Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
File: DSMGTjwn7JK36rZnZJ0gTlZzg44.mft (raw, json)
Hash identifier: GpM2z40TpCLf/bE2Cjic6o1veIiI9KfdDejMp4nSWy4=
Subject key identifier: 8E:F2:5B:05:55:79:AD:7C:6D:46:A6:B4:8A:F1:FC:13:74:73:C8:48
Authority key identifier: 0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
Certificate issuer: /CN=0d23064e3c27ec92b7eab667649d204e5673838e
Certificate serial: 019D9999123B8E77EA936D1D9F44B1D1E5E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
Manifest number: 13C7
Signing time: Fri 17 Apr 2026 04:00:38 +0000
Manifest this update: Fri 17 Apr 2026 04:00:38 +0000
Manifest next update: Sat 18 Apr 2026 04:00:38 +0000
Files and hashes: 1: 1-r9qYFCluKH7Ma8TQ_Akyltf1Lc.roa (hash: GVSG8HQq960x0d4CpK5jN+FSCHq1SzLhEkFhDXdwhwI=)
2: DSMGTjwn7JK36rZnZJ0gTlZzg44.crl (hash: NwIMmKEld+nqmUZK7bfBGdWEyjzIruiUZbLWVvQG64I=)
3: Pk5JLOSd1QInAh2OTvMfyyR1NPI.roa (hash: O7rw9h1GQCgx5zvERGlnO4YLbgkL7RaVJgOWvuy279I=)
4: oVjc2gbj8Z3HA7eAzKIRnl2lQMA.roa (hash: zAAZk1U4VBtTI0cONSxWT3e4cbR3Hkt4vRra+VHSqCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:12:3b:8e:77:ea:93:6d:1d:9f:44:b1:d1:e5:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d23064e3c27ec92b7eab667649d204e5673838e
Validity
Not Before: Apr 17 04:00:38 2026 GMT
Not After : Apr 18 04:00:38 2026 GMT
Subject: CN=8ef25b055579ad7c6d46a6b48af1fc137473c848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:06:6e:e9:ea:6c:e5:29:0b:74:7c:77:51:ef:
cc:2b:3a:1b:81:1d:f9:ca:78:24:af:54:4b:fd:86:
de:2e:fa:2a:51:1e:bc:5b:ad:e2:2c:31:4f:98:33:
96:67:16:7e:66:ec:a5:cb:1c:4c:7a:df:e7:fa:d3:
b7:76:97:c4:8b:19:0a:a2:30:41:c9:99:49:45:49:
b0:76:ca:1c:d1:df:6d:9c:ec:8c:f2:06:13:73:ef:
c0:fb:df:1a:a5:92:ab:94:91:df:81:29:17:73:7d:
b8:26:76:02:cb:d1:70:38:57:6d:e3:eb:fc:03:0d:
d2:64:d4:c8:92:e4:b0:71:bc:44:40:ce:1b:bb:09:
0b:68:37:59:58:10:36:21:2e:9f:1a:25:e2:de:16:
61:46:e5:46:64:35:44:4a:36:81:6f:b5:30:f0:f1:
9b:78:66:c0:6d:59:70:c3:e9:ea:53:30:fb:1a:03:
b9:55:81:d1:9b:d7:c9:a6:ed:19:24:3b:bb:b8:82:
6d:cf:0e:fd:b5:f8:8b:8a:f4:31:06:7e:ed:f1:ec:
59:3c:ae:52:10:37:84:a0:ef:cb:b7:f9:b4:4c:1b:
90:69:f2:66:da:f6:65:08:4c:ba:d5:28:e2:e0:4a:
4a:9e:39:7a:c9:85:a6:15:76:06:ad:6e:9f:e8:aa:
95:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F2:5B:05:55:79:AD:7C:6D:46:A6:B4:8A:F1:FC:13:74:73:C8:48
X509v3 Authority Key Identifier:
keyid:0D:23:06:4E:3C:27:EC:92:B7:EA:B6:67:64:9D:20:4E:56:73:83:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DSMGTjwn7JK36rZnZJ0gTlZzg44.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/72faed-a8f8-4a33-8ddc-5cef04b79737/1/DSMGTjwn7JK36rZnZJ0gTlZzg44.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4a:92:51:e6:91:ae:dd:71:82:73:ba:a4:ff:dd:56:2f:f6:
95:e4:bc:00:82:dc:4d:0f:5d:bd:0a:1e:8d:70:36:b1:98:45:
c0:46:5b:02:32:7c:e4:1b:95:ae:9c:87:b7:da:5c:8d:e9:61:
f2:68:5e:91:f2:3d:92:c0:29:bc:95:76:68:87:fc:c3:c2:54:
4b:95:81:46:23:42:4d:86:9f:7d:aa:f6:ab:88:d6:89:c0:76:
cf:b2:db:d2:e4:47:48:fc:a8:56:c2:b6:5c:92:fe:de:da:93:
d5:2b:59:26:fc:1c:c6:c2:2f:fe:88:df:a8:a7:94:46:70:ac:
be:ed:95:cd:7a:e6:e6:6f:f4:0e:03:c8:55:4f:82:3b:d6:49:
94:28:80:32:14:0f:57:5a:83:a5:e2:e6:84:ac:f3:d6:03:6d:
ef:b1:40:20:e5:7c:d0:29:9a:68:eb:17:f5:7d:3c:cc:9d:96:
99:e4:06:08:f3:bd:e1:a7:1f:42:57:8c:14:14:09:0f:26:7a:
66:0e:85:32:1d:b8:0f:ab:48:bf:97:5f:2f:ae:4b:e6:eb:ed:
36:79:a5:83:eb:e5:c9:b1:c4:9c:87:80:b2:15:bd:0e:e9:bf:
db:80:4a:14:8f:07:87:bf:8a:70:75:24:df:56:c2:1e:a1:c5:
b2:11:aa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:22 2026 by rpki-client