Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: JdDcdNtJdhNzztjLtTwEgIsKjFfrLRdXm0p3V8HUICc=
Subject key identifier: 5A:D2:44:40:ED:10:9F:CF:B3:B7:39:12:DC:C6:E4:F8:DB:C8:3D:53
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 019EC111878588408B1AF34D0E36953976D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 1460
Signing time: Sat 13 Jun 2026 13:00:11 +0000
Manifest this update: Sat 13 Jun 2026 13:00:11 +0000
Manifest next update: Sun 14 Jun 2026 13:00:11 +0000
Files and hashes: 1: 1-r9qYFCluKH7Ma8TQ_Akyltf1Lc.roa (hash: GVSG8HQq960x0d4CpK5jN+FSCHq1SzLhEkFhDXdwhwI=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: RYXDUuW9SBVZ/gSZsA2KZWPk8s2JMyyrNXsFQjbeREE=)
3: Pk5JLOSd1QInAh2OTvMfyyR1NPI.roa (hash: O7rw9h1GQCgx5zvERGlnO4YLbgkL7RaVJgOWvuy279I=)
4: oVjc2gbj8Z3HA7eAzKIRnl2lQMA.roa (hash: zAAZk1U4VBtTI0cONSxWT3e4cbR3Hkt4vRra+VHSqCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:87:85:88:40:8b:1a:f3:4d:0e:36:95:39:76:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Jun 13 13:00:11 2026 GMT
Not After : Jun 14 13:00:11 2026 GMT
Subject: CN=5ad24440ed109fcfb3b73912dcc6e4f8dbc83d53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e2:aa:0e:25:4b:b2:29:a2:96:df:2a:a6:a6:
78:33:12:7c:b3:0d:3f:4a:ec:6b:7f:00:ef:2b:ff:
c3:90:a1:ed:1a:f7:7b:7e:0e:cb:aa:81:5c:fd:a4:
1a:b6:cb:aa:01:47:d9:08:43:ca:cd:f2:62:59:98:
92:e4:46:29:2c:1b:fb:bc:8e:9a:2d:c5:a3:d2:b2:
af:6e:5e:6c:3d:f3:61:2a:b3:75:e7:ad:41:7d:50:
04:e0:7c:3f:ae:73:e6:fc:d0:cd:c0:91:ed:b3:36:
98:bc:7b:0d:79:2e:57:f7:d3:28:c0:b9:b9:df:14:
4e:59:27:a1:1a:41:3b:b5:ed:82:52:6e:3a:7e:a4:
f7:a7:db:89:0e:30:ad:4e:52:ae:c4:c6:61:2c:b6:
db:3e:11:28:a2:14:00:de:ea:69:b0:69:b9:30:bd:
51:ab:bd:3d:44:52:9d:f7:a4:d4:72:e7:0a:3a:58:
4c:08:ff:8b:60:81:6d:ba:fb:af:5e:eb:2a:5e:98:
c2:03:29:25:4e:ec:46:b6:f7:84:fe:ff:51:a2:de:
8a:71:7b:62:32:30:3f:db:36:a8:96:b9:d6:72:00:
e5:17:f3:0b:af:e2:40:5d:9a:c0:a6:23:58:cb:1c:
dc:2a:43:50:ff:f0:bd:35:db:7d:eb:c9:ed:bc:a2:
60:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:44:40:ED:10:9F:CF:B3:B7:39:12:DC:C6:E4:F8:DB:C8:3D:53
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b6:85:55:99:3d:28:49:2c:24:4e:14:a4:99:ba:3d:af:a1:
c9:47:6c:8e:a9:ac:46:d6:46:03:3a:3b:15:5b:28:44:e7:28:
b7:54:fe:f8:00:86:71:16:f9:48:37:a2:a9:0d:b8:65:ff:9f:
56:99:e1:0e:ae:49:5e:ac:91:0a:1f:e0:28:eb:5a:b5:12:38:
a0:92:fd:fc:fc:be:b3:dc:83:18:52:30:14:4d:6f:91:74:b9:
d4:8a:c7:ec:34:10:96:e4:9f:a1:ce:a9:6d:ed:17:87:52:98:
55:12:83:28:9b:08:dc:45:93:5d:ae:83:39:7f:9b:fa:19:70:
2a:2c:a6:a8:4c:aa:d5:61:52:55:92:42:71:7f:c5:0b:ed:f4:
a5:f3:e1:e9:a7:06:87:2f:bd:94:5f:8a:8b:2b:f0:86:47:86:
9f:b6:7b:d1:67:dd:92:8f:86:0f:7b:48:f4:56:74:ba:00:56:
a9:8a:01:53:9a:cc:ad:65:58:72:b6:a7:d6:e0:83:0c:39:76:
45:09:29:3d:de:44:dd:14:d3:3b:46:9d:77:0e:bd:25:2b:2b:
a6:26:9f:24:7d:e9:b2:1d:5b:80:58:cb:53:38:c8:26:a2:c8:
6a:3d:c4:2e:f5:97:18:9f:4d:a9:23:b7:43:2c:9e:2f:4f:99:
f9:02:8d:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:30:34 2026 by rpki-client