Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
File: DMgdB0NX3l0y-KZc2e56WFvz7G8.mft (raw, json)
Hash identifier: 5nJCwrXa6dII6IUzkvNnNpbkgH226idOh0ynKEyL/QM=
Subject key identifier: AD:0E:59:CE:53:4E:0C:7E:F0:EC:78:7B:89:40:87:55:39:97:32:DC
Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Certificate serial: 019F17C26E5754C2A64FC41B6F3E22240326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 09:00:45 +0000
Manifest this update: Tue 30 Jun 2026 09:00:45 +0000
Manifest next update: Wed 01 Jul 2026 09:00:45 +0000
Files and hashes: 1: CAvDZl0qMFdxZ8LVZocBKtdLzHI.roa (hash: EZnthEIUE9SeMIsjqwd3wJXvbqbZ76IbJjPCTSp53A8=)
2: DMgdB0NX3l0y-KZc2e56WFvz7G8.crl (hash: bU6KxLXFZOZZl0ErvY2t+3T7ABgP4kQ+AzjQCTiRxGs=)
3: SmZkHgccxI-QnnzFVIpMIGKDK7g.roa (hash: oqBJFsJvqV6Ndgclkr3Sw2YFLuZdnX/bnH7vu2GgJ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:6e:57:54:c2:a6:4f:c4:1b:6f:3e:22:24:03:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Validity
Not Before: Jun 30 09:00:45 2026 GMT
Not After : Jul 1 09:00:45 2026 GMT
Subject: CN=ad0e59ce534e0c7ef0ec787b89408755399732dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:55:74:01:af:83:5f:3f:e4:ea:2e:57:ba:5e:
10:9a:af:03:09:ff:66:84:81:27:0e:7f:59:18:be:
cc:3e:01:0f:45:f9:71:99:3e:62:2b:8f:d7:22:86:
8d:b6:1f:af:e3:43:19:c7:83:38:41:9c:9d:86:5c:
e8:16:1a:b6:54:bd:76:bc:ad:97:00:75:7e:90:1e:
98:5d:c2:ad:59:4f:6b:d3:99:2b:bf:d3:f3:41:92:
bc:2c:52:5a:91:4a:3b:5b:1a:61:f7:97:ff:30:e6:
bf:25:c1:b5:5b:82:c0:d5:e8:55:54:72:a9:bb:e1:
7f:46:28:d0:20:11:35:e8:8f:21:56:60:39:8f:7b:
20:07:0b:0a:9b:8d:15:d0:93:7f:92:2f:64:78:c9:
2f:c5:e5:47:ea:b3:2f:6f:55:eb:b4:c0:ee:f2:9b:
6b:6c:f7:4c:89:b9:eb:be:94:64:f6:9c:c2:20:fd:
04:2e:67:d7:cf:f4:60:ab:20:5a:f0:7c:f8:4c:3c:
c5:b1:ad:5f:a7:bb:b5:aa:00:5d:01:39:50:99:22:
76:22:68:cc:fa:77:72:84:a4:48:19:b8:ee:60:80:
81:80:50:de:c4:fe:ef:c0:94:3b:d5:a7:df:ba:fa:
b9:d5:5f:be:cd:49:1b:14:ca:08:e1:2a:1f:fb:df:
0d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0E:59:CE:53:4E:0C:7E:F0:EC:78:7B:89:40:87:55:39:97:32:DC
X509v3 Authority Key Identifier:
keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e3:eb:4f:7e:44:47:f1:3a:c2:af:89:98:69:4f:cd:07:b8:
0e:22:fa:ce:0c:b2:47:7e:14:42:69:56:0d:17:a6:a7:b5:e7:
81:54:57:ab:ef:a0:64:84:5a:7d:a4:f2:47:e5:3d:75:9a:a5:
b2:4b:54:bf:0d:0c:71:ec:60:bb:cb:1d:c8:44:6c:85:65:6c:
d2:8a:9b:8c:24:96:b2:2b:e8:10:ec:bd:83:68:f8:a4:e9:ed:
0b:c0:15:85:a8:c7:f3:cb:0b:48:4c:58:e5:09:fc:cf:ab:4b:
05:ce:51:39:d1:be:b9:10:0c:dd:c9:e9:f3:5c:06:46:e9:1a:
db:f0:00:44:fc:fc:a4:61:c8:98:19:9e:51:78:7a:4f:9b:20:
7b:e9:18:7c:2d:3b:77:66:57:87:9a:c9:cc:4d:29:c6:70:e0:
ce:ba:a0:62:c0:9a:1d:ce:9c:41:ed:75:64:c9:c6:d9:2f:03:
00:bd:cb:e1:bc:5b:66:35:cb:6a:04:d5:07:4c:da:3e:7a:fc:
3c:6c:dc:e9:19:6c:91:46:0c:d3:14:12:56:41:7d:d1:8f:41:
57:da:75:13:a9:34:c7:d4:f0:60:6b:2b:c6:e0:b7:09:29:8a:
8c:ec:39:82:5e:ec:e1:1e:aa:71:4c:97:e9:de:0f:d7:b0:4f:
a9:97:8d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:22:43 2026 by rpki-client