Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File: DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier: JVXya45Y/No73hliGhh6tNpS4WRM0nSPaJedOaBvhJQ=
Subject key identifier: 71:A4:BB:56:FF:D3:60:D1:09:BC:20:E7:21:E6:FC:48:51:4C:B0:50
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 01A17C978698C85AAF1304D94BCA6A1ECB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number: 1A59
Signing time: Tue 27 Oct 2026 09:01:07 +0000
Manifest this update: Tue 27 Oct 2026 09:01:07 +0000
Manifest next update: Wed 28 Oct 2026 09:01:07 +0000
Files and hashes: 1: A16F9NsEyUOAtSY1zXDtoFPyOvI.roa (hash: jjt60ulArhgQ6L6QMOP8j3tqRiV3ooxzVNi5fS2TRAM=)
2: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: jrU4HhSmtapEg8SEvsNdwMtnS8/f2LOrFUIbKhekE4w=)
3: NGm2691GZapBpm1gs6Z4jmfhBoM.roa (hash: QTDvgh3teR3/EHNz+lSlNu8bj0kDo1oZ37zpvYw3lqc=)
4: tYghUUQTWWijOlLVQiaZ-lUBiJg.roa (hash: yzQ7/oZUAo82y+3OUIGvO1eCeftZH4ELWkeUYAVvzb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:86:98:c8:5a:af:13:04:d9:4b:ca:6a:1e:cb:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Oct 27 09:01:07 2026 GMT
Not After : Oct 28 09:01:07 2026 GMT
Subject: CN=71a4bb56ffd360d109bc20e721e6fc48514cb050
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:79:9e:32:9f:86:0b:84:b0:d0:ea:d3:6e:
75:a2:f0:dd:a2:1b:4a:85:c2:19:16:bb:a4:42:59:
d7:12:12:7a:9e:ab:08:e0:bb:14:cb:b7:b0:18:43:
06:50:08:77:3e:d1:6f:54:04:6c:d4:51:96:2d:dd:
2b:c6:69:4b:88:14:d8:96:81:4b:ac:90:1b:a4:fc:
9b:49:0f:96:f3:f7:ae:6a:5c:2c:63:af:1f:9d:68:
f3:c9:cc:1f:b0:d4:c1:ec:32:00:e0:8b:af:37:94:
35:ed:f5:c3:de:b6:40:37:e3:64:f4:ed:3d:85:67:
eb:10:6f:3e:53:27:5f:84:31:cb:1c:07:fa:a3:55:
3a:06:3e:3c:d7:26:41:d9:47:3c:0f:82:df:d8:58:
a4:ba:cd:ff:e8:62:a8:86:9e:f8:ea:99:6b:f0:a2:
4e:db:1b:41:b8:f5:4b:0f:34:2c:64:ec:ed:a7:e7:
6b:eb:ab:3a:49:62:b6:75:9a:b8:22:6d:4e:d5:cd:
71:89:57:80:1d:50:6f:03:d2:eb:dd:21:4b:94:c7:
65:d5:89:18:35:14:03:d7:f7:cc:4f:cd:db:74:64:
dd:43:16:7d:64:f2:a4:c1:8f:b3:b9:14:3d:c3:66:
2b:93:45:d2:a3:ff:98:b7:b8:c1:50:d0:41:75:01:
ff:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A4:BB:56:FF:D3:60:D1:09:BC:20:E7:21:E6:FC:48:51:4C:B0:50
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:46:a2:7d:53:0e:a4:b2:e6:2b:8a:31:9d:de:16:89:69:4b:
49:6d:81:38:6e:4e:ce:30:d5:2d:c2:5c:de:f6:c1:d0:af:f3:
c3:26:ef:66:10:a5:1d:af:9c:de:6e:9e:f2:4c:49:f6:f8:fc:
8a:c4:9f:07:57:f2:8e:82:7d:46:8b:5f:0c:ee:fa:89:d8:8e:
46:dc:9a:32:b0:91:e7:44:9f:ea:f4:a5:48:ca:82:36:92:e3:
00:66:36:11:74:bf:82:72:34:2a:33:9a:36:fe:ea:e6:1d:07:
58:67:4a:b4:d9:9a:45:73:e7:8a:a8:4b:62:41:ad:da:e4:61:
06:c9:19:ba:c6:d3:48:f3:dc:5c:9a:7a:19:b8:73:89:bb:0f:
98:a7:24:78:0a:ba:a4:f5:9a:70:19:3f:57:0d:3f:78:00:f1:
62:d4:fb:a6:8c:f8:96:f7:57:29:77:c4:d3:0b:f5:79:64:bb:
8e:10:37:52:30:23:76:d5:9d:bf:6a:d0:c4:2e:57:c7:9b:bb:
c0:3f:41:01:13:39:5a:44:34:5c:98:4e:75:65:08:f1:85:91:
54:cb:f3:28:20:f9:2c:e7:46:5e:06:6d:2f:88:06:66:9c:3a:
fe:0c:49:46:1f:a7:1c:9b:d9:5e:23:48:e5:cc:4a:52:1c:da:
93:16:cc:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 12:44:17 2026 by rpki-client