Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
File: DM1NST05HKRGjmEs6RtH8cgoM2I.mft (raw, json)
Hash identifier: iJiIpmdyBBsvpkeiNYgAq70j1BJbLJV9kAm0rb3S8+s=
Subject key identifier: 1B:32:D9:26:FA:26:A8:DC:08:30:C6:A5:7A:9F:F4:81:FB:68:C2:BB
Authority key identifier: 0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
Certificate issuer: /CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Certificate serial: 019D3A8A9C409077C0E9855AA44F270FAE36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
Manifest number: 0306
Signing time: Sun 29 Mar 2026 17:00:55 +0000
Manifest this update: Sun 29 Mar 2026 17:00:55 +0000
Manifest next update: Mon 30 Mar 2026 17:00:55 +0000
Files and hashes: 1: DM1NST05HKRGjmEs6RtH8cgoM2I.crl (hash: fQzuikSSAg9Zom91IZBah9LEunK7Cfx/KNNc6quS5Nk=)
2: lgJ1dQSseDLjNRTfNLbEfR2AMd0.roa (hash: DrpvieBQ5necGa8UgAY1dX15pTb/xIkr2RXMaR6ga9M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:9c:40:90:77:c0:e9:85:5a:a4:4f:27:0f:ae:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ccd4d493d391ca4468e612ce91b47f1c8283362
Validity
Not Before: Mar 29 17:00:55 2026 GMT
Not After : Mar 30 17:00:55 2026 GMT
Subject: CN=1b32d926fa26a8dc0830c6a57a9ff481fb68c2bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a3:5f:9d:8c:c9:cf:98:b7:16:1d:63:3b:bd:
96:4f:69:1c:08:14:d7:de:2b:53:21:58:d5:47:c1:
40:4d:33:83:ec:69:94:1b:b3:89:45:70:50:6b:17:
77:f3:b4:ef:89:7b:5c:6f:7a:25:23:25:9a:7a:42:
6e:b8:bb:b2:cc:eb:58:92:65:fc:b8:07:3a:a4:55:
4d:a7:82:ac:ed:a3:68:08:06:4b:78:e2:22:67:95:
aa:1c:10:8f:12:f5:d3:63:0e:35:12:2a:6f:28:a9:
ee:4f:29:be:92:fb:40:12:ff:a1:f8:49:00:75:53:
07:b3:a1:f5:e2:49:64:a1:23:0a:d0:7d:92:5b:87:
43:a9:62:a6:e9:53:05:cf:44:68:37:98:0e:25:cd:
79:d0:7c:6b:ae:c5:a7:b3:f0:c2:b3:fa:d0:91:8b:
fc:d1:a2:4a:93:31:51:61:4a:c5:1d:50:4e:9c:fd:
8e:49:b0:84:cd:9e:9c:03:0a:26:23:18:b7:10:23:
62:33:bc:20:53:f1:02:c9:73:f8:34:21:99:10:7f:
53:de:fb:cd:49:d4:1e:a4:3f:ea:5b:33:05:79:6e:
9c:9d:67:59:d7:62:eb:52:35:3b:f8:64:91:a1:a1:
01:4e:d5:55:3f:93:98:f9:b3:a5:bc:60:7b:29:fe:
8b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:32:D9:26:FA:26:A8:DC:08:30:C6:A5:7A:9F:F4:81:FB:68:C2:BB
X509v3 Authority Key Identifier:
keyid:0C:CD:4D:49:3D:39:1C:A4:46:8E:61:2C:E9:1B:47:F1:C8:28:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DM1NST05HKRGjmEs6RtH8cgoM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/4d7a96-0574-4a09-850d-75137b12842b/1/DM1NST05HKRGjmEs6RtH8cgoM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ca:9c:79:25:53:cb:85:b3:34:35:02:4e:5c:88:91:11:00:
