Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: 114eYHSf9ahr+MfYRsE/oqb8bKgbdPafFTnKxnGjPjQ=
Subject key identifier: 37:99:FD:6F:4D:F3:65:1C:C0:34:D1:3A:6D:84:62:38:7A:86:3F:1D
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 019CAC102E2DA1114E6FAEA2A87A2A2774E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 134C
Signing time: Mon 02 Mar 2026 01:01:07 +0000
Manifest this update: Mon 02 Mar 2026 01:01:07 +0000
Manifest next update: Tue 03 Mar 2026 01:01:07 +0000
Files and hashes: 1: 1-r9qYFCluKH7Ma8TQ_Akyltf1Lc.roa (hash: GVSG8HQq960x0d4CpK5jN+FSCHq1SzLhEkFhDXdwhwI=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: Sb0XKHUxwBUhp6BZFFQRO7qtoizAI3LN07cKEo0+Cgc=)
3: Pk5JLOSd1QInAh2OTvMfyyR1NPI.roa (hash: O7rw9h1GQCgx5zvERGlnO4YLbgkL7RaVJgOWvuy279I=)
4: oVjc2gbj8Z3HA7eAzKIRnl2lQMA.roa (hash: zAAZk1U4VBtTI0cONSxWT3e4cbR3Hkt4vRra+VHSqCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:10:2e:2d:a1:11:4e:6f:ae:a2:a8:7a:2a:27:74:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Mar 2 01:01:07 2026 GMT
Not After : Mar 3 01:01:07 2026 GMT
Subject: CN=3799fd6f4df3651cc034d13a6d8462387a863f1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:20:4f:53:df:2a:eb:51:e6:4e:c9:f6:e0:1e:
07:8a:63:c9:53:5f:c6:d0:de:a3:23:59:77:00:75:
ab:27:de:29:68:e8:77:ae:c6:ec:d3:9d:2c:fd:76:
ac:9b:83:3b:37:eb:66:84:c6:74:6d:2e:1a:cc:0c:
65:c3:6b:e7:e6:19:2b:07:9c:ad:e3:77:7f:56:98:
8e:28:8c:a1:80:93:9c:42:5a:21:01:cc:ca:b2:e0:
25:7d:13:a3:4a:a9:a1:5e:ae:58:42:84:f5:02:1d:
9a:97:38:5b:fe:cb:31:2e:f7:c8:db:1a:d9:45:e8:
af:4c:0b:30:79:1d:ca:ac:91:f4:04:b0:c2:43:19:
53:a5:93:63:43:61:54:66:2c:ff:08:2c:4a:01:12:
43:0d:01:45:da:70:f0:ff:5d:13:8d:be:57:47:62:
24:84:fa:af:8b:5c:ec:d3:e0:40:56:ba:2e:11:02:
ce:d1:4d:68:1c:09:5b:9a:7e:ad:7a:6d:46:b6:56:
64:eb:04:f0:0d:a8:b0:50:3b:da:2c:92:24:d4:53:
ed:50:6e:41:55:13:fb:ce:cb:2b:24:13:10:0b:d3:
09:0b:18:0b:e7:3e:15:8a:ea:9a:2f:93:e6:56:3a:
1f:b8:6b:8d:a5:0a:b9:be:03:98:7c:43:88:eb:7e:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:99:FD:6F:4D:F3:65:1C:C0:34:D1:3A:6D:84:62:38:7A:86:3F:1D
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:48:8e:e4:12:8a:99:83:18:1e:d5:c0:64:5c:ad:e9:7f:3b:
d0:fe:40:c3:7c:38:77:20:14:1e:8c:f3:c7:44:eb:1f:34:ab:
e2:2f:ab:51:f8:6f:bf:30:76:ed:9b:2e:43:8f:b9:57:b6:63:
5a:06:b3:b6:79:81:1c:de:5f:cf:b2:b4:24:6f:a6:78:bc:3f:
25:81:3d:b2:60:8c:af:da:83:0f:a5:8a:89:f9:90:79:8c:d4:
fd:45:98:79:f3:66:bf:17:4e:21:42:6e:79:ea:e4:42:1d:f7:
45:e4:67:bc:c7:3a:c9:bf:dd:99:9e:af:6e:1d:55:4f:b2:37:
f8:80:4d:ab:6c:49:92:11:76:80:a5:f6:7b:6d:54:6c:87:e2:
92:e9:5d:9e:37:6a:90:1c:6c:72:31:57:cb:f9:7b:8e:6e:81:
b7:34:5f:5b:57:80:74:b2:ee:3d:29:7d:0b:88:64:80:49:03:
73:fd:1a:c6:f3:03:53:cd:18:9a:86:62:c2:35:2d:9e:c6:10:
86:6b:42:db:8e:87:eb:84:d9:0f:fa:79:5a:ce:36:22:38:79:
9d:a8:17:7d:46:ff:9e:a9:59:f9:87:0d:8b:20:42:4b:05:1d:
37:18:9e:8e:51:af:d7:51:95:14:e5:cc:8e:c0:8c:0c:4c:b9:
88:97:4d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:07:10 2026 by rpki-client