Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: Vy42c0ozhSTxU0yWEHU/ainyJj5VTQIyHzpqfmbP1vo=
Subject key identifier: CE:64:BB:6D:C6:E0:A7:DD:59:9A:48:07:23:A6:55:B6:D7:92:64:09
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 01A0016FB16F1B6086FC2DAF4B68C09D40B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 16AE
Signing time: Fri 14 Aug 2026 18:01:32 +0000
Manifest this update: Fri 14 Aug 2026 18:01:32 +0000
Manifest next update: Sat 15 Aug 2026 18:01:32 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: HqzDVU79rsXmBbk9yMFdFjWcVJxpyXWgdAyCAOZwYN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:b1:6f:1b:60:86:fc:2d:af:4b:68:c0:9d:40:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Aug 14 18:01:32 2026 GMT
Not After : Aug 15 18:01:32 2026 GMT
Subject: CN=ce64bb6dc6e0a7dd599a480723a655b6d7926409
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:69:08:5c:d3:ff:c1:dd:83:85:b6:1f:52:06:
47:63:72:18:04:0b:7f:13:ac:3f:65:ab:90:26:e8:
d8:79:51:c3:b6:da:79:68:8c:04:57:e8:b7:f0:60:
9e:16:c8:93:05:cc:45:d3:4b:2a:2e:8d:ca:d9:5d:
44:4d:9f:33:e2:cd:a1:53:6f:69:6b:18:3b:97:38:
a3:3c:72:78:42:83:ba:64:cd:c2:ed:2c:0f:6b:0f:
a0:e2:89:0f:c2:82:a8:1c:dd:50:ea:9c:f1:be:17:
b3:f6:76:c2:81:13:d2:ec:f4:b6:b5:9e:13:3c:a9:
71:4c:da:a9:d2:24:db:d9:b0:2a:97:d7:35:ad:fb:
86:43:be:74:e4:c9:56:32:9b:61:9e:ad:24:ff:7f:
69:43:09:b9:e6:69:08:82:9a:33:d6:5a:23:8d:d4:
d9:ff:e3:e4:f2:9d:8f:7b:01:71:f7:af:60:36:f1:
46:f7:3b:7b:9e:06:a2:99:15:6b:20:34:f4:2f:1f:
12:67:24:07:0e:85:82:f4:13:80:20:46:1a:c2:74:
80:a6:2f:ee:22:05:b1:e3:73:29:e8:5e:b2:f2:6f:
82:f3:15:90:58:a5:ac:60:c8:b6:b7:ff:c7:f2:d9:
e3:d5:99:fd:0e:6e:76:0c:49:84:12:14:c8:3d:a1:
df:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:64:BB:6D:C6:E0:A7:DD:59:9A:48:07:23:A6:55:B6:D7:92:64:09
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a3:e8:95:72:89:83:48:34:c1:ca:e0:94:30:f1:70:89:4d:
9d:c1:89:68:70:5b:da:35:c6:73:45:3c:a3:6d:25:ca:34:ec:
28:3a:ac:76:1f:6c:87:4d:17:da:10:03:fb:3a:72:ea:59:6b:
1b:3c:41:79:9e:6f:71:78:54:7e:42:a0:fe:49:49:bc:71:24:
28:79:e3:64:01:c1:25:11:5a:0a:c9:29:9c:70:1e:18:45:bf:
9f:dd:0d:cc:a7:72:a3:2f:c2:12:23:59:98:d5:dc:3f:14:bb:
16:cc:72:88:a5:2c:8f:2d:16:ad:d2:14:fc:a3:17:09:bb:88:
49:fb:8b:45:66:c5:88:2c:b8:da:1f:62:48:68:45:71:0b:7a:
ba:16:ac:70:a5:a8:c3:f1:76:44:02:d3:e6:da:4b:0f:a2:9f:
7d:bf:0e:21:37:05:36:5d:96:b3:1b:84:0c:91:48:1d:34:e8:
97:20:0f:8f:ff:5d:8f:59:47:de:77:5d:eb:34:49:eb:94:13:
a8:1f:32:20:6d:14:65:24:76:60:eb:c9:8d:e9:73:6d:f0:29:
8d:de:3a:8a:ad:8f:5b:2e:cc:12:ef:4e:f1:c1:cb:8c:a3:01:
81:b2:e7:d4:09:dd:98:e8:73:0d:85:22:06:22:13:bb:f4:79:
f2:b4:e8:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaABb7FvG2CG/C2vS2jAnUC0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMDgwODlhYWE3YzI4MzY1NGJjZGE1MGE5MzM0NjRlNzEy
NzkxYjAwHhcNMjYwODE0MTgwMTMyWhcNMjYwODE1MTgwMTMyWjAzMTEwLwYDVQQD
EyhjZTY0YmI2ZGM2ZTBhN2RkNTk5YTQ4MDcyM2E2NTViNmQ3OTI2NDA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGkIXNP/wd2DhbYfUgZHY3IYBAt/
E6w/ZauQJujYeVHDttp5aIwEV+i38GCeFsiTBcxF00sqLo3K2V1ETZ8z4s2hU29p
axg7lzijPHJ4QoO6ZM3C7SwPaw+g4okPwoKoHN1Q6pzxvhez9nbCgRPS7PS2tZ4T
PKlxTNqp0iTb2bAql9c1rfuGQ7505MlWMpthnq0k/39pQwm55mkIgpoz1lojjdTZ
/+Pk8p2PewFx969gNvFG9zt7ngaimRVrIDT0Lx8SZyQHDoWC9BOAIEYawnSApi/u
IgWx43Mp6F6y8m+C8xWQWKWsYMi2t//H8tnj1Zn9Dm52DEmEEhTIPaHf2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5ku23G4KfdWZpIByOmVbbXkmQJMB8GA1UdIwQY
MBaAFA8ICJqqfCg2VLzaUKkzRk5xJ5GwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgt
NjMwNDIzMmJlYzNjLzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgtNjMwNDIzMmJlYzNj
LzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADaPolXKJ
g0g0wcrglDDxcIlNncGJaHBb2jXGc0U8o20lyjTsKDqsdh9sh00X2hAD+zpy6llr
GzxBeZ5vcXhUfkKg/klJvHEkKHnjZAHBJRFaCskpnHAeGEW/n90NzKdyoy/CEiNZ
mNXcPxS7FsxyiKUsjy0WrdIU/KMXCbuISfuLRWbFiCy42h9iSGhFcQt6uhascKWo
w/F2RALT5tpLD6Kffb8OITcFNl2WsxuEDJFIHTTolyAPj/9dj1lH3ndd6zRJ65QT
qB8yIG0UZSR2YOvJjelzbfApjd46iq2PWy7MEu9O8cHLjKMBgbLn1AndmOhzDYUi
BiITu/R58rTohw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:36 2026 by rpki-client