d3:ce:9a:83:04:77:
09:ab:62:f3:37:a2:ba:44:aa:50:17:8d:20:d8:ae:
2e:8c:9b:1d:54:bc:61:ba:9f:6e:ca:2a:a7:8e:5a:
03:0f:90:a5:ed:bd:a2:0b:51:64:ec:82:16:0f:f3:
47:46:11:1e:d3:1b:1c:e4:af:4b:f3:0e:4d:0e:08:
50:1f:e5:7a:14:34:85:2d:47:4f:d9:a1:c0:69:1b:
e2:1a:65:50:c4:73:22:bf:e9:0d:96:f3:80:59:b3:
ca:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:82:20:D1:88:F6:37:AF:3A:8D:1E:61:3F:94:CB:53:E0:FE:D2:0A
X509v3 Authority Key Identifier:
keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:0c:27:91:36:f4:48:24:be:c3:64:ba:85:f3:8b:33:35:be:
fb:99:39:bb:85:41:ea:7c:2a:4c:af:74:e1:6f:c5:55:fa:7b:
27:07:d2:24:4e:08:1a:25:9e:bc:dc:56:b9:3e:d7:a7:24:5d:
1d:ad:2a:b8:cc:b9:75:7a:a9:30:49:ad:7a:0e:17:23:0d:e7:
7a:55:69:16:1d:15:73:f0:34:2a:43:a9:ae:b2:21:d2:8d:16:
d2:f0:c7:6f:dd:c9:d3:f7:39:11:03:c7:99:77:58:4a:22:40:
8a:0d:91:fd:e5:f5:27:f8:35:a6:37:45:52:24:14:f3:3e:85:
82:a7:ca:39:db:05:67:00:fd:57:cd:b3:e4:a5:18:0e:dc:1a:
46:76:9c:2f:c0:6f:76:e6:93:a3:18:25:35:5b:22:d8:6c:e0:
53:86:d8:e8:b8:04:80:fd:31:3a:b2:ab:91:50:f7:80:50:b9:
77:4d:fd:f1:b8:d9:15:d7:ae:82:46:83:68:da:37:19:85:01:
7f:c6:0f:8a:58:d1:72:5c:12:39:a4:9c:4d:9c:8d:d0:59:37:
fb:91:a3:dd:2f:cb:e6:76:1d:d5:c3:10:01:12:49:67:e5:94:
11:3f:23:e7:0d:6c:8c:8d:8a:d8:7a:aa:d2:fd:52:db:12:8a:
c3:5f:54:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 18:19:58 2026 by rpki-client