Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
File: DMgShJHbEyzPzYKt5wDeswayFho.mft (raw, json)
Hash identifier: HT3SZw5ypTldw1DV8OyZCxT4pkqkmM8Kdsk8Z3nEHIQ=
Subject key identifier: 7A:37:A7:64:F6:7E:77:75:5A:DD:FD:5F:F5:0D:23:A2:B6:AC:09:E2
Authority key identifier: 0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
Certificate issuer: /CN=0cc8128491db132ccfcd82ade700deb306b2161a
Certificate serial: 019CAD594659050B63B5777C8E757AA41C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 07:00:34 +0000
Manifest this update: Mon 02 Mar 2026 07:00:34 +0000
Manifest next update: Tue 03 Mar 2026 07:00:34 +0000
Files and hashes: 1: DMgShJHbEyzPzYKt5wDeswayFho.crl (hash: NeN/rxDHh+3UOSeaVhvLWh7by47Gy52My/P1wreMTSI=)
2: nLPrlrzFQJke2w0nSv6P6BPs3rs.roa (hash: lHcs6pM3E3th/X7lArO6Gv/GZjzfkX92Szx3cqmHxMY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:46:59:05:0b:63:b5:77:7c:8e:75:7a:a4:1c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc8128491db132ccfcd82ade700deb306b2161a
Validity
Not Before: Mar 2 07:00:34 2026 GMT
Not After : Mar 3 07:00:34 2026 GMT
Subject: CN=7a37a764f67e77755addfd5ff50d23a2b6ac09e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:79:5a:57:aa:40:c6:0b:19:52:95:9b:28:d4:
d7:03:dc:8e:f3:06:e6:22:eb:62:39:fe:01:0d:46:
eb:4d:2c:95:a1:9f:73:01:0d:b0:94:36:e2:ca:cc:
df:81:59:4f:75:88:d9:0e:3f:eb:4b:b1:7d:9b:89:
e2:a6:65:76:2a:d6:69:30:88:27:17:75:59:19:bc:
f3:f5:9c:ea:22:d2:e3:85:41:97:6a:b7:99:b3:d3:
de:c4:0b:f9:b0:95:50:2b:b5:1c:3c:b0:ff:bb:af:
96:03:01:38:96:0b:1d:97:09:46:e3:aa:9d:b3:c5:
e7:fb:83:79:59:9e:4b:ae:72:56:98:c7:6b:6a:19:
76:60:05:b4:10:09:13:61:52:57:0f:36:b3:3a:bb:
35:a9:51:32:8b:1e:a0:41:a4:8d:0f:0e:29:97:01:
48:37:71:06:83:58:b1:cf:3c:4a:95:98:c0:01:17:
0b:3d:bf:54:d2:2f:da:35:8b:c0:78:7d:52:2c:41:
33:db:33:be:53:d9:3a:46:c7:53:32:bd:46:fa:2d:
1f:a5:05:68:44:95:a9:78:57:81:cd:cd:c9:9b:fd:
2e:27:59:53:f9:bb:c5:c5:d1:4a:63:e8:74:7d:31:
02:71:83:4f:1c:f5:a2:9a:5b:57:62:3c:b9:f0:53:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:37:A7:64:F6:7E:77:75:5A:DD:FD:5F:F5:0D:23:A2:B6:AC:09:E2
X509v3 Authority Key Identifier:
keyid:0C:C8:12:84:91:DB:13:2C:CF:CD:82:AD:E7:00:DE:B3:06:B2:16:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgShJHbEyzPzYKt5wDeswayFho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/2c3f53-1bab-4d32-8380-d59108b57214/1/DMgShJHbEyzPzYKt5wDeswayFho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:42:01:4e:9d:0e:2a:69:1e:ee:47:22:ac:82:7d:f3:02:28:
90:f9:70:f6:8e:97:32:f5:0c:79:25:95:d0:c0:60:0d:a8:5d:
c2:24:d0:01:05:31:38:1a:19:51:1b:87:1b:e8:3c:e5:d0:d4:
16:9c:ad:95:fc:63:ba:f2:1d:ff:c1:d7:61:51:45:62:e9:f8:
59:84:86:71:2d:de:3e:ce:b2:87:a0:84:7e:70:00:8e:68:c7:
04:53:69:dd:9e:f5:01:b8:b0:f5:a6:54:8e:e8:1e:1d:15:14:
d4:e1:45:8e:ee:4f:1d:16:5b:cb:92:ca:2e:8e:01:1e:86:d0:
f8:f8:3b:ea:45:f4:fb:f9:14:3b:9a:a5:13:4f:55:bf:06:ea:
d8:70:86:41:5a:e0:78:f0:02:35:0f:ce:3e:95:f0:b0:e7:f7:
16:c3:5d:d4:7a:da:05:2f:21:f8:94:5e:ef:ea:78:d3:27:a3:
36:cc:7d:6a:0b:dd:92:21:96:24:fb:fc:54:8f:cb:96:c6:41:
be:00:49:88:4f:5d:dc:2a:e6:f3:3d:25:e9:ca:01:87:4c:0b:
c5:7f:32:87:04:71:7b:00:d9:25:d1:5e:5b:9f:fe:15:9d:b1:
9d:d7:22:ed:46:8c:fb:5f:a9:54:79:50:b9:2a:eb:bb:cd:19:
aa:d0:96:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:41:36 2026 by rpki-client