Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json)
Hash identifier: uSzKCydFOp4fdTqHxBAVLPjuh49u/v4lKRig1MI00Dc=
Subject key identifier: 5A:80:2B:51:14:2E:E0:2B:14:2D:EF:81:95:94:D6:D8:9E:1A:6A:68
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 019FA82AF5A8942DE65D6BB1A5F39D8C3104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 10:00:15 +0000
Manifest this update: Tue 28 Jul 2026 10:00:15 +0000
Manifest next update: Wed 29 Jul 2026 10:00:15 +0000
Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: TUAcMNT8QKSAIgWdrrbwDxdmL8XaDK6MijGIv4XqG6M=)
2: nLPrlrzFQJke2w0nSv6P6BPs3rs.roa (hash: lHcs6pM3E3th/X7lArO6Gv/GZjzfkX92Szx3cqmHxMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2a:f5:a8:94:2d:e6:5d:6b:b1:a5:f3:9d:8c:31:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Jul 28 10:00:15 2026 GMT
Not After : Jul 29 10:00:15 2026 GMT
Subject: CN=5a802b51142ee02b142def819594d6d89e1a6a68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:50:c4:d1:c0:86:55:c1:dc:f0:59:5d:1c:4c:
e7:d2:83:a2:89:31:f3:8f:02:59:a6:59:06:a8:28:
ac:08:01:ff:a5:53:a3:69:bd:61:90:78:c9:52:bf:
64:fd:07:56:14:e1:14:19:df:35:48:24:84:1b:84:
b2:b4:95:58:ac:10:d5:7e:7f:50:d3:7b:f3:45:14:
75:c9:ee:1b:76:6e:3a:bc:7e:01:d5:50:a6:64:47:
6e:cb:fe:e3:60:06:ba:21:f1:56:3e:47:5a:8d:99:
c8:58:6f:6f:10:94:36:b8:3f:5e:44:3c:ca:04:81:
0a:2a:1d:7d:53:a7:13:58:79:be:ba:fe:24:01:1e:
40:fa:4e:f2:92:5d:76:fd:62:b4:b8:60:a6:b3:6d:
2f:75:a4:77:d7:f2:38:8b:ea:91:b0:6f:7c:34:19:
31:76:f0:24:7b:9b:8d:c0:da:33:37:6d:32:7f:48:
31:2d:cc:d7:b3:8e:76:24:6e:60:17:f5:46:97:6e:
a6:d8:7a:20:6e:04:e0:e6:76:18:38:6c:d8:ae:54:
7b:5b:b0:33:6e:27:53:b4:41:4e:03:59:b5:39:69:
67:67:d0:82:ba:32:f3:96:2e:f9:10:1f:3b:dc:2e:
85:e6:f5:98:95:83:ec:df:a9:c6:32:c8:ab:8f:6b:
49:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:80:2B:51:14:2E:E0:2B:14:2D:EF:81:95:94:D6:D8:9E:1A:6A:68
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:11:07:2d:8a:b9:9b:1f:3e:5d:cc:69:8a:f0:1d:97:c6:6f:
e1:9b:3c:c8:26:ac:26:e5:7b:7f:ab:2d:e5:5c:96:ce:0b:a2:
c8:5f:5f:95:bc:2e:e9:bd:4c:75:d7:1e:7b:49:45:cf:4d:14:
40:2c:c3:fc:b8:e4:fb:21:cc:82:39:a3:f2:74:5a:e1:9d:88:
b8:54:bc:2c:14:cf:d5:90:22:cf:c4:97:76:57:84:a8:86:38:
0c:07:c8:ac:21:41:65:a6:42:20:10:1b:b0:cc:ad:29:e9:e0:
38:9a:28:ab:c1:ab:2e:ad:66:e1:05:77:86:12:6a:49:4e:81:
2b:cc:a1:56:f8:d4:90:55:e4:63:34:9e:40:f0:3d:93:eb:ac:
10:cb:96:40:56:6b:77:45:f3:fa:4b:37:d1:98:4d:25:8f:75:
c5:a0:38:df:47:41:b2:2b:fc:b5:69:21:30:b4:53:2b:f7:32:
48:50:98:c4:63:d9:c3:4a:07:7a:60:98:3c:eb:57:36:04:9d:
1d:f6:46:ea:e4:91:2e:f7:b1:6d:46:87:4b:5b:11:5a:0b:e6:
a6:d6:17:cf:70:ff:4b:43:1d:a6:ca:6e:7e:3c:bb:e8:29:f4:
e3:90:96:48:a8:70:f6:33:50:c2:80:7f:1c:ea:4a:b8:9a:40:
bf:58:61:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:35:36 2026 by rpki-client