Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
File: DMgdB0NX3l0y-KZc2e56WFvz7G8.mft (raw, json)
Hash identifier: tXKNK4llrF6qo1mncwmcRDO1OQI6/219v1KFhTISjA4=
Subject key identifier: 24:DA:84:A1:7E:B1:B3:C7:6A:AF:1D:7A:9B:FE:CE:E4:66:78:62:64
Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Certificate serial: 019E2FCDD3DD2781052CE174962D83B924C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 08:01:18 +0000
Manifest this update: Sat 16 May 2026 08:01:18 +0000
Manifest next update: Sun 17 May 2026 08:01:18 +0000
Files and hashes: 1: 9ZpkTQXpmkfvpR0E4XJe3RUF224.roa (hash: 03q2A8HDE0gao07Rw7lfTux7UqjzMWOiEnt7Qllp1sU=)
2: DMgdB0NX3l0y-KZc2e56WFvz7G8.crl (hash: VV3B+scqnsYIcyEfBxNHxX95OFMliklRA9v5gvZALkY=)
3: SmZkHgccxI-QnnzFVIpMIGKDK7g.roa (hash: oqBJFsJvqV6Ndgclkr3Sw2YFLuZdnX/bnH7vu2GgJ5o=)
4: u3HrLTERJi2B9n5xQ0BiK-cRiWU.roa (hash: VW52fyk1URQcXo8jkObs2fsXbuZN/DcsMh4JuWlfK+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:d3:dd:27:81:05:2c:e1:74:96:2d:83:b9:24:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Validity
Not Before: May 16 08:01:18 2026 GMT
Not After : May 17 08:01:18 2026 GMT
Subject: CN=24da84a17eb1b3c76aaf1d7a9bfecee466786264
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3c:d4:fb:69:cf:d0:f4:24:59:78:5a:88:f5:
15:4b:ae:ab:89:a3:d8:17:b6:bf:3f:da:9d:61:94:
c4:ae:83:ac:ae:6f:46:47:76:44:29:8f:65:a4:cd:
9f:b0:ce:bf:7c:f5:77:c2:93:1c:ef:bb:95:f8:c6:
45:95:36:e2:c7:ff:78:e8:6a:f3:64:0a:9c:ca:17:
58:09:a1:80:01:e2:53:ae:50:4c:b4:ad:6a:99:e4:
09:59:31:3f:4f:5a:ed:c5:69:0a:42:73:ed:60:c1:
00:73:91:94:46:38:af:2b:99:17:e5:d8:58:3e:a5:
b8:ad:b0:b8:5c:a1:06:45:a2:13:3c:ec:31:2b:18:
a6:55:97:8d:ed:b4:4f:dd:35:01:52:01:58:e0:51:
45:69:0a:1c:78:08:51:d1:11:f7:d3:2e:f0:0a:b1:
2e:97:24:ad:59:8d:f3:87:8b:a3:34:fe:66:f1:66:
74:e0:62:d2:28:c4:da:3e:e6:b8:ff:d9:83:35:55:
3b:34:cf:94:9f:1f:6a:61:6a:7c:27:32:b7:67:f7:
17:e8:d1:d3:7b:e0:b8:b1:d9:80:6b:09:c3:bb:dc:
f0:1a:96:a5:7c:c2:de:e4:ef:32:97:6c:9a:e9:4c:
6c:c9:40:76:4f:0b:9a:ff:7b:14:8c:06:10:d8:18:
0d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:DA:84:A1:7E:B1:B3:C7:6A:AF:1D:7A:9B:FE:CE:E4:66:78:62:64
X509v3 Authority Key Identifier:
keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:85:7e:df:1a:a8:6c:2e:17:33:8b:d1:82:5f:03:05:95:e1:
78:09:62:21:c5:4e:c6:3b:d0:e1:cf:00:88:5c:a7:8a:36:7a:
88:08:bc:f2:af:47:05:b4:f1:dc:c0:d6:c8:97:37:1c:3f:09:
53:b8:0f:3b:2d:3a:f5:0a:c7:f5:97:1b:5b:81:28:38:01:93:
f1:10:64:f4:c0:97:1c:2f:02:5f:d8:f9:c6:38:04:e3:bd:47:
67:08:0c:4e:fe:3d:00:14:34:b1:40:09:f2:86:81:f0:a6:f9:
3d:58:c1:be:ad:ff:e6:8b:cb:7f:4c:79:82:36:44:e3:4c:8a:
ef:5a:df:26:bf:21:ff:2f:3b:59:a5:1b:89:39:44:7f:42:5d:
fd:d8:53:18:d1:7d:e7:62:68:91:be:db:55:21:94:7b:ab:5c:
f3:97:1a:0e:eb:ea:c7:88:24:82:b2:a9:60:f3:f9:fc:af:55:
73:b4:b0:4e:4b:05:85:28:e1:90:f8:b9:d4:7c:0d:46:58:23:
be:66:ed:44:bf:16:0d:c8:16:5b:7d:3e:db:31:85:b2:db:16:
b5:d8:2e:8a:96:76:68:b2:32:5c:cf:d2:d4:83:67:93:ed:d7:
cc:fc:d9:8a:d6:e1:cc:cc:d3:a8:47:e1:97:6d:7f:3e:ab:d3:
a1:ad:62:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:37:38 2026 by rpki-client