82:99:bd:44:50:30:30:a4:04:0e:ed:77:c4:af:5c:03:6b:8d:
c8:dc:18:0e:4a:6e:d1:b0:f8:40:d6:b3:25:1d:c6:bc:d9:26:
5a:ef:f3:e9:54:56:e4:24:ad:a0:c9:62:4a:9e:14:83:c1:5f:
17:3b:fc:f0:44:00:60:15:ab:01:49:7d:ea:c5:51:8d:06:94:
ec:1c:1f:b4:f1:48:54:99:f9:b4:ff:f7:b2:a7:1b:ca:33:58:
e6:cc:34:75:f7:28:f3:dc:4c:7c:6c:68:13:08:1f:8b:1a:22:
94:cc:23:01:ab:05:56:ed:ed:0f:55:1c:1a:25:d6:9f:61:de:
52:65:b5:77:13:09:9e:59:eb:87:a0:a8:75:06:cb:d7:3d:45:
c3:57:15:fe:1f:3a:a5:d1:58:87:5f:85:cb:11:8a:ab:47:1f:
e6:89:ec:ca:a5:f0:7e:80:95:0b:c8:f8:2a:77:c0:82:e8:62:
63:89:e6:64:9a:ef:3c:ed:ef:ed:bf:52:2e:99:fc:48:27:b6:
3a:36:0a:31:04:7a:09:d6:42:79:4d:20:b6:d8:18:62:d0:42:
a4:d8:35:c1:28:d5:ce:7d:b0:1b:d3:3f:ee:f2:16:d2:20:34:
27:09:3e:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ06ipxAkHfA6YVapE8nD642MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjY2Q0ZDQ5M2QzOTFjYTQ0NjhlNjEyY2U5MWI0N2YxYzgy
ODMzNjIwHhcNMjYwMzI5MTcwMDU1WhcNMjYwMzMwMTcwMDU1WjAzMTEwLwYDVQQD
EygxYjMyZDkyNmZhMjZhOGRjMDgzMGM2YTU3YTlmZjQ4MWZiNjhjMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aNfnYzJz5i3Fh1jO72WT2kcCBTX
3itTIVjVR8FATTOD7GmUG7OJRXBQaxd387TviXtcb3olIyWaekJuuLuyzOtYkmX8
uAc6pFVNp4Ks7aNoCAZLeOIiZ5WqHBCPEvXTYw41EipvKKnuTym+kvtAEv+h+EkA
dVMHs6H14klkoSMK0H2SW4dDqWKm6VMFz0RoN5gOJc150HxrrsWns/DCs/rQkYv8
0aJKkzFRYUrFHVBOnP2OSbCEzZ6cAwomIxi3ECNiM7wgU/ECyXP4NCGZEH9T3vvN
SdQepD/qWzMFeW6cnWdZ12LrUjU7+GSRoaEBTtVVP5OY+bOlvGB7Kf6LbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBsy2Sb6JqjcCDDGpXqf9IH7aMK7MB8GA1UdIwQY
MBaAFAzNTUk9ORykRo5hLOkbR/HIKDNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRE0xTlNUMDVIS1JHam1FczZSdEg4Y2dvTTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi80ZDdhOTYtMDU3NC00YTA5LTg1MGQt
NzUxMzdiMTI4NDJiLzEvRE0xTlNUMDVIS1JHam1FczZSdEg4Y2dvTTJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi80ZDdhOTYtMDU3NC00YTA5LTg1MGQtNzUxMzdiMTI4NDJi
LzEvRE0xTlNUMDVIS1JHam1FczZSdEg4Y2dvTTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKMqceSVT
y4WzNDUCTlyIkREAgpm9RFAwMKQEDu13xK9cA2uNyNwYDkpu0bD4QNazJR3GvNkm
Wu/z6VRW5CStoMliSp4Ug8FfFzv88EQAYBWrAUl96sVRjQaU7BwftPFIVJn5tP/3
sqcbyjNY5sw0dfco89xMfGxoEwgfixoilMwjAasFVu3tD1UcGiXWn2HeUmW1dxMJ
nlnrh6CodQbL1z1Fw1cV/h86pdFYh1+FyxGKq0cf5onsyqXwfoCVC8j4KnfAguhi
Y4nmZJrvPO3v7b9SLpn8SCe2OjYKMQR6CdZCeU0gttgYYtBCpNg1wSjVzn2wG9M/
7vIW0iA0Jwk++w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 21:15:45 2026 by rpki-client