Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File: DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier: VKsrK599FkjHwV+NmJgw26ZPHr6+RwtDjyvVmBOEeH4=
Subject key identifier: CC:AB:3B:FA:E8:F8:C9:5B:FB:9E:2A:A4:AC:6C:85:1D:46:99:2B:40
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 019CE66D4F2C19552ACB15EAF7D599CDCB51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number: 17F9
Signing time: Fri 13 Mar 2026 09:00:49 +0000
Manifest this update: Fri 13 Mar 2026 09:00:49 +0000
Manifest next update: Sat 14 Mar 2026 09:00:49 +0000
Files and hashes: 1: A16F9NsEyUOAtSY1zXDtoFPyOvI.roa (hash: jjt60ulArhgQ6L6QMOP8j3tqRiV3ooxzVNi5fS2TRAM=)
2: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: P71FaAiMuD6jBBAcu3mKRNaBpRb5ELlKLfR5FQiXSHA=)
3: NGm2691GZapBpm1gs6Z4jmfhBoM.roa (hash: QTDvgh3teR3/EHNz+lSlNu8bj0kDo1oZ37zpvYw3lqc=)
4: tYghUUQTWWijOlLVQiaZ-lUBiJg.roa (hash: yzQ7/oZUAo82y+3OUIGvO1eCeftZH4ELWkeUYAVvzb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 00:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:6d:4f:2c:19:55:2a:cb:15:ea:f7:d5:99:cd:cb:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Mar 13 09:00:49 2026 GMT
Not After : Mar 14 09:00:49 2026 GMT
Subject: CN=ccab3bfae8f8c95bfb9e2aa4ac6c851d46992b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c9:c1:b9:fc:61:7d:16:42:22:d7:df:ca:25:
d8:b6:64:09:7d:d9:f1:f3:31:63:75:e3:12:df:db:
75:6e:66:4b:f2:e1:65:a2:21:2c:ab:05:9e:d7:e6:
ff:19:56:1e:01:12:15:87:d4:a3:45:35:52:5f:13:
d0:6c:43:ee:51:e4:15:f4:73:a0:87:4b:f4:ec:ea:
95:87:a6:b5:e8:9b:68:0f:4b:bb:5c:1c:83:d9:8d:
e4:8f:4f:f0:29:ea:7c:5f:b3:0f:6c:37:de:b0:44:
dd:f2:08:8a:eb:df:74:86:65:d5:a6:f5:e5:e5:9d:
03:c2:3e:5b:4b:d0:d9:8b:75:f1:22:e0:62:10:d0:
a2:ec:5e:53:25:e1:52:e1:ae:5c:96:70:98:f7:4e:
fb:44:ff:2e:f5:53:31:be:d6:44:cb:68:8e:db:9d:
20:65:58:2f:79:d7:36:58:34:ac:88:15:92:36:ad:
05:0f:7c:f7:67:e3:9c:64:c2:83:43:39:5c:c3:c6:
05:50:54:58:a8:82:22:b3:a6:89:df:72:32:fb:15:
97:c4:82:5a:4c:5f:07:0f:37:b7:6e:1f:25:58:01:
dd:90:a8:b5:d4:e5:72:2c:87:b9:21:e4:6f:7b:07:
92:96:8b:74:8c:6d:a3:72:c3:f3:c5:e6:0e:67:10:
ab:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:AB:3B:FA:E8:F8:C9:5B:FB:9E:2A:A4:AC:6C:85:1D:46:99:2B:40
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:d5:a3:b4:34:40:df:74:d0:0b:d4:79:4a:47:ad:61:0e:d3:
f0:73:8d:f8:9a:68:b6:1d:7c:49:b2:23:40:82:11:fd:97:74:
69:a4:22:66:d8:bb:62:19:23:c8:9e:f1:d9:26:7e:63:b6:42:
2c:6e:0f:6d:90:e2:cc:19:a6:80:91:2f:c7:0b:c8:73:48:d0:
8a:2d:62:2a:42:e5:c3:55:1d:55:13:ed:3d:ba:ce:f2:a6:16:
51:35:17:e0:8f:51:5b:1b:1a:a1:1d:cd:c3:2c:95:99:e7:6a:
cf:4e:33:c9:03:81:de:e2:9a:1f:c6:5c:93:b2:87:6a:98:51:
54:e5:9c:9c:36:a9:64:57:48:c6:e1:b4:52:d5:f7:a3:71:18:
04:dc:fe:06:d3:e9:88:71:d7:43:d6:26:10:5a:41:50:54:40:
73:37:a5:61:0c:77:6d:93:14:63:56:34:21:88:55:9c:9a:0d:
97:7a:92:9a:87:94:86:46:8e:1e:7d:98:bc:6a:69:6d:c1:df:
d0:fd:73:fb:ac:51:62:02:38:a2:1a:f4:c8:a9:24:12:1c:02:
44:75:70:ac:36:79:c3:80:72:22:9e:a4:4c:91:19:b0:4b:28:
aa:fd:f0:fd:97:25:7e:83:a1:75:d5:13:be:9e:1d:6e:6c:27:
8d:cd:52:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 11:20:36 2026 by rpki-client