Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier: HRYqs8bCe3yJncAJFwx/DzAa/dMZyoxyxMoZefAnmkU=
Subject key identifier: D6:9E:A5:BC:92:F3:B6:7C:B7:68:97:F1:29:22:73:DF:E6:BF:6D:A3
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 019CABA1D0A3EC336D35FFAA200AE64C62B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number: 0883
Signing time: Sun 01 Mar 2026 23:00:34 +0000
Manifest this update: Sun 01 Mar 2026 23:00:34 +0000
Manifest next update: Mon 02 Mar 2026 23:00:34 +0000
Files and hashes: 1: 0j8mKPNVQTMhrPMoTB8vqumItaY.roa (hash: RfwfX7kQEbOpbeZ05eE31bx2DYFysCnm/nQLdjd7Xnk=)
2: 1-kTvZ0CIAu8uTw7fU1T6vT9hc9c.roa (hash: me+ftvQPzHdAUrIuYjuuG8bbQjdCu8RbriElDkqOOBo=)
3: 5obQTKQQdziyHt3lp7e0Ce026vk.roa (hash: Le5yUrWQi3zm2wIsTvW5Oct4jk04f+5rZXXqRfdqn8k=)
4: 8dffgbceyZZN2GD0DQntG3Z8fxU.roa (hash: 7MA6pNhMj3p3AaurB3f6qiL2uGgtlKFoFp4bhK94tNs=)
5: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: B3WQeLoeIIIU2xMFEi3XBWKhCt9TJC4q6kxN+IZ1tK0=)
6: ZIEMV2zIloE52-qgOXdFi1j85Tk.roa (hash: NwScYVj2gBSbhZaCbwwZMrlWYVdDowjEWEzxULRwSVQ=)
7: g1rCh6JOwkuyFx1RMKVRwzuU63w.roa (hash: i/ipa9GmfRXAeA2Xih2V+tPcO2aG20N/7/cUFxqZ3v8=)
8: zSQtHn132zkYiODR-nP8aHtUQYA.roa (hash: 0IThsqQjeAvQaaBM3736hRL6ffPhT8HNYOS2v2AnKs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:d0:a3:ec:33:6d:35:ff:aa:20:0a:e6:4c:62:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Mar 1 23:00:34 2026 GMT
Not After : Mar 2 23:00:34 2026 GMT
Subject: CN=d69ea5bc92f3b67cb76897f1292273dfe6bf6da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:bd:67:92:d9:16:c1:58:fa:11:ca:cf:7f:22:
f0:6f:48:37:47:1e:08:ed:d6:c9:02:77:c6:6c:ed:
7a:27:07:f9:6f:37:83:ee:a3:52:68:52:8d:3d:8d:
59:79:81:1b:e5:28:d1:ef:af:d7:0d:7b:d8:15:b7:
de:08:1d:81:11:8b:48:2c:0f:18:6a:cb:97:a2:e2:
a8:0e:8e:1b:99:75:2f:37:9b:70:43:a3:51:ef:0c:
3e:32:5e:db:0b:ad:ea:02:ea:47:3a:7f:d3:35:f9:
97:87:c5:9f:09:81:1b:0b:2d:11:9b:54:3f:4e:30:
a5:af:e6:c3:47:01:c3:fa:67:e5:38:9d:25:71:5b:
ca:cb:f0:93:59:aa:f9:b2:2e:8d:68:a9:2e:d4:a9:
9b:14:c6:66:d1:03:07:eb:25:40:2d:85:7d:c6:a0:
a2:4d:e0:42:32:bd:b3:61:b2:94:66:4d:87:b6:bb:
ac:ac:63:92:f0:30:9a:03:5c:d1:a6:a4:2e:19:14:
48:2c:a8:60:68:5c:e4:b0:d7:e1:20:d5:47:21:5d:
f2:1b:7e:a9:53:20:32:20:89:dd:61:f0:71:14:7e:
21:c4:e5:41:b5:35:3c:86:f3:9f:f4:fb:86:37:63:
99:14:aa:1c:1e:8e:ed:8b:2a:17:ab:2a:c1:89:1d:
3e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9E:A5:BC:92:F3:B6:7C:B7:68:97:F1:29:22:73:DF:E6:BF:6D:A3
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:58:a8:69:22:3e:86:5c:c1:13:2d:04:cc:b4:90:89:b2:de:
7c:5e:80:a4:dc:e9:6f:17:64:39:dd:8a:c4:48:2d:8e:00:ce:
bd:d0:d4:ea:98:e9:3e:4c:31:27:f4:bf:35:0d:b1:e2:65:b9:
82:9f:10:a3:63:f8:49:a9:90:e5:9e:4c:60:14:29:32:f5:43:
ff:18:cd:d4:ed:44:b6:af:eb:81:0b:a9:c4:0e:a4:f5:82:31:
52:4f:80:46:ff:24:3f:a1:05:73:ee:96:5b:c7:c9:cd:5c:e0:
50:63:d9:c5:2e:1f:96:c0:03:d6:46:d2:8b:e1:ae:7e:df:d1:
9d:74:cb:2e:17:d4:45:cf:7a:91:46:90:b7:c2:9c:92:89:99:
3d:eb:39:86:b4:74:ac:5b:ec:51:87:b8:e0:b8:d6:5b:bf:2a:
4b:94:2f:b2:4d:b2:df:97:37:0c:14:15:e4:dc:41:93:f8:3b:
aa:8e:70:b3:0d:63:eb:ca:d8:07:8f:bb:03:60:3e:fa:10:a5:
ef:57:96:34:39:70:79:c1:91:db:10:40:49:f0:b2:91:34:a1:
1c:71:a6:3c:c4:60:7a:a2:14:c7:09:e0:ad:0f:8d:87:60:fc:
f1:6a:81:39:21:0c:97:7d:15:d4:43:66:5c:f3:d2:db:7d:c5:
a3:b2:0c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:12:54 2026 by rpki-client