Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: 87TiC3CKk3uBhYs7Hi1/URUdlhjzUieAyfPcpCniZfg=
Subject key identifier: 6F:26:E5:13:54:B8:81:09:4A:41:15:14:FC:D8:69:D1:90:85:8D:38
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 019D38D37A0EB6B133E823E971DD6B9346C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 153D
Signing time: Sun 29 Mar 2026 09:01:16 +0000
Manifest this update: Sun 29 Mar 2026 09:01:16 +0000
Manifest next update: Mon 30 Mar 2026 09:01:16 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: ROJAvRrOrAMClYa3jVw69aq4cXsBrrQvmvyew5OLKeY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:7a:0e:b6:b1:33:e8:23:e9:71:dd:6b:93:46:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Mar 29 09:01:16 2026 GMT
Not After : Mar 30 09:01:16 2026 GMT
Subject: CN=6f26e51354b881094a411514fcd869d190858d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e0:f0:96:61:1a:95:bc:e2:98:d6:ee:cf:4d:
6f:92:99:59:6d:4a:54:05:e8:4d:46:bf:1d:12:13:
45:57:1a:e3:d1:60:f1:26:fd:97:28:71:c3:2f:34:
1a:2d:88:63:f6:4d:9e:94:53:7d:ba:32:35:59:e2:
20:49:5c:61:3b:d4:c2:d2:22:38:e6:59:31:29:9f:
19:87:6a:61:b8:69:55:51:91:b4:41:bd:bd:ca:41:
74:25:20:87:64:a9:65:2c:ab:f5:4c:46:45:60:fc:
fe:ca:3d:d0:2b:2f:68:6d:52:1e:d4:96:9d:f1:3b:
55:14:6e:9a:23:4f:02:8d:68:bd:a4:70:63:d1:b0:
95:80:8e:7b:38:86:76:4c:c9:22:c2:a4:92:4d:a1:
3d:d5:23:3f:ce:a0:be:cc:db:ae:49:e3:8c:a1:0b:
a9:25:15:c4:01:7b:fd:df:57:8c:1a:7e:2a:c3:59:
23:dd:62:4a:74:ac:e2:62:b5:40:02:dd:7d:57:05:
ae:3b:ae:63:30:c1:e4:62:e8:8b:65:8c:c8:8b:ac:
ea:fa:be:fa:e2:73:77:79:b9:42:67:df:c3:d2:88:
00:0c:6c:6e:72:fd:5a:e8:4e:70:09:fb:1a:83:25:
f3:b7:ad:2c:c6:86:3d:12:ef:df:02:28:65:1e:d9:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:26:E5:13:54:B8:81:09:4A:41:15:14:FC:D8:69:D1:90:85:8D:38
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:44:ca:b3:34:7c:37:ee:dc:02:f3:41:bb:96:3a:6a:77:ea:
08:d0:23:68:05:ad:dd:eb:0c:d2:e9:f4:02:df:75:f7:d1:2e:
46:01:72:5f:a3:22:aa:1a:ec:e4:37:e1:52:59:2d:88:a9:2f:
6a:6a:f5:a3:73:49:e6:6f:f9:54:b0:5a:78:08:dc:be:a2:ac:
9a:f9:0a:38:c8:a1:7e:a8:d4:a8:e7:cd:36:d0:cc:7b:40:38:
e0:a3:78:ce:a7:c8:da:b3:db:29:2b:9b:05:07:6e:81:3f:a7:
59:8b:4a:e9:09:94:cb:3a:a8:13:b2:50:52:a9:f2:67:29:80:
8c:eb:07:9c:81:76:c3:88:bb:50:4c:84:5f:44:69:79:7b:29:
1b:e8:92:44:ca:8f:94:eb:75:20:47:69:35:8f:0b:28:bb:f7:
2d:62:46:e1:07:06:47:36:66:6d:fa:9e:8a:ee:80:1a:ad:4f:
95:4c:de:3c:59:f6:3b:dd:f4:87:99:5d:65:5b:dc:7c:cb:e9:
7a:62:49:47:ef:1d:db:60:2d:ac:01:5d:e4:dc:e5:50:0d:52:
d2:8b:07:95:0e:14:30:0a:07:1d:80:4c:60:9b:6a:70:78:e8:
f5:94:25:56:b9:6b:32:02:7a:96:54:5c:50:75:fa:9d:d2:83:
08:e4:4d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:36:17 2026 by rpki-client