Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: ygSjWAtv6Th/cQ4dAOjVnXUrEicEkajHeq3HGDT0f3Q=
Subject key identifier: CC:7F:F0:15:09:48:AF:98:4B:E8:0A:FE:66:EC:C6:03:32:2C:8B:F0
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 01A1705C1D764349FBB4115ACAD1CF5030AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 176C
Signing time: Sun 25 Oct 2026 00:00:47 +0000
Manifest this update: Sun 25 Oct 2026 00:00:47 +0000
Manifest next update: Mon 26 Oct 2026 00:00:47 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: sLqggBUOqH2jXk/8LrsJAmGtc9KVo+Q8eNv2qY2cEqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:5c:1d:76:43:49:fb:b4:11:5a:ca:d1:cf:50:30:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Oct 25 00:00:47 2026 GMT
Not After : Oct 26 00:00:47 2026 GMT
Subject: CN=cc7ff0150948af984be80afe66ecc603322c8bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:22:44:ae:50:71:bb:9a:41:8a:cc:89:53:71:
11:98:1b:00:4a:48:21:15:c2:2b:0e:93:3a:86:7e:
a4:d4:f1:73:c3:bc:b9:f4:1d:37:c7:f5:2e:0c:49:
4f:8d:ea:93:da:3f:e9:01:f5:42:19:a5:2e:97:33:
86:ea:54:b2:f7:43:d3:a3:ad:28:e0:b7:71:bb:45:
7f:26:82:5f:34:ff:44:59:ac:2d:34:cf:0c:b0:8a:
9e:f4:80:b8:44:69:98:06:1a:49:82:61:3a:bd:dc:
01:11:4f:b6:bc:27:ce:89:99:05:e3:be:c4:f2:1e:
74:42:01:76:45:cf:98:a0:20:9e:57:e2:af:57:f3:
91:99:19:bb:a8:81:e9:35:73:f9:29:2d:65:25:0a:
1f:ce:91:3d:e8:47:f2:18:f9:54:8c:a2:3b:0c:2a:
86:be:c4:a1:58:22:ef:3a:80:01:ae:62:0e:ab:27:
4e:8f:49:81:15:9e:a5:96:15:75:e1:fb:2d:71:e5:
2d:cd:8e:4d:69:74:fc:2e:52:ae:13:32:de:3d:d1:
c1:70:8a:10:e2:87:24:ee:79:b5:9c:f4:4d:6f:8e:
34:ac:ba:26:6f:a2:91:ae:08:b8:ef:c9:11:bc:64:
82:ff:1c:73:79:35:27:c4:72:a4:11:44:c0:11:0d:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7F:F0:15:09:48:AF:98:4B:E8:0A:FE:66:EC:C6:03:32:2C:8B:F0
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:02:d2:9e:65:55:33:a8:a7:11:d5:17:04:96:b6:6c:2a:f7:
82:a2:c5:cb:61:6d:1f:fb:3f:b6:f8:2b:ce:31:e7:34:6e:6a:
2e:6e:71:ed:08:ac:6e:85:d4:06:66:73:59:57:7b:b0:d2:a9:
84:57:e5:2e:ac:79:4b:c7:5d:4c:55:5e:1f:18:dc:98:cb:9e:
66:b3:b8:fe:1b:64:17:c8:fa:68:6c:bd:07:17:c3:30:21:90:
a6:30:fc:bf:91:70:5d:3c:86:7a:02:8d:10:49:7f:6a:9f:f8:
3c:48:57:e8:cc:de:bf:a5:62:6e:90:b8:53:5e:d8:0e:0f:3b:
35:8b:7a:66:11:ad:f6:7f:76:4b:36:c6:6e:1f:52:fa:9f:54:
22:18:d2:e1:f6:df:2f:83:58:de:45:10:ea:cd:ff:db:52:13:
53:41:29:77:d4:15:8e:d7:90:32:13:62:62:9c:30:9d:3e:4b:
c9:4d:a0:b1:13:8f:1e:a7:31:3b:5e:b5:0c:56:b6:61:80:5c:
26:8a:fb:2c:2f:89:bd:1b:5f:d4:77:fe:cc:de:37:bc:42:20:
f6:1e:c9:24:c6:ab:9c:05:58:cc:e4:04:b1:c9:21:a8:3e:cd:
05:91:a4:76:8a:cf:80:f9:23:46:6e:8c:5c:2d:b5:6d:67:0a:
92:b9:44:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFwXB12Q0n7tBFaytHPUDCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMDgwODlhYWE3YzI4MzY1NGJjZGE1MGE5MzM0NjRlNzEy
NzkxYjAwHhcNMjYxMDI1MDAwMDQ3WhcNMjYxMDI2MDAwMDQ3WjAzMTEwLwYDVQQD
EyhjYzdmZjAxNTA5NDhhZjk4NGJlODBhZmU2NmVjYzYwMzMyMmM4YmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7iJErlBxu5pBisyJU3ERmBsASkgh
FcIrDpM6hn6k1PFzw7y59B03x/UuDElPjeqT2j/pAfVCGaUulzOG6lSy90PTo60o
4Ldxu0V/JoJfNP9EWawtNM8MsIqe9IC4RGmYBhpJgmE6vdwBEU+2vCfOiZkF477E
8h50QgF2Rc+YoCCeV+KvV/ORmRm7qIHpNXP5KS1lJQofzpE96EfyGPlUjKI7DCqG
vsShWCLvOoABrmIOqydOj0mBFZ6llhV14fstceUtzY5NaXT8LlKuEzLePdHBcIoQ
4ock7nm1nPRNb440rLomb6KRrgi478kRvGSC/xxzeTUnxHKkEUTAEQ2nDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMx/8BUJSK+YS+gK/mbsxgMyLIvwMB8GA1UdIwQY
MBaAFA8ICJqqfCg2VLzaUKkzRk5xJ5GwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgt
NjMwNDIzMmJlYzNjLzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgtNjMwNDIzMmJlYzNj
LzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsQLSnmVV
M6inEdUXBJa2bCr3gqLFy2FtH/s/tvgrzjHnNG5qLm5x7QisboXUBmZzWVd7sNKp
hFflLqx5S8ddTFVeHxjcmMueZrO4/htkF8j6aGy9BxfDMCGQpjD8v5FwXTyGegKN
EEl/ap/4PEhX6Mzev6VibpC4U17YDg87NYt6ZhGt9n92SzbGbh9S+p9UIhjS4fbf
L4NY3kUQ6s3/21ITU0Epd9QVjteQMhNiYpwwnT5LyU2gsROPHqcxO161DFa2YYBc
Jor7LC+JvRtf1Hf+zN43vEIg9h7JJMarnAVYzOQEsckhqD7NBZGkdorPgPkjRm6M
XC21bWcKkrlEMg==
-----END CERTIFICATE-----
Generated at Sun Oct 25 09:28:35 2026 by rpki-client