Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
File: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft (raw, json)
Hash identifier: D8LE14TWGInbhJnCjtYQA1Y4SeGuOcpWZu8GOhyOyC4=
Subject key identifier: BC:49:C6:D0:15:90:0D:0A:E0:0E:D3:C2:63:17:B3:AF:E8:E6:E3:90
Authority key identifier: 0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
Certificate issuer: /CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Certificate serial: 019EBF917424DD3D26DEB6A5CFE1DEFD1132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 06:00:41 +0000
Manifest this update: Sat 13 Jun 2026 06:00:41 +0000
Manifest next update: Sun 14 Jun 2026 06:00:41 +0000
Files and hashes: 1: 0f-a9_GN4BlFPHzpxP1ErjNcYpw.roa (hash: liGbjhGL+F+gsqi1YSPCU6zeplSqGVUh3nmEpRRgfOY=)
2: Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl (hash: hwSZOcfqzJBpQ9D6KQZIvwL+DkUuZ4ztpVTQD/XvYUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:91:74:24:dd:3d:26:de:b6:a5:cf:e1:de:fd:11:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e6b385c7b8778bf78af2421c99f5d38bd556914
Validity
Not Before: Jun 13 06:00:41 2026 GMT
Not After : Jun 14 06:00:41 2026 GMT
Subject: CN=bc49c6d015900d0ae00ed3c26317b3afe8e6e390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:97:80:0f:48:74:0c:b2:df:d4:d0:52:72:ec:
7b:e9:c5:f3:49:b5:a9:48:66:00:22:d5:f8:87:7d:
c8:a4:4f:02:86:ac:fd:40:02:94:ec:5f:22:aa:6f:
c6:ae:6b:36:23:e5:50:8b:e0:56:b6:48:af:0c:3f:
43:56:df:71:3d:e3:6a:4a:5c:87:9f:b2:f3:2b:b9:
c6:54:16:bb:54:e0:1f:06:54:8e:f1:25:9a:b6:85:
17:6a:47:9a:54:7b:f6:77:0d:49:be:63:58:9d:74:
91:29:7b:33:22:58:77:dc:a6:26:9c:21:c0:9f:8a:
76:33:ce:3e:0b:2e:71:bb:40:5f:fc:f9:15:50:8d:
04:e7:28:24:af:39:3c:bb:73:62:ce:38:27:b2:1b:
cb:65:53:ce:8a:29:9a:21:23:27:3c:95:1b:b0:6b:
93:9e:8d:51:ac:ef:77:60:c5:9d:9c:72:fc:9a:99:
5b:b2:f3:68:b6:33:e2:17:79:a0:dc:c4:9a:4e:db:
aa:b1:79:43:12:b9:50:5e:b3:ab:ab:95:3e:a0:b6:
98:ef:4c:af:cc:a2:0c:79:56:24:4e:91:d0:99:e6:
ba:78:47:e2:a6:39:39:e2:4d:54:13:b9:be:de:c0:
c1:ea:52:e1:76:e8:e8:5d:32:ae:d5:9f:f5:d5:69:
ad:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:49:C6:D0:15:90:0D:0A:E0:0E:D3:C2:63:17:B3:AF:E8:E6:E3:90
X509v3 Authority Key Identifier:
keyid:0E:6B:38:5C:7B:87:78:BF:78:AF:24:21:C9:9F:5D:38:BD:55:69:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/0a8fc1-986e-4209-930c-1c77431b05f7/1/Dms4XHuHeL94ryQhyZ9dOL1VaRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:fc:0a:10:4d:9a:bc:86:4e:47:2e:a2:92:98:c2:a7:37:93:
28:db:eb:92:97:2c:8b:60:2d:39:65:d4:05:9c:b7:02:a9:17:
d8:1a:aa:e0:63:18:75:17:23:7d:c2:b8:85:13:88:61:5b:77:
00:9b:18:42:ee:33:5a:87:c6:6a:3b:2c:19:5d:41:8c:2b:92:
21:63:b3:49:76:44:92:83:72:f3:92:30:25:05:c0:55:49:35:
42:a7:53:52:92:d4:68:1a:a4:bb:9f:07:7f:4e:dc:38:31:29:
da:59:e9:b2:c1:a5:af:68:76:b7:e9:40:f8:c9:f7:53:1e:5e:
1f:75:58:fa:2a:33:83:8e:00:85:0c:51:c8:2f:3a:eb:48:33:
20:cf:10:af:ce:fe:6c:be:29:8c:f9:aa:d9:6c:0b:55:3d:c5:
56:24:63:6d:95:57:6a:2e:80:d7:b6:be:74:3d:42:2b:ee:a4:
bf:05:5d:14:58:70:cf:25:f5:5c:a3:02:7f:15:54:e5:36:d1:
10:21:51:2d:65:e7:bc:5e:84:24:49:52:f9:a9:d2:91:17:b3:
0a:7d:68:fe:b1:08:7e:ab:db:8c:aa:be:63:8d:cf:1a:35:6e:
d8:9f:a8:ea:14:e1:4b:db:13:f7:b9:5a:bb:4a:db:28:31:53:
63:81:3f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:52:58 2026 by rpki-client