Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: ia4N48EK9O0lS5J9/v+Q3rIYDZ+4K0jCj7EdaJqKz4E=
Subject key identifier: 98:E5:CE:E7:85:59:88:BA:39:46:27:4A:04:58:06:52:BC:DB:BA:95
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 019D3789767A2102289DBEE40D0ED4676067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:00:48 +0000
Manifest this update: Sun 29 Mar 2026 03:00:48 +0000
Manifest next update: Mon 30 Mar 2026 03:00:48 +0000
Files and hashes: 1: 0f-a9_GN4BlFPHzpxP1ErjNcYpw.roa (hash: liGbjhGL+F+gsqi1YSPCU6zeplSqGVUh3nmEpRRgfOY=)
2: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: BRFDgKVBhI8lgBeu1g3DuCpmmLOhFBH2/Gcf6CE6d6k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:76:7a:21:02:28:9d:be:e4:0d:0e:d4:67:60:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Mar 29 03:00:48 2026 GMT
Not After : Mar 30 03:00:48 2026 GMT
Subject: CN=98e5cee7855988ba3946274a04580652bcdbba95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:1e:d0:6a:5d:de:c7:b3:42:81:ec:03:3a:bd:
3d:26:a1:86:e6:1f:4a:42:b9:a3:67:ad:11:f7:e5:
e3:a0:1b:40:2a:0c:ea:f8:f1:23:e7:3b:f7:44:7d:
27:32:5b:1e:f1:eb:91:9e:a4:1f:63:29:58:ab:64:
f2:b0:b8:77:4c:f2:d6:de:21:4b:9e:6f:4d:64:e3:
43:0d:68:4b:48:e6:01:0c:7b:e2:8d:1a:09:49:9c:
ea:f9:de:6c:fd:47:2f:3e:df:57:43:8f:ee:f4:84:
dd:17:97:e8:41:02:e2:25:0c:a0:35:db:26:0d:bc:
1f:a8:52:89:a6:8c:a7:d6:44:73:ed:86:c1:cc:cc:
8c:91:ee:a0:a1:b3:8e:1d:5d:ab:85:6e:22:6a:fe:
2b:24:cf:d4:e8:87:ec:6f:71:b1:63:46:d6:0a:a4:
00:2a:9a:28:84:3f:01:cd:df:29:77:ad:0f:d4:02:
62:5a:3f:47:2b:c8:9a:71:eb:e1:5b:4c:ea:a4:00:
b6:42:58:08:1d:71:90:7a:37:95:60:21:fc:aa:ce:
a4:19:77:02:72:2a:de:46:2c:04:d6:dc:9e:99:bf:
79:ab:78:45:db:d8:7b:94:35:be:70:be:90:09:77:
12:f7:cb:d7:73:29:93:b1:72:2f:4b:6b:52:05:28:
42:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E5:CE:E7:85:59:88:BA:39:46:27:4A:04:58:06:52:BC:DB:BA:95
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d6:39:70:9d:8b:26:e9:d4:a1:e7:f9:6c:5f:fa:cf:b8:a1:
ad:b4:9e:f2:09:fb:77:48:9b:ed:14:95:4e:9a:5b:cc:7b:3d:
3c:a1:da:02:a4:4d:2b:44:41:07:6c:cb:0d:83:42:2f:a4:58:
7c:13:96:82:f3:b2:d7:ef:c9:5c:71:d3:fd:59:10:7d:fd:5b:
f6:25:c3:fc:13:97:8a:ed:22:56:fd:e5:ae:23:7c:25:ac:fe:
26:3f:07:85:bf:49:70:e3:25:30:4d:03:ef:7a:a2:1d:58:96:
ff:a2:90:ec:1d:f4:6d:41:97:8b:5e:ea:de:9d:3f:af:9c:1e:
1e:e4:12:0f:28:e4:35:6f:10:34:26:56:26:2d:fe:c5:36:cf:
01:b9:e7:57:0c:22:f3:fa:d0:e3:e4:e5:31:88:e7:09:f3:ed:
ad:90:3d:59:f9:f1:78:9c:84:81:52:c8:c9:01:3d:17:e5:46:
dd:26:4c:1e:f7:2b:62:60:03:3c:5e:e0:57:8e:05:4d:22:b8:
ff:9c:0f:90:2a:0f:9d:1b:25:10:2b:32:ca:3b:a1:05:c9:10:
56:23:3c:2a:79:0b:51:f5:f0:27:de:f5:d0:a5:45:57:a3:c0:
27:3f:84:a4:4b:71:47:dd:93:7f:41:44:8f:a9:9f:a3:8d:8c:
49:01:65:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:44 2026 by rpki-client