Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: DON2YNy8eaXklQFIl/99FzvXJtHUYyFBCbcXcars/tA=
Subject key identifier: DC:4E:81:11:EA:EE:27:1D:F5:B8:10:46:45:5B:58:04:C7:62:AC:E2
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 019E31F28D68203ADE198FE1C6679A600A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 15BE
Signing time: Sat 16 May 2026 18:00:39 +0000
Manifest this update: Sat 16 May 2026 18:00:39 +0000
Manifest next update: Sun 17 May 2026 18:00:39 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: MejGaOu0tM1/r04Pb+wYMQeycQ20ska9x41GvV4U1ns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:f2:8d:68:20:3a:de:19:8f:e1:c6:67:9a:60:0a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: May 16 18:00:39 2026 GMT
Not After : May 17 18:00:39 2026 GMT
Subject: CN=dc4e8111eaee271df5b81046455b5804c762ace2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:98:1a:28:9b:7a:ef:f1:eb:8e:18:4d:05:
8b:ef:79:f6:18:34:99:2e:7a:7b:d3:89:0c:6e:57:
f2:e1:0b:80:0a:ff:e1:4a:13:32:91:f7:cc:6e:b9:
99:93:a5:5e:47:03:10:da:60:7c:e3:3d:90:0f:e4:
24:6c:34:9e:90:be:28:12:9f:27:2e:13:12:9a:72:
26:fe:2b:31:07:7e:0c:cf:96:58:a8:08:e1:9b:e6:
92:1d:d8:9c:22:e8:7e:8b:2b:bc:a7:30:b1:19:9d:
35:e7:6d:89:b6:2b:73:20:b0:3f:d9:a9:84:07:70:
f5:d7:73:ea:1b:3c:a8:ec:0f:39:aa:6e:a9:7b:a1:
67:3a:a5:45:97:3a:dc:d5:fb:eb:c6:3e:15:90:e0:
a7:55:0b:e2:a0:fb:d1:e9:08:04:64:7a:c7:d6:bb:
63:f2:9c:5f:99:03:13:c2:ba:89:5c:f1:b7:fc:4b:
b6:8c:19:54:ac:b8:a1:31:3c:6e:23:88:00:ae:db:
b4:c1:63:a3:48:04:50:78:a4:b4:47:1f:9d:e4:4e:
33:08:e1:d2:f2:f5:9d:20:be:bb:37:d2:70:f0:d8:
85:10:26:ca:bf:34:3b:0f:7a:a4:0e:5b:64:2a:9f:
af:8c:56:46:81:ed:d6:96:da:52:a5:89:03:c7:cd:
f9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:4E:81:11:EA:EE:27:1D:F5:B8:10:46:45:5B:58:04:C7:62:AC:E2
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ec:3d:d6:9d:fd:06:78:ea:83:0f:99:0f:f0:99:c0:ab:07:
35:10:7f:0e:44:5a:a4:07:e1:e1:a1:59:61:59:e9:fc:e3:90:
9d:df:0c:74:01:88:93:a7:47:93:1e:19:65:fc:26:cc:33:ef:
22:cd:89:4b:bc:fe:43:a3:e4:29:a9:9d:ef:cc:41:41:20:02:
7c:51:55:36:f8:d3:d6:89:d8:22:bb:5e:d5:a1:36:eb:e7:12:
38:59:e1:d6:a6:6a:85:49:e6:d4:9c:d4:d1:ce:53:e9:e6:2e:
96:0e:96:bb:59:f6:d8:02:22:d8:93:f9:c8:0d:19:08:45:18:
24:14:9d:72:30:8c:71:8f:0e:a4:3a:0b:21:a9:ba:fa:39:d5:
65:35:5e:c7:b5:b2:c0:95:1c:49:6d:66:0f:aa:6b:f3:98:47:
07:20:d7:e1:29:fe:d6:27:8c:eb:69:82:1b:97:3c:c0:d1:1d:
f0:bf:0f:00:fd:bc:c5:8b:42:4b:bd:aa:4d:d5:6d:12:c5:e8:
98:3b:62:51:8c:d5:c6:20:7b:4a:0d:73:f3:68:56:7f:99:c0:
07:ef:94:fa:61:da:f7:a2:00:db:fd:f9:21:2f:44:3c:7b:3a:
a4:79:35:15:38:b0:6a:d8:a4:5f:10:70:6b:32:81:ae:2d:0c:
bd:19:6c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 20:21:04 2026 by rpki-client