Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
File: DmT4G542uEmRd4dnjQFNtL_O8xE.mft (raw, json)
Hash identifier: SWXtX95QFqhwmlA7qSgCIct1QseycgZ35qfLcQpwMnw=
Subject key identifier: A4:DA:9E:7A:F3:13:7D:88:9D:54:26:B9:FD:A8:EC:5D:9C:E9:85:E1
Authority key identifier: 0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
Certificate issuer: /CN=0e64f81b9e36b849917787678d014db4bfcef311
Certificate serial: 019D992B179A1D7A81560BD0B0DAAFBB8F8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
Manifest number: 08FE
Signing time: Fri 17 Apr 2026 02:00:31 +0000
Manifest this update: Fri 17 Apr 2026 02:00:31 +0000
Manifest next update: Sat 18 Apr 2026 02:00:31 +0000
Files and hashes: 1: 0j8mKPNVQTMhrPMoTB8vqumItaY.roa (hash: RfwfX7kQEbOpbeZ05eE31bx2DYFysCnm/nQLdjd7Xnk=)
2: 1-kTvZ0CIAu8uTw7fU1T6vT9hc9c.roa (hash: me+ftvQPzHdAUrIuYjuuG8bbQjdCu8RbriElDkqOOBo=)
3: 5obQTKQQdziyHt3lp7e0Ce026vk.roa (hash: Le5yUrWQi3zm2wIsTvW5Oct4jk04f+5rZXXqRfdqn8k=)
4: 8dffgbceyZZN2GD0DQntG3Z8fxU.roa (hash: 7MA6pNhMj3p3AaurB3f6qiL2uGgtlKFoFp4bhK94tNs=)
5: DmT4G542uEmRd4dnjQFNtL_O8xE.crl (hash: OUr7hnovkCtEYj6szzKukd+xeYhgyf//v8gnpVpFLAo=)
6: ZIEMV2zIloE52-qgOXdFi1j85Tk.roa (hash: NwScYVj2gBSbhZaCbwwZMrlWYVdDowjEWEzxULRwSVQ=)
7: g1rCh6JOwkuyFx1RMKVRwzuU63w.roa (hash: i/ipa9GmfRXAeA2Xih2V+tPcO2aG20N/7/cUFxqZ3v8=)
8: zSQtHn132zkYiODR-nP8aHtUQYA.roa (hash: 0IThsqQjeAvQaaBM3736hRL6ffPhT8HNYOS2v2AnKs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:17:9a:1d:7a:81:56:0b:d0:b0:da:af:bb:8f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e64f81b9e36b849917787678d014db4bfcef311
Validity
Not Before: Apr 17 02:00:31 2026 GMT
Not After : Apr 18 02:00:31 2026 GMT
Subject: CN=a4da9e7af3137d889d5426b9fda8ec5d9ce985e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:23:93:a1:c7:a0:0b:0d:4a:22:49:13:1b:d0:
94:a6:ae:00:8a:8d:94:7c:68:54:51:34:59:15:ea:
b3:08:ef:97:75:92:1a:ba:61:6e:ff:b0:23:e0:7f:
39:45:03:c2:94:aa:f3:09:f9:ac:25:ea:50:c8:2f:
66:48:6c:e5:cf:83:31:ab:4c:24:00:55:17:64:a3:
1f:57:19:80:23:88:f4:80:77:38:72:e5:5b:a5:dc:
70:d6:ed:22:f5:81:0a:68:a2:a4:ea:9b:aa:99:38:
bd:e9:f3:db:31:b1:f3:da:9d:66:44:71:ba:5f:0b:
95:95:35:4e:b9:e6:40:7b:36:a8:e9:5c:5b:67:93:
4e:5f:66:18:4e:24:00:c8:b9:3d:c8:5a:f5:6e:a4:
12:0a:60:ea:46:dc:5d:ca:4b:9b:b1:18:6c:8f:18:
9d:fd:0d:1f:cd:70:85:c9:a1:e5:a6:b3:69:31:f1:
00:7d:63:81:dd:ee:d2:30:b1:31:27:2c:62:7e:3b:
34:8f:af:1e:20:60:f2:83:7a:5a:11:81:ec:80:90:
fb:43:bb:dc:8a:9b:34:56:b7:83:b3:30:d4:7d:f6:
03:8b:3d:65:68:c7:ee:b4:ba:c5:30:2b:aa:0d:cf:
75:85:39:ac:38:9e:b2:5e:a0:7a:47:f2:dd:e4:4e:
43:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DA:9E:7A:F3:13:7D:88:9D:54:26:B9:FD:A8:EC:5D:9C:E9:85:E1
