Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: aQUda0xTwlDsP2wX4B4tzUpIrgIWAc66QD03ZIV9M+I=
Subject key identifier: 09:6A:AE:02:2C:B0:DE:D2:7B:74:1C:F7:88:B2:84:BA:5F:C5:18:25
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 01A00213F7605ABEAD00F4773AFC143A065F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 21:00:57 +0000
Manifest this update: Fri 14 Aug 2026 21:00:57 +0000
Manifest next update: Sat 15 Aug 2026 21:00:57 +0000
Files and hashes: 1: 0f-a9_GN4BlFPHzpxP1ErjNcYpw.roa (hash: liGbjhGL+F+gsqi1YSPCU6zeplSqGVUh3nmEpRRgfOY=)
2: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: 7fjHctX2/dDH8jx0y07yxzAGUHJtYZHv+hhVkR+4MOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:13:f7:60:5a:be:ad:00:f4:77:3a:fc:14:3a:06:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Aug 14 21:00:57 2026 GMT
Not After : Aug 15 21:00:57 2026 GMT
Subject: CN=096aae022cb0ded27b741cf788b284ba5fc51825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:89:9c:ee:10:b3:15:18:6f:63:88:d5:47:03:
cc:fa:29:39:2f:98:37:ad:80:26:35:f6:91:c7:fd:
70:67:0d:b0:4e:fd:1e:6f:80:cb:a8:28:6f:e9:5b:
cd:03:b0:f1:e8:95:18:a1:e1:33:14:2a:20:40:fc:
a3:8a:c8:d3:47:1e:96:f7:98:a2:aa:71:cf:52:76:
ae:a7:bf:2e:20:48:b6:cf:dc:18:cf:a8:0a:79:0f:
54:4a:f3:1d:21:ec:f6:ee:4e:04:5a:25:ae:e2:5e:
a3:70:22:68:0b:9a:db:ed:76:77:2f:e4:24:a3:67:
a2:26:50:e8:62:f8:22:f4:78:9e:bb:42:16:6b:68:
61:c5:ec:b8:b2:de:df:77:12:90:c8:31:8e:ef:44:
57:04:26:ad:f4:1e:cc:10:24:c7:52:dd:b6:b0:a0:
16:8b:00:8f:c7:f9:78:2b:53:a0:86:d9:02:8d:61:
64:d9:21:e3:84:a0:5a:90:a4:09:a2:8a:bf:95:82:
79:fe:0f:87:8b:fe:50:86:db:1e:93:51:7c:e9:c5:
82:96:c4:b1:b1:f3:3e:b2:e5:f9:20:d6:5f:2d:84:
ae:4f:b1:07:de:ea:d4:a4:9e:cf:f3:11:1e:62:65:
2b:d1:bb:02:3b:59:61:f5:bc:49:db:90:b6:0e:a4:
78:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6A:AE:02:2C:B0:DE:D2:7B:74:1C:F7:88:B2:84:BA:5F:C5:18:25
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:44:a6:f5:e1:46:13:29:2d:68:02:d6:2f:94:d3:18:f2:aa:
12:0f:cb:7b:93:30:4b:35:7c:ef:28:ef:3f:d1:95:d8:6c:01:
4c:e4:d3:d3:1b:b7:8c:50:79:f1:7e:3e:24:aa:04:d6:08:7f:
5a:d3:7c:45:f4:6a:1f:ad:0d:21:34:d7:6b:d2:c9:f0:38:ee:
18:6e:88:82:12:5c:37:dd:f8:b6:98:c9:ff:45:4c:20:93:8b:
b3:81:33:8a:33:ec:5e:e6:e4:52:93:2f:c3:d7:70:3f:0e:b9:
6c:34:7e:16:54:90:b4:e5:02:df:a4:89:e0:01:de:83:83:59:
24:4c:ae:a4:57:1f:35:29:94:f3:43:d2:42:38:7b:73:37:73:
5d:4c:f2:14:98:36:9f:24:16:60:3e:64:41:9f:e6:a8:f0:bd:
09:36:87:9b:a0:42:2a:f4:b7:dd:bc:1a:40:7e:bc:a4:97:c8:
cf:3b:22:da:34:db:b0:c9:34:d3:8a:88:09:f0:63:18:3f:60:
f9:e0:6c:0f:f2:1f:6a:4a:85:0b:08:f5:b3:28:04:51:24:2b:
cc:4a:04:5e:02:dd:cf:42:72:6b:df:2f:0c:ae:98:ff:99:ec:
09:e3:e9:de:0c:03:8e:66:f0:94:d0:9a:7f:e7:16:7b:c6:14:
39:7a:2f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:19 2026 by rpki-client