Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
File: DMgdB0NX3l0y-KZc2e56WFvz7G8.mft (raw, json)
Hash identifier: dbl2J1R/DC2i84gZ5+3a66MfK37iXfgV9mY468+/QmY=
Subject key identifier: 99:76:05:AE:0E:EC:13:86:E2:27:4B:E6:84:6C:F3:5F:1E:6E:21:EF
Authority key identifier: 0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
Certificate issuer: /CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Certificate serial: 019FA89A16841800BB21521041F2EB796976
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 12:01:38 +0000
Manifest this update: Tue 28 Jul 2026 12:01:38 +0000
Manifest next update: Wed 29 Jul 2026 12:01:38 +0000
Files and hashes: 1: CAvDZl0qMFdxZ8LVZocBKtdLzHI.roa (hash: EZnthEIUE9SeMIsjqwd3wJXvbqbZ76IbJjPCTSp53A8=)
2: DMgdB0NX3l0y-KZc2e56WFvz7G8.crl (hash: ERxEzNeesbSYmkph5o1fCH4m1YEoMJz8DKzFyFvBC0c=)
3: SmZkHgccxI-QnnzFVIpMIGKDK7g.roa (hash: oqBJFsJvqV6Ndgclkr3Sw2YFLuZdnX/bnH7vu2GgJ5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:16:84:18:00:bb:21:52:10:41:f2:eb:79:69:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cc81d074357de5d32f8a65cd9ee7a585bf3ec6f
Validity
Not Before: Jul 28 12:01:38 2026 GMT
Not After : Jul 29 12:01:38 2026 GMT
Subject: CN=997605ae0eec1386e2274be6846cf35f1e6e21ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d6:2f:70:92:40:07:6c:f1:fd:08:e8:28:ab:
7e:44:f1:30:cd:d8:b7:4a:c4:d5:56:81:e9:c5:f2:
13:ee:31:21:9a:7f:2f:de:e1:44:f1:cd:b0:51:fb:
25:07:d4:ee:64:2b:34:a9:34:d9:db:cd:d6:cb:6d:
c8:3f:3f:aa:3b:40:df:8f:c9:d5:61:c2:31:45:3f:
83:df:b2:20:47:ac:f1:00:62:f7:f7:57:5c:27:c6:
8b:86:63:91:49:5f:0c:1d:c3:26:c6:de:e8:42:b1:
b4:5c:69:f0:5e:27:67:d7:bc:23:0f:86:8b:3d:05:
ba:3a:6b:82:77:26:0b:a2:74:d1:7d:a0:a5:f5:3e:
19:9e:f1:fe:b0:d6:62:76:53:4c:4f:e1:fa:85:ae:
d4:32:ad:5e:fe:9e:fe:4c:b7:15:d3:ed:64:f8:95:
bc:f4:3b:82:4a:30:e0:3b:4c:9b:37:c0:22:85:cd:
c8:20:1d:7f:62:e2:7a:08:0b:3e:26:10:d3:b3:c5:
7c:07:2f:88:73:fd:a3:24:92:08:9a:3d:e2:ee:7b:
f5:69:c9:4d:f9:a4:50:d9:a4:20:ec:05:5d:f1:72:
8b:72:a9:54:bc:c1:6b:70:68:de:ab:63:76:85:4b:
23:d8:c6:e0:43:23:9a:28:02:36:fa:c8:bc:0a:5a:
3d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:76:05:AE:0E:EC:13:86:E2:27:4B:E6:84:6C:F3:5F:1E:6E:21:EF
X509v3 Authority Key Identifier:
keyid:0C:C8:1D:07:43:57:DE:5D:32:F8:A6:5C:D9:EE:7A:58:5B:F3:EC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DMgdB0NX3l0y-KZc2e56WFvz7G8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b2d604-ddfb-4eff-b49a-df5ce56e7b4b/1/DMgdB0NX3l0y-KZc2e56WFvz7G8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:06:82:60:bd:a2:7b:7e:ac:16:30:07:a7:b1:e4:54:f0:f3:
2a:b1:9d:6a:2f:8d:a9:7d:df:39:50:43:1d:5c:e8:2f:16:10:
f2:b9:ca:47:06:cf:60:05:bf:28:5a:ff:66:ff:f5:72:08:7d:
57:e2:c5:b5:3e:57:e4:62:d6:48:3a:b5:0c:26:ed:fc:06:0c:
4d:4c:40:90:e8:d3:d8:c5:13:bc:5d:f7:1f:60:f3:59:6b:2d:
84:9f:5a:08:9d:60:fd:d0:a3:3b:0e:fb:7d:d8:be:77:33:a3:
1c:91:90:8a:a3:50:9b:a7:98:29:d4:57:ae:75:a1:df:ab:6b:
ec:e7:58:23:73:22:43:26:68:2b:56:57:28:70:b4:d4:3c:92:
ef:52:66:14:54:34:3b:3d:14:96:d9:81:b8:80:81:65:8a:13:
5f:e0:a2:34:d7:19:c3:48:54:ce:73:28:b3:61:78:d3:01:cd:
ad:b9:2e:de:1b:5a:f4:05:dd:ce:05:b6:7f:9e:8f:19:4f:65:
22:f4:d8:14:e1:e5:c9:35:d4:f0:21:f1:97:65:64:c8:4c:da:
76:7f:66:6b:94:4e:95:44:75:3a:4f:f3:c5:f4:a9:fd:0a:ca:
51:1b:16:b4:5b:0f:fe:6b:7e:29:c9:0e:ec:be:97:95:c8:81:
46:cb:36:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:53 2026 by rpki-client