Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File: DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier: FbyvPvqpDiGS30plSp1GuT/wULWfveTuUavPec8DvME=
Subject key identifier: 63:2D:11:B0:D9:EB:0A:86:31:84:CD:AE:18:32:30:42:89:D7:6B:D1
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 019FA18445F573FDB6444B40ED0E214880D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number: 1963
Signing time: Mon 27 Jul 2026 03:00:28 +0000
Manifest this update: Mon 27 Jul 2026 03:00:28 +0000
Manifest next update: Tue 28 Jul 2026 03:00:28 +0000
Files and hashes: 1: A16F9NsEyUOAtSY1zXDtoFPyOvI.roa (hash: jjt60ulArhgQ6L6QMOP8j3tqRiV3ooxzVNi5fS2TRAM=)
2: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: Kmrq+5//fV0B5TZIUbPoqsDVH8z0G2k1RUw+3nJIt5I=)
3: NGm2691GZapBpm1gs6Z4jmfhBoM.roa (hash: QTDvgh3teR3/EHNz+lSlNu8bj0kDo1oZ37zpvYw3lqc=)
4: tYghUUQTWWijOlLVQiaZ-lUBiJg.roa (hash: yzQ7/oZUAo82y+3OUIGvO1eCeftZH4ELWkeUYAVvzb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:45:f5:73:fd:b6:44:4b:40:ed:0e:21:48:80:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Jul 27 03:00:28 2026 GMT
Not After : Jul 28 03:00:28 2026 GMT
Subject: CN=632d11b0d9eb0a863184cdae1832304289d76bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ca:34:f9:8e:26:39:e6:24:81:00:92:9e:ba:
b1:a9:ca:e3:d7:51:7f:f1:45:83:37:29:e9:38:f3:
f6:82:b2:db:d4:2f:5f:7b:60:d1:38:61:57:fa:50:
34:b4:5a:cc:fc:bf:a3:e4:22:27:05:4e:c1:51:63:
c2:bf:21:f7:d0:60:e1:b5:b6:af:62:c2:bb:ea:1e:
0a:cc:88:57:62:0a:a1:47:c9:e8:14:0d:38:57:1d:
57:ab:9d:3c:4a:9d:7d:a5:9d:30:d8:37:c9:f8:64:
b8:17:1a:cc:af:3f:e7:b5:ad:16:e4:43:61:8b:3a:
19:55:be:1f:04:96:6f:6a:b8:0d:41:1b:32:04:60:
db:f0:1d:8f:01:a1:10:5c:12:04:ce:69:54:22:f7:
64:c9:fc:97:31:05:29:cc:50:1a:3b:15:6c:f6:78:
fc:35:a3:ff:33:6f:13:c4:c2:1e:e4:27:50:7c:e7:
f7:99:17:c7:f3:a9:77:d7:66:44:93:3c:c7:83:f6:
09:9f:95:53:bd:b3:9e:f9:37:77:fd:89:76:3f:12:
d7:d3:ff:60:68:ac:c9:c6:9e:68:a4:40:09:c4:bb:
04:5a:e5:a3:f0:d8:9a:b5:6d:53:0a:a6:b1:82:c1:
d3:be:fc:09:fe:06:b9:d9:93:2c:f8:47:57:93:9d:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2D:11:B0:D9:EB:0A:86:31:84:CD:AE:18:32:30:42:89:D7:6B:D1
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:0a:4f:b9:ad:34:6f:99:e8:65:d7:3c:95:c0:41:e9:a8:c2:
d3:32:e4:9f:06:8f:e2:13:83:3c:56:88:a5:3f:8f:29:df:35:
0e:9d:bd:97:31:45:5d:4f:02:69:4f:e3:7f:d5:a8:1d:e1:56:
41:51:27:2e:04:94:38:5c:2c:4d:b9:6c:b6:b7:e7:d3:61:e3:
ee:f6:af:96:0b:f8:11:bc:78:3e:0b:90:af:14:7c:a8:5d:08:
2f:48:75:4b:30:25:a7:c5:f6:44:ce:12:64:f9:1e:5f:ed:7b:
1a:f8:4e:21:d1:b3:6a:32:98:21:de:1c:b1:61:41:a3:2e:da:
9b:63:9d:67:f3:46:cf:ac:40:ea:e1:76:c4:b1:c7:a7:d3:b1:
51:eb:2e:99:a5:5d:f3:d1:d0:06:46:d2:09:1e:14:ba:49:4e:
e4:cf:21:2b:a5:be:5f:58:5d:1f:79:70:0d:95:ea:cb:29:d1:
9e:0a:fa:79:13:14:c9:01:31:7e:e5:08:e6:07:4c:a4:20:f1:
b3:4a:01:a4:a6:20:b3:ae:0b:81:ca:a4:9b:39:55:2d:9f:bf:
87:ce:b5:23:d7:ae:40:ed:26:86:be:25:27:87:fc:29:f9:d7:
3a:c1:c8:da:d4:84:5d:c9:a8:a8:72:03:26:d9:1b:0b:e9:7d:
14:17:b7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:19:27 2026 by rpki-client