Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: 8/p6PGlm3eJIu3GN3Q3Ze43gMdyEfePYM5A57pmHoJ4=
Subject key identifier: 01:2A:D9:73:74:F7:00:EF:4C:AE:A9:E4:10:0F:42:6E:55:8F:2E:C0
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 01A08A8D704D6E54DFE471ECE111531F1669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 19DA
Signing time: Thu 10 Sep 2026 09:02:00 +0000
Manifest this update: Thu 10 Sep 2026 09:02:00 +0000
Manifest next update: Fri 11 Sep 2026 09:02:00 +0000
Files and hashes: 1: Fq9jYIALK48Q3aXTspZ-EOBUjAk.roa (hash: +W+cPf/LWfCqktynR8k96IJai5gjN2wCMM+/QBq3qWs=)
2: LfVminLL1XTSWFhWFnt35YabzGc.roa (hash: sYYNW+Zpe52/Yb5LHf4cYWyg31t2neiSAy7KvTU4FSg=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: 2H5hPlziq9eVCc0kFOQ86R2Sctnp+o2cXWdTxYdSj4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:70:4d:6e:54:df:e4:71:ec:e1:11:53:1f:16:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: Sep 10 09:02:00 2026 GMT
Not After : Sep 11 09:02:00 2026 GMT
Subject: CN=012ad97374f700ef4caea9e4100f426e558f2ec0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:85:fa:34:3a:ec:ea:20:49:cd:87:00:36:f0:
df:62:37:6e:09:ef:ff:4b:4b:0b:00:b2:bf:fc:d3:
95:fe:6d:92:ed:fc:36:9c:ae:10:0e:6d:44:b0:a7:
14:c6:61:80:c8:d0:45:15:14:55:0e:3a:a4:a5:21:
2b:79:45:4c:3c:08:f4:52:77:f6:d7:88:34:88:cb:
02:fd:b4:5b:1a:95:41:39:84:64:c1:18:8c:da:c3:
2f:c0:89:b0:b4:7a:98:16:69:d5:37:e2:92:8a:b5:
6c:45:15:28:a7:aa:15:c3:51:03:e6:d8:a5:d1:ca:
88:2c:b3:c5:cb:48:b0:38:02:65:32:6a:34:08:ad:
1d:df:b6:90:75:e3:91:f9:1d:69:fe:8b:58:1c:ef:
e7:02:c5:7f:33:3e:f2:fe:dd:4a:f4:ee:80:46:46:
fa:2e:69:0c:18:52:9d:56:30:b1:82:91:39:72:8f:
cb:a5:2f:21:3e:dd:d2:3b:5f:4a:6a:3c:73:cc:37:
68:62:b6:d9:c5:a3:1d:6e:55:5c:b9:6b:bf:84:6e:
f6:60:a6:ac:7c:fe:51:e0:de:bc:82:ea:f2:c1:92:
ba:03:47:6c:88:18:67:1e:9b:9a:fc:5f:3e:3f:35:
d2:fa:8f:2b:66:e0:60:c8:3b:b9:10:52:32:b5:a7:
4f:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:2A:D9:73:74:F7:00:EF:4C:AE:A9:E4:10:0F:42:6E:55:8F:2E:C0
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:40:77:78:e2:69:f3:82:f5:20:2f:69:ba:88:a7:20:c7:fe:
25:d8:ad:53:67:eb:7d:db:b2:54:f0:0d:17:f3:4f:12:95:8c:
af:5b:5c:fd:1a:a9:aa:86:3c:8b:02:e8:3d:a1:96:d8:42:4d:
bd:db:65:b0:bf:5c:f2:da:b2:7c:5a:4e:86:4f:f8:0e:9a:8d:
13:e7:59:ce:42:d6:0e:c0:53:8d:80:b5:7a:f8:21:17:26:6c:
25:15:69:b7:a6:1c:78:13:8d:c1:02:31:91:fe:fc:4b:24:81:
84:bd:93:b7:d5