Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
File: DM6IMtApSYAfEZjp0TuxjtWDLQw.mft (raw, json)
Hash identifier: yzxFyFrk85m7BsHTZLGuLJ1sURQ6Lgfu5hPMDEobDTc=
Subject key identifier: EA:62:2B:36:BC:20:A3:F0:F0:41:8C:FF:99:BF:D1:0D:B8:F2:D3:2F
Authority key identifier: 0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
Certificate issuer: /CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Certificate serial: 019D39408958FB81822EFB2CD92ABE3FEC28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
Manifest number: 1895
Signing time: Sun 29 Mar 2026 11:00:23 +0000
Manifest this update: Sun 29 Mar 2026 11:00:23 +0000
Manifest next update: Mon 30 Mar 2026 11:00:23 +0000
Files and hashes: 1: DM6IMtApSYAfEZjp0TuxjtWDLQw.crl (hash: uKVmx3vEKBcETa68t2ankyN7iP2iGHUfT+VLD9TY9NA=)
2: iDDbiSH2d_40GsJwPvUC4BGeuXA.roa (hash: vwX7F1KiY4ZWTpCyVu83FRegfcFV6IZjqYP0GrVArzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:89:58:fb:81:82:2e:fb:2c:d9:2a:be:3f:ec:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cce8832d02949801f1198e9d13bb18ed5832d0c
Validity
Not Before: Mar 29 11:00:23 2026 GMT
Not After : Mar 30 11:00:23 2026 GMT
Subject: CN=ea622b36bc20a3f0f0418cff99bfd10db8f2d32f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1b:7e:1a:2b:30:51:de:92:7d:73:bd:ba:6a:
d1:18:70:b1:52:e2:7c:17:43:24:2f:18:f7:5e:66:
9e:28:3a:13:a7:9e:c4:2a:21:e8:59:d2:dc:85:4a:
48:a4:28:fd:c8:6e:e9:a3:56:7d:3f:43:cd:b4:16:
1d:56:de:3c:91:fb:14:19:e2:76:05:7f:3b:da:e2:
99:ca:be:79:db:33:70:88:3c:d6:5d:11:e1:49:db:
54:97:26:df:dd:34:e6:b1:e4:82:13:90:1c:9d:4e:
52:ce:79:55:fd:13:6f:5b:f8:4e:eb:4f:b8:33:8b:
45:1a:d0:29:0b:a6:ed:bb:64:9e:75:86:f1:ee:22:
36:ca:ed:b0:c6:7c:56:61:49:46:88:6b:d2:ca:51:
8f:87:00:b5:52:60:7a:09:25:1e:1c:c8:7e:45:47:
11:e3:da:0e:2e:a6:6c:60:fd:87:11:7e:49:47:f1:
8b:e6:b4:37:33:bd:79:42:34:5f:ca:71:b3:9d:a5:
5f:67:e4:75:03:9b:6f:50:a3:65:e2:c0:ef:72:27:
c9:93:2b:d2:ec:2d:c9:98:cb:25:f1:b3:b0:5d:a9:
da:05:bc:29:81:ff:62:77:cb:d1:6d:83:4a:71:9d:
d2:d8:08:32:d0:3e:c1:35:6a:fa:f2:f9:cc:78:e1:
7c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:62:2B:36:BC:20:A3:F0:F0:41:8C:FF:99:BF:D1:0D:B8:F2:D3:2F
X509v3 Authority Key Identifier:
keyid:0C:CE:88:32:D0:29:49:80:1F:11:98:E9:D1:3B:B1:8E:D5:83:2D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM6IMtApSYAfEZjp0TuxjtWDLQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/777c0a-ca44-43ec-ab79-5e0afec136b1/1/DM6IMtApSYAfEZjp0TuxjtWDLQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:b5:89:5d:fe:63:ca:6b:df:b7:87:4c:cc:79:ed:9f:3e:84:
4e:9d:64:67:a8:ef:a6:dc:24:86:3d:db:5d:bb:ad:55:e0:aa:
14:25:cb:4e:95:6e:1b:a5:ee:62:a8:96:c3:81:cc:ec:a9:ca:
00:bb:c8:d7:b7:20:43:6c:79:24:35:d2:4d:86:b2:f4:d6:97:
ae:56:4b:df:be:52:be:58:a1:14:08:56:e7:68:08:be:90:c8:
0c:1c:14:1b:7e:66:37:94:ec:ca:3b:c3:36:00:88:43:5e:3b:
5a:64:56:5f:8f:1f:97:18:f3:6e:c1:61:ae:93:cb:83:b5:1a:
e1:e5:79:ec:23:2b:dd:e5:7f:c0:a8:f5:86:9b:95:a2:ee:7f:
0e:eb:1b:b7:55:35:40:91:fc:bd:79:be:69:5d:c6:a6:22:7e:
01:02:ba:04:e3:1f:78:15:b5:96:b0:53:36:af:3a:79:79:bc:
cf:6a:31:ef:0e:87:98:16:6a:3c:a2:b5:70:f5:d0:bf:ef:2e:
e2:c3:25:cb:88:25:00:78:be:c4:2b:d2:e3:23:b9:d8:93:ee:
f5:f9:ea:83:93:c5:c7:95:e4:3d:0d:0d:30:67:2a:85:13:18:
b9:17:5e:70:de:5d:0e:52:dd:8e:48:fc:8b:3d:c8:49:3f:61:
88:fb:b8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:27 2026 by rpki-client