Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: o2qNHQVLiGv+bbJXBgW6285adwabCCXpo+qew5njxVQ=
Subject key identifier: 60:18:E7:35:3A:4B:98:1F:A4:F7:5F:BF:57:36:53:82:3D:1C:BD:23
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 019CAA8F7A70A6DFA1AC541B38B953C95815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 18:00:55 +0000
Manifest this update: Sun 01 Mar 2026 18:00:55 +0000
Manifest next update: Mon 02 Mar 2026 18:00:55 +0000
Files and hashes: 1: 0f-a9_GN4BlFPHzpxP1ErjNcYpw.roa (hash: liGbjhGL+F+gsqi1YSPCU6zeplSqGVUh3nmEpRRgfOY=)
2: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: 1SiNMvhqI0Yq+7xBmR12gK202fX++X37azpVi+63DOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:7a:70:a6:df:a1:ac:54:1b:38:b9:53:c9:58:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Mar 1 18:00:55 2026 GMT
Not After : Mar 2 18:00:55 2026 GMT
Subject: CN=6018e7353a4b981fa4f75fbf573653823d1cbd23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:84:e0:26:26:15:30:ae:97:79:32:f9:f4:41:
c1:36:ad:5b:4a:1a:2f:3e:39:28:ec:b9:ea:a6:1e:
64:76:54:e0:4c:a9:80:a0:58:75:07:c2:ff:7b:94:
93:f1:b7:a4:6c:66:70:a6:ce:f1:69:fe:29:f8:45:
ec:f6:9d:79:94:a9:3e:00:db:fc:33:0a:85:ea:37:
ee:ad:f1:4d:99:40:a4:17:04:93:f8:a9:6c:2f:af:
48:d2:4c:e5:9d:a7:b9:66:90:f7:92:b1:ad:88:db:
a3:da:fd:f7:44:5e:bb:0c:a3:6a:d7:29:cf:b3:23:
33:91:0a:dc:c2:d3:ef:3f:be:e6:c1:16:18:c8:fa:
f8:2d:18:de:a5:b9:d9:3a:83:02:a9:8c:6a:40:26:
2d:1e:fc:9f:8d:6b:4a:25:ca:ee:99:ae:09:72:55:
0c:bf:93:38:b2:63:8b:be:4b:7b:98:2b:00:f0:07:
9d:0f:d3:73:54:2d:47:fe:92:0d:ef:6b:d9:f7:64:
9a:75:73:4c:d1:c8:f1:32:76:47:31:b3:b2:d9:59:
68:e5:73:dc:c0:5a:1a:36:97:27:db:be:f2:f8:95:
c5:52:5d:34:37:3c:d4:82:52:cd:c6:52:45:c2:47:
57:ef:0e:3d:20:61:ee:91:12:78:9c:ed:6d:4d:8d:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:18:E7:35:3A:4B:98:1F:A4:F7:5F:BF:57:36:53:82:3D:1C:BD:23
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:52:a5:a7:ae:d3:63:08:64:28:b1:35:f7:e9:87:1e:41:95:
65:79:94:f8:7d:97:fb:9c:de:02:1d:75:84:65:63:68:9a:9b:
ff:a9:4e:a5:a4:aa:e5:cb:ce:0a:d3:b5:99:5a:3c:f4:01:cf:
07:d1:4b:f4:91:01:b9:35:b5:28:a8:b7:64:13:35:aa:a6:60:
91:b2:b9:b1:e5:57:48:b6:db:47:95:66:b1:fb:b6:b6:14:0e:
ef:8a:9e:b7:65:3e:95:07:31:b2:98:24:a0:d5:c2:b5:40:a0:
6c:8b:21:80:85:70:2c:10:a1:71:32:57:c7:bb:83:4a:16:5f:
06:be:c8:63:a3:10:ef:5c:e0:9e:18:2c:45:fc:a2:78:91:4c:
cb:b7:51:de:71:d8:53:38:61:1b:8e:75:cc:84:41:60:c8:7c:
3c:18:a1:d8:d8:0b:eb:4e:1d:68:42:8a:ab:6e:73:48:67:1c:
ab:b1:6f:53:5e:d4:e6:b7:36:7f:d5:78:d7:c6:fb:7e:8d:bb:
61:1a:a6:0c:47:a4:db:c6:df:d2:32:e7:9d:cf:c4:25:7a:aa:
d6:23:ee:c2:3a:c0:87:66:5c:73:94:5b:ee:df:4e:ec:67:8d:
f3:f4:85:a8:e0:47:93:91:86:f3:2e:03:c2:7c:a6:61:48:e0:
5c:1a:44:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj3pwpt+hrFQbOLlTyVgVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNmIzODVjN2I4Nzc4YmY3OGFmMjQyMWM5OWY1ZDM4YmQ1
NTY5MTQwHhcNMjYwMzAxMTgwMDU1WhcNMjYwMzAyMTgwMDU1WjAzMTEwLwYDVQQD
Eyg2MDE4ZTczNTNhNGI5ODFmYTRmNzVmYmY1NzM2NTM4MjNkMWNiZDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4TgJiYVMK6XeTL59EHBNq1bShov
Pjko7Lnqph5kdlTgTKmAoFh1B8L/e5ST8bekbGZwps7xaf4p+EXs9p15lKk+ANv8
MwqF6jfurfFNmUCkFwST+KlsL69I0kzlnae5ZpD3krGtiNuj2v33RF67DKNq1ynP
syMzkQrcwtPvP77mwRYYyPr4LRjepbnZOoMCqYxqQCYtHvyfjWtKJcruma4JclUM
v5M4smOLvkt7mCsA8AedD9NzVC1H/pIN72vZ92SadXNM0cjxMnZHMbOy2Vlo5XPc
wFoaNpcn277y+JXFUl00NzzUglLNxlJFwkdX7w49IGHukRJ4nO1tTY0uzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGAY5zU6S5gfpPdfv1c2U4I9HL0jMB8GA1UdIwQY
MBaAFA5rOFx7h3i/eK8kIcmfXTi9VWkUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMt
MWM3NzQzMWIwNWY3LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wYThmYzEtOTg2ZS00MjA5LTkzMGMtMWM3NzQzMWIwNWY3
LzEvRG1zNFhIdUhlTDk0cnlRaHlaOWRPTDFWYVJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlKlp67T
YwhkKLE19+mHHkGVZXmU+H2X+5zeAh11hGVjaJqb/6lOpaSq5cvOCtO1mVo89AHP
B9FL9JEBuTW1KKi3ZBM1qqZgkbK5seVXSLbbR5Vmsfu2thQO74qet2U+lQcxspgk
oNXCtUCgbIshgIVwLBChcTJXx7uDShZfBr7IY6MQ71zgnhgsRfyieJFMy7dR3nHY
UzhhG451zIRBYMh8PBih2NgL604daEKKq25zSGccq7FvU17U5rc2f9V418b7fo27
YRqmDEek28bf0jLnnc/EJXqq1iPuwjrAh2Zcc5Rb7t9O7GeN8/SFqOBHk5GG8y4D
wnymYUjgXBpEqw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:40:21 2026 by rpki-client