Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File: DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier: HGIK0vXdMzd3nQC6eMwFadEboSfoRhIwygOjwmRKA5c=
Subject key identifier: C4:C2:95:83:5F:B7:38:FB:9B:07:2D:08:C0:DC:85:CA:C5:5C:80:5F
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 019DCE2BCE3205C7FD26B1D2BE5A4BB8DD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number: 1871
Signing time: Mon 27 Apr 2026 09:01:10 +0000
Manifest this update: Mon 27 Apr 2026 09:01:10 +0000
Manifest next update: Tue 28 Apr 2026 09:01:10 +0000
Files and hashes: 1: A16F9NsEyUOAtSY1zXDtoFPyOvI.roa (hash: jjt60ulArhgQ6L6QMOP8j3tqRiV3ooxzVNi5fS2TRAM=)
2: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: 8JPYW2rQKrzTmF1Zx3+WdKJv1SS8XBqSYaezVf7RvOs=)
3: NGm2691GZapBpm1gs6Z4jmfhBoM.roa (hash: QTDvgh3teR3/EHNz+lSlNu8bj0kDo1oZ37zpvYw3lqc=)
4: tYghUUQTWWijOlLVQiaZ-lUBiJg.roa (hash: yzQ7/oZUAo82y+3OUIGvO1eCeftZH4ELWkeUYAVvzb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:2b:ce:32:05:c7:fd:26:b1:d2:be:5a:4b:b8:dd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Apr 27 09:01:10 2026 GMT
Not After : Apr 28 09:01:10 2026 GMT
Subject: CN=c4c295835fb738fb9b072d08c0dc85cac55c805f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6e:68:d6:79:7a:1a:47:8e:e9:79:a3:0d:20:
e1:b8:a4:7b:5f:34:41:a8:45:95:ba:95:f2:40:43:
9a:2b:7e:20:7a:e6:69:27:3d:35:f8:87:e9:eb:d2:
45:50:a4:dd:f1:c6:40:c8:96:bc:3f:1d:6f:88:a1:
a6:5c:de:45:9c:57:e5:6d:45:21:fa:11:b4:6c:ce:
b5:bf:a3:46:1a:40:5d:91:b8:b3:e3:78:ae:af:cd:
58:17:3d:31:90:95:2c:b3:cf:8b:e6:32:2a:be:99:
2f:9d:9c:e5:06:ea:86:93:fb:18:47:70:40:87:96:
d2:23:b8:d3:c2:75:8e:09:b5:92:c5:fb:c4:20:d0:
9e:06:2f:2b:0b:62:06:71:91:0d:73:75:b5:62:5f:
51:2c:3b:09:5b:ed:d9:de:1b:50:c1:00:68:91:45:
13:7f:35:1b:7f:13:eb:cd:86:d6:84:44:14:63:e2:
9f:af:2e:ca:92:8e:e1:6f:d6:ca:89:8f:dc:1a:03:
c0:ae:f3:04:9a:dc:26:81:a0:a2:b5:82:35:0d:3e:
54:b5:96:31:7e:ee:a3:66:0f:01:1b:7f:4d:c8:de:
01:a3:3f:f4:0b:6b:e2:4c:03:ac:28:34:4c:5c:34:
7b:d8:a5:f7:cb:31:d2:df:d4:ed:b3:c3:0b:95:fa:
1b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:C2:95:83:5F:B7:38:FB:9B:07:2D:08:C0:DC:85:CA:C5:5C:80:5F
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:98:0e:38:bf:a6:2d:89:7d:cf:83:a8:64:86:29:95:d4:d3:
49:26:00:57:70:a6:38:0b:52:4c:0f:0d:fe:de:3b:92:aa:da:
8b:bc:8e:ad:9e:e2:b4:66:7e:2d:0f:4a:e6:3c:97:85:bc:6b:
d8:34:6f:66:df:d0:fb:e4:5f:94:f1:b8:d5:a8:e3:c3:df:e6:
35:eb:1b:10:42:40:0d:01:82:ff:5f:44:b2:95:a3:a1:11:70:
79:26:de:a4:58:35:be:c6:d4:90:b4:49:2e:e6:ec:b7:19:4d:
a2:68:1b:7d:af:bd:da:32:f6:5d:54:19:6a:eb:ab:7a:fd:8d:
d0:77:be:88:9c:fb:8b:2a:24:ef:ba:58:5a:a8:56:53:18:0f:
16:46:13:41:8d:d9:ae:43:a8:50:49:50:85:61:58:ec:9e:4a:
79:d0:2d:13:45:1b:b8:85:54:4f:0f:e9:44:e7:b7:6e:9a:89:
5b:83:ba:a9:ad:f0:90:28:62:4b:3a:86:d1:62:98:e1:44:10:
2b:b4:45:93:f1:b2:9d:3a:da:17:6d:04:f7:d5:0c:8c:8d:29:
74:43:9a:a5:38:e4:5b:1b:30:ab:37:af:80:20:08:98:02:28:
f0:57:1f:fd:f0:25:92:ac:50:74:cc:81:a5:eb:25:7c:49:70:
10:29:eb:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 17:20:28 2026 by rpki-client