Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
File: DMgdB0NX3l0y-KZc2e56WFvz7G8.mft (raw, json)
Hash identifier: 7cez+rxQibaQ2+SYX7TmsB4oNTT3hyw3xiPtu70kOxk=
Subject key identifier: 8A:51:1D:04:2B:B4:15:E2:B0:29:D8:85:5F:91:AB:D7:40:F7:0B:F0
Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Certificate serial: 01A0016FED6CC6C161358E9D2804E1EE7FD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 18:01:47 +0000
Manifest this update: Fri 14 Aug 2026 18:01:47 +0000
Manifest next update: Sat 15 Aug 2026 18:01:47 +0000
Files and hashes: 1: CAvDZl0qMFdxZ8LVZocBKtdLzHI.roa (hash: EZnthEIUE9SeMIsjqwd3wJXvbqbZ76IbJjPCTSp53A8=)
2: DMgdB0NX3l0y-KZc2e56WFvz7G8.crl (hash: HY7yBTNCjMCnvcKt+roqPhtjGtqQdPEPEK3Wl2gtRsQ=)
3: SmZkHgccxI-QnnzFVIpMIGKDK7g.roa (hash: oqBJFsJvqV6Ndgclkr3Sw2YFLuZdnX/bnH7vu2GgJ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:ed:6c:c6:c1:61:35:8e:9d:28:04:e1:ee:7f:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Validity
Not Before: Aug 14 18:01:47 2026 GMT
Not After : Aug 15 18:01:47 2026 GMT
Subject: CN=8a511d042bb415e2b029d8855f91abd740f70bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9c:3d:d2:82:eb:50:86:e8:74:f1:a6:2b:1c:
55:1f:c5:f2:54:c7:58:a7:bb:e2:b5:74:06:02:4f:
50:0e:3b:06:6d:6c:5e:c1:30:60:88:0a:41:ab:47:
7b:f7:02:00:15:db:d0:19:7f:bb:54:7f:d1:e9:84:
36:9c:a3:06:cd:a4:e1:89:24:3f:90:2c:ca:ea:d0:
96:cb:d0:8e:e1:76:2b:c5:49:68:3e:12:0b:fd:b0:
fb:03:aa:cf:82:32:26:ef:a5:15:34:80:e1:f1:12:
74:82:a7:af:f9:45:23:fe:ed:ef:b0:38:35:c5:9b:
e1:02:fc:13:8b:16:22:7c:ed:e0:db:18:d2:f4:a6:
42:90:ee:43:78:bb:e9:10:11:4e:db:c2:5c:cc:07:
1e:1c:7d:49:ee:0d:05:fc:26:66:9a:ee:d8:c6:c2:
fb:1a:91:60:66:d8:4e:9a:72:1a:31:c8:87:00:b1:
ac:cd:33:b4:3c:d7:a5:27:78:18:aa:b9:6f:89:f6:
12:27:3b:59:d6:58:32:bf:f0:9c:69:fc:cd:ec:e8:
f1:cb:33:0e:0e:3e:18:c5:21:06:90:d5:ba:06:23:
66:7e:c1:a1:b1:6e:9c:98:dd:36:6e:be:b6:ac:ce:
d4:8a:b5:43:be:80:f0:24:64:f7:8d:8c:f4:7d:38:
e6:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:51:1D:04:2B:B4:15:E2:B0:29:D8:85:5F:91:AB:D7:40:F7:0B:F0
X509v3 Authority Key Identifier:
keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:d2:9a:8e:be:f0:5d:83:2c:ab:78:bd:e8:72:77:99:33:9c:
31:e4:01:86:9b:08:d2:7c:b0:58:cd:8c:d4:a4:92:b9:bf:a6:
d7:ac:3d:14:b8:7e:9b:4d:90:fd:21:aa:9d:e2:75:9c:dc:8f:
9d:7d:60:ae:a9:de:8e:6b:43:eb:59:95:38:04:95:d0:2a:ea:
39:00:f6:21:f7:9a:e1:b3:e2:9d:57:c8:d8:80:13:0f:a8:ef:
38:17:3f:51:2d:5f:95:8a:a9:72:3d:7b:08:e0:46:57:48:82:
1a:d1:b5:a4:87:8e:79:35:41:82:2f:ef:66:f1:67:5e:a6:ea:
fd:51:0b:89:f8:4b:57:48:71:5e:ed:9b:61:6e:ab:f9:75:77:
82:43:fc:69:78:dd:b0:6e:1a:6d:0f:9a:f3:d1:6e:69:f1:4e:
e9:27:85:9a:76:6b:f9:1e:8f:16:be:89:7b:6d:28:53:4c:8e:
6a:62:72:ae:3a:9f:ad:cd:d2:45:b1:e1:96:ac:b0:14:62:6e:
93:bc:96:10:1f:e7:92:e2:60:4b:58:c9:45:36:5e:2f:a1:8b:
a0:30:52:2a:58:46:b6:d1:6f:b3:0e:3d:51:7e:ed:d7:14:11:
cf:a6:16:45:a2:5b:2c:7e:71:c2:31:39:b9:b9:60:7b:37:cc:
72:b8:dc:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:11 2026 by rpki-client