
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier: i1kEyrDdwgMhrMvIJbte4AgM9E+fpb8RVDmS/kK9eIc=
Subject key identifier: DA:C8:0D:36:B5:51:F8:99:53:FB:DD:28:5B:7A:B0:B0:B6:93:C8:A6
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 019EC0A4517015243AEE9A1EA02C32F818D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number: 0997
Signing time: Sat 13 Jun 2026 11:00:54 +0000
Manifest this update: Sat 13 Jun 2026 11:00:54 +0000
Manifest next update: Sun 14 Jun 2026 11:00:54 +0000
Files and hashes: 1: 0j8mKPNVQTMhrPMoTB8vqumItaY.roa (hash: RfwfX7kQEbOpbeZ05eE31bx2DYFysCnm/nQLdjd7Xnk=)
2: 1-kTvZ0CIAu8uTw7fU1T6vT9hc9c.roa (hash: me+ftvQPzHdAUrIuYjuuG8bbQjdCu8RbriElDkqOOBo=)
3: 5obQTKQQdziyHt3lp7e0Ce026vk.roa (hash: Le5yUrWQi3zm2wIsTvW5Oct4jk04f+5rZXXqRfdqn8k=)
4: 8dffgbceyZZN2GD0DQntG3Z8fxU.roa (hash: 7MA6pNhMj3p3AaurB3f6qiL2uGgtlKFoFp4bhK94tNs=)
5: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: bF5RPzrRhRH1mzMI2TaATcXPpmRyLZewXpktfotNseg=)
6: ZIEMV2zIloE52-qgOXdFi1j85Tk.roa (hash: NwScYVj2gBSbhZaCbwwZMrlWYVdDowjEWEzxULRwSVQ=)
7: g1rCh6JOwkuyFx1RMKVRwzuU63w.roa (hash: i/ipa9GmfRXAeA2Xih2V+tPcO2aG20N/7/cUFxqZ3v8=)
8: zSQtHn132zkYiODR-nP8aHtUQYA.roa (hash: 0IThsqQjeAvQaaBM3736hRL6ffPhT8HNYOS2v2AnKs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:51:70:15:24:3a:ee:9a:1e:a0:2c:32:f8:18:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Jun 13 11:00:54 2026 GMT
Not After : Jun 14 11:00:54 2026 GMT
Subject: CN=dac80d36b551f89953fbdd285b7ab0b0b693c8a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:69:d0:8a:5d:0c:e5:b3:5f:64:06:09:a3:
c8:be:5e:05:76:47:c7:fd:55:be:b2:8b:7a:8c:92:
8f:35:0c:38:6c:0c:9c:e8:9b:a4:51:2e:f6:25:08:
2d:b1:9b:4a:02:3c:4c:a9:24:6a:00:27:b7:85:88:
d0:f8:7f:b8:ef:78:a0:6e:56:af:74:79:f9:5b:75:
6e:14:4f:9e:c5:3b:a3:0a:d2:df:97:66:9e:f2:d2:
79:c6:62:ef:7a:7e:d5:05:a6:be:6e:72:b2:08:bc:
c6:48:ed:10:c4:b7:17:73:c5:21:03:e0:64:1e:70:
c7:93:24:56:1d:88:07:e5:f3:b3:ca:1b:83:14:df:
cc:b4:fa:a0:7e:40:29:32:b2:c7:de:43:c6:02:14:
88:32:b1:a3:e0:9c:93:fc:a1:d7:3e:4d:23:03:2d:
81:46:2a:38:79:a6:d7:90:ca:ac:ad:da:ae:26:a0:
70:bc:8d:de:6b:fc:b7:d2:0f:83:bb:e9:1b:fb:39:
7f:a5:09:2d:c6:27:2b:d3:a1:45:5f:1e:6e:94:a9:
a1:ea:f6:a4:20:73:46:b5:09:b7:be:92:6c:af:73:
25:0c:e4:9c:6f:db:e6:e8:5d:5f:77:84:6c:76:f5:
02:55:0f:91:3f:6d:2a:aa:a6:d7:ec:49:a2:f1:8c:
ac:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C8:0D:36:B5:51:F8:99:53:FB:DD:28:5B:7A:B0:B0:B6:93:C8:A6
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:31:84:f0:ff:ec:dc:05:36:6e:ad:6e:0e:f8:a3:d2:9e:92:
34:2f:60:15:3f:bf:2f:70:b3:16:46:26:6a:fb:b1:37:1c:4f:
f8:3c:1f:3d:18:51:d4:53:93:7b:17:8a:80:80:b7:54:7c:74:
0c:1e:c1:96:32:1d:20:f6:94:b9:00:98:3a:45:e8:25:73:ff:
78:34:49:5b:a3:44:be:b7:a0:66:f6:01:1d:47:78:95:a9:03:
5a:66:94:93:42:77:1e:7b:1b:61:ed:bb:91:42:b6:04:f7:c8:
0c:80:fd:5f:f8:14:30:30:0b:1f:58:a7:6b:9c:83:bd:cc:f5:
9c:26:17:74:8a:9b:2e:59:1f:94:88:80:24:3f:67:28:0d:d3:
ce:b4:f8:5f:fc:d2:d3:50:b9:91:db:ce:63:9b:fe:d6:e6:c0:
6b:28:5c:94:cf:f1:39:b9:bf:cd:7e:86:eb:43:a3:b3:18:52:
cd:86:0e:f3:37:31:ef:7a:b4:f2:58:3f:00:9b:59:7a:68:79:
85:56:1f:54:2d:a0:0f:0b:ac:1a:a4:09:96:2c:26:4f:02:2b:
68:07:fd:db:af:2f:7d:84:a8:15:7e:d9:52:04:41:db:cf:b9:
fa:11:8b:10:12:aa:46:ef:a4:ab:f5:43:22:30:ef:6d:35:cd:
ca:57:02:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:10:57 2026 by rpki-client