Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: DqS5r9H047UUGjFlgd4Gcp+6smQ+mVBAAj1g+L5TmVM=
Subject key identifier: 88:FC:AB:5F:55:69:8E:26:82:A6:68:8C:25:81:AF:0B:72:1C:0E:19
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 019F129C71579C0C4771E7FB27D6B1FE0BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 1986
Signing time: Mon 29 Jun 2026 09:01:10 +0000
Manifest this update: Mon 29 Jun 2026 09:01:10 +0000
Manifest next update: Tue 30 Jun 2026 09:01:10 +0000
Files and hashes: 1: 0f-a9_GN4BlFPHzpxP1ErjNcYpw.roa (hash: liGbjhGL+F+gsqi1YSPCU6zeplSqGVUh3nmEpRRgfOY=)
2: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: OCLZe1s9Z1Dq05kDSqdLAkBDbQiGXL3L2wn+EIXwhXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 09:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:9c:71:57:9c:0c:47:71:e7:fb:27:d6:b1:fe:0b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Jun 29 09:01:10 2026 GMT
Not After : Jun 30 09:01:10 2026 GMT
Subject: CN=88fcab5f55698e2682a6688c2581af0b721c0e19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:1a:06:ca:39:71:15:b8:87:5e:7a:81:3a:9c:
64:4a:97:c1:fa:fb:4d:be:bb:14:1b:51:47:eb:f4:
24:fe:02:82:34:6e:c0:14:8e:4e:42:3a:f3:ea:d5:
8f:c9:7b:b5:21:fe:84:6e:94:fe:ff:67:d3:48:ca:
41:58:a5:db:0e:3d:b7:84:84:27:fa:11:2e:b1:d8:
81:39:da:60:7e:ac:fb:e4:9f:87:9d:f4:14:02:16:
92:95:0a:ed:d9:a7:95:e9:b7:b4:80:9a:bd:22:79:
eb:a9:a6:8e:7d:fc:fa:36:a7:f2:91:3f:1e:ec:c8:
9d:93:bd:f9:8e:7d:73:86:8e:54:a5:4b:70:ac:75:
fc:b2:c8:05:48:fe:61:a0:f2:13:29:11:ce:08:f8:
35:b5:46:f6:d6:cc:6c:ab:51:fa:4e:be:68:13:0e:
7e:2f:9a:54:3d:98:2a:ba:f3:f4:be:83:c2:eb:7a:
19:31:91:3c:0e:44:7a:50:46:50:99:38:4b:53:a8:
d0:58:55:1d:f9:cd:b5:b2:9f:13:bd:b4:bd:b5:c5:
c2:d4:3e:c3:9a:fa:ed:10:e9:f9:ee:eb:37:4d:8e:
ee:c9:ef:a7:b9:5c:54:89:0c:a2:ea:e3:b3:f3:99:
6a:20:e5:fc:b4:12:7d:3d:ea:c0:f0:31:57:1e:1f:
b0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FC:AB:5F:55:69:8E:26:82:A6:68:8C:25:81:AF:0B:72:1C:0E:19
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:15:c3:55:c7:d1:0f:1a:0a:36:84:e9:df:d6:7d:bd:2c:1d:
13:05:da:3b:46:fc:5a:14:a2:f9:05:e0:52:13:b7:68:3f:10:
8a:73:96:0c:14:45:ba:e5:db:ee:f4:71:85:67:9d:48:45:ee:
65:6c:e8:bd:99:bc:e2:36:11:bf:66:73:18:23:6b:7f:bd:ee:
73:75:25:18:6b:5a:b5:e8:c6:ab:9e:bb:9a:37:97:d1:b4:3e:
f4:c0:86:a1:66:5f:61:36:33:bf:eb:62:de:22:b4:fe:52:a2:
0f:32:2e:b9:b6:d2:8f:be:60:06:72:1d:61:ed:57:59:28:a1:
f0:ca:63:b2:65:c3:46:e5:c3:75:32:c8:5d:f2:aa:b7:e6:8f:
da:59:d8:5a:30:f0:a2:c1:19:dc:bc:b2:94:9f:84:bb:be:7d:
a5:5e:22:bf:ac:19:18:c8:e2:dc:2e:8e:ac:50:f5:02:69:58:
72:e0:4b:bb:08:03:0c:c8:a2:cf:b5:ce:40:d2:e9:4e:97:c1:
0c:3b:79:56:4b:ec:11:74:49:87:14:b2:4e:2f:2e:63:77:e8:
c4:df:62:2f:af:90:c7:51:75:44:d3:a0:ae:da:e4:9a:e8:fb:
76:0b:95:fc:94:63:ee:28:87:c7:17:fb:c1:f6:38:53:cf:a4:
f2:3d:ba:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 18:34:03 2026 by rpki-client