Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
File: DmmmfUshWj8x_EYvDqU074P471c.mft (raw, json)
Hash identifier: Ncw5O7nr91J37kehZTqOS/5QIuza4jsVS/OHHniz+I0=
Subject key identifier: 57:C7:B2:28:A6:EB:41:8B:7E:04:FC:D7:8C:AA:65:5B:04:B0:E8:D8
Authority key identifier: 0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57
Certificate issuer: /CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57
Certificate serial: 01A1C69ED0C958062C0B86AD60BDA45BCCE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
Manifest number: 0D0C
Signing time: Tue 10 Nov 2026 18:00:59 +0000
Manifest this update: Tue 10 Nov 2026 18:00:59 +0000
Manifest next update: Wed 11 Nov 2026 18:00:59 +0000
Files and hashes: 1: 8svsIgn5tq4TwLZ8CqIwk9q5WfI.roa (hash: R7ukUl73bf88vyaN/XaccoEI8iCFq1NpX9UxV6nC/GE=)
2: DmmmfUshWj8x_EYvDqU074P471c.crl (hash: Fmh9mAbTcAhxTPLa4X/IkNFLNtw6SABmcGOLXdYmmzE=)
3: eJSu2mwqjv-QqXPa-b6GRUSD3rQ.roa (hash: 8Xp/LdoxCaTuezyx5QRMEAVFrFHA3obUardNQYSwraI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 16:12:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c6:9e:d0:c9:58:06:2c:0b:86:ad:60:bd:a4:5b:cc:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e69a67d4b215a3f31fc462f0ea534ef83f8ef57
Validity
Not Before: Nov 10 18:00:59 2026 GMT
Not After : Nov 11 18:00:59 2026 GMT
Subject: CN=57c7b228a6eb418b7e04fcd78caa655b04b0e8d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b6:57:16:48:39:e9:e5:9d:24:2b:1f:bf:3d:
27:e8:8b:96:c5:5f:c0:d0:fb:cb:f5:51:23:23:58:
46:78:d1:32:ed:d0:ba:a3:5b:67:b1:20:84:f6:95:
7d:2a:1b:db:6e:06:37:f4:4c:21:7f:f1:83:ea:6f:
20:11:f3:1e:77:81:fc:cf:e9:bf:89:20:51:41:be:
64:82:68:b2:2e:f4:ba:00:3f:e8:d4:4b:ed:77:d5:
7d:66:e1:35:72:c3:38:87:7a:d4:05:eb:13:e8:9f:
0c:31:2b:99:e0:f7:41:5b:30:ae:da:8e:01:bb:fa:
96:57:b2:6b:5d:0a:a7:e8:6a:9d:8d:53:26:90:9b:
35:27:76:89:48:ac:91:2e:86:68:a2:f3:3f:17:50:
5a:7b:10:81:6a:02:c6:fe:99:bd:c3:6c:8e:d8:26:
57:3a:aa:b4:04:9e:1e:43:46:39:ef:b5:a3:99:33:
ba:70:4f:86:1c:25:e5:ed:40:5c:f7:ad:d3:64:3d:
03:3f:46:fb:55:da:72:9f:63:5d:bf:80:ed:80:34:
07:13:ba:e0:2f:a4:e9:f3:69:0d:d6:04:3c:1a:5b:
c2:a9:6c:a1:53:3f:18:89:43:32:f4:e7:5d:0d:9c:
63:c9:3d:e1:73:c3:c5:df:62:fa:cf:55:9f:69:40:
0e:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C7:B2:28:A6:EB:41:8B:7E:04:FC:D7:8C:AA:65:5B:04:B0:E8:D8
X509v3 Authority Key Identifier:
keyid:0E:69:A6:7D:4B:21:5A:3F:31:FC:46:2F:0E:A5:34:EF:83:F8:EF:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DmmmfUshWj8x_EYvDqU074P471c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/50bdd4-e2a9-46c9-836e-68c1b7dfb190/1/DmmmfUshWj8x_EYvDqU074P471c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:bd:8e:a7:90:6e:ab:7c:f9:5f:49:71:2f:40:4b:d5:fd:f0:
96:82:c1:da:ba:c6:1e:21:33:6d:88:30:56:fc:54:51:45:ef:
7e:3e:6c:26:f2:94:c4:6b:37:42:42:3f:d4:f0:7a:99:6e:10:
c8:97:2a:e8:f7:c6:f4:9d:1a:14:c7:d9:5e:70:10:4c:dc:c1:
84:7c:21:c2:5d:f5:39:29:29:95:6c:ca:42:e5:56:90:a7:60:
89:46:a3:20:84:ab:67:8a:1c:a3:01:98:1c:91:ac:64:0a:af:
58:38:7f:d6:27:31:5f:03:09:11:5b:3d:52:35:eb:ac:70:85:
06:2a:ca:77:f2:32:5f:87:b7:43:79:69:dd:9a:50:5a:a2:ff:
b1:b1:6a:e1:71:06:88:0f:e4:e8:9f:3b:fd:97:8c:14:a8:a8:
a6:dd:d4:31:19:41:db:c1:2a:31:96:73:09:0f:d8:c0:d6:c7:
3c:f8:37:ac:fc:52:2a:34:42:7c:14:43:7d:dd:08:01:5b:b2:
e8:30:4c:9a:19:40:69:cf:05:18:84:4a:83:5e:70:9e:8e:6c:
a8:4d:c2:7b:ec:b3:3f:fa:bb:6c:53:95:fa:d0:1e:a8:08:ba:
38:82:96:e2:a0:ba:70:c2:ea:ed:75:81:db:17:bc:bf:9c:46:
84:36:b1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 22:58:13 2026 by rpki-client