X509v3 Authority Key Identifier:
keyid:0E:64:F8:1B:9E:36:B8:49:91:77:87:67:8D:01:4D:B4:BF:CE:F3:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmT4G542uEmRd4dnjQFNtL_O8xE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/594d25-f1c6-4044-a8a7-c8f182e95ea5/1/DmT4G542uEmRd4dnjQFNtL_O8xE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:80:c0:89:b1:c5:cf:ba:87:8e:40:a7:b0:9e:ef:99:e4:bf:
52:13:91:73:33:b9:48:cc:9c:95:f1:01:e6:b4:7a:1b:78:62:
64:70:65:93:88:95:bb:26:b5:5b:89:5e:5d:e7:26:7c:54:3c:
44:bc:b0:33:06:ab:e2:b3:bc:77:12:8a:f5:8f:f8:b4:d8:74:
48:ad:1b:d7:12:89:ed:b9:43:63:69:51:9d:5e:ce:6e:11:2a:
cb:65:04:11:cc:36:23:df:9c:48:d0:00:d9:34:48:74:ce:b8:
f3:1f:78:2c:a8:d2:0a:b6:25:46:8f:53:a6:50:7c:9a:0e:43:
29:82:64:f6:8f:e3:07:ea:c0:e7:2c:e1:2a:8a:73:f0:e8:1a:
ae:bb:10:3e:83:c9:21:4e:99:97:4d:3a:22:92:39:7e:9b:52:
66:14:c6:e4:f0:81:64:cd:ca:c1:79:75:54:2d:71:31:f4:65:
c0:c6:75:74:27:ff:ad:24:67:53:af:36:d8:ab:e4:78:70:3c:
c9:08:14:02:22:80:d6:e4:4e:4f:5f:e2:47:95:a5:1b:e6:d7:
01:10:53:cb:82:44:f3:5c:9d:8d:15:19:13:5c:9c:b5:fc:c1:
1b:78:ee:9c:3e:ce:8d:c5:f8:de:99:31:92:52:5d:10:60:e5:
e8:4f:dd:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKxeaHXqBVgvQsNqvu4+KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNjRmODFiOWUzNmI4NDk5MTc3ODc2NzhkMDE0ZGI0YmZj
ZWYzMTEwHhcNMjYwNDE3MDIwMDMxWhcNMjYwNDE4MDIwMDMxWjAzMTEwLwYDVQQD
EyhhNGRhOWU3YWYzMTM3ZDg4OWQ1NDI2YjlmZGE4ZWM1ZDljZTk4NWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxiOTocegCw1KIkkTG9CUpq4Aio2U
fGhUUTRZFeqzCO+XdZIaumFu/7Aj4H85RQPClKrzCfmsJepQyC9mSGzlz4Mxq0wk
AFUXZKMfVxmAI4j0gHc4cuVbpdxw1u0i9YEKaKKk6puqmTi96fPbMbHz2p1mRHG6
XwuVlTVOueZAezao6VxbZ5NOX2YYTiQAyLk9yFr1bqQSCmDqRtxdykubsRhsjxid
/Q0fzXCFyaHlprNpMfEAfWOB3e7SMLExJyxifjs0j68eIGDyg3paEYHsgJD7Q7vc
ips0VreDszDUffYDiz1laMfutLrFMCuqDc91hTmsOJ6yXqB6R/Ld5E5D8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKTannrzE32InVQmuf2o7F2c6YXhMB8GA1UdIwQY
MBaAFA5k+BueNrhJkXeHZ40BTbS/zvMRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTct
YzhmMTgyZTk1ZWE1LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy81OTRkMjUtZjFjNi00MDQ0LWE4YTctYzhmMTgyZTk1ZWE1
LzEvRG1UNEc1NDJ1RW1SZDRkbmpRRk50TF9POHhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeoDAibHF
z7qHjkCnsJ7vmeS/UhORczO5SMyclfEB5rR6G3hiZHBlk4iVuya1W4leXecmfFQ8
RLywMwar4rO8dxKK9Y/4tNh0SK0b1xKJ7blDY2lRnV7ObhEqy2UEEcw2I9+cSNAA
2TRIdM648x94LKjSCrYlRo9TplB8mg5DKYJk9o/jB+rA5yzhKopz8OgarrsQPoPJ
IU6Zl006IpI5fptSZhTG5PCBZM3KwXl1VC1xMfRlwMZ1dCf/rSRnU6822KvkeHA8
yQgUAiKA1uROT1/iR5WlG+bXARBTy4JE81ydjRUZE1yctfzBG3junD7OjcX43pkx
klJdEGDl6E/diQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:04:23 2026 by rpki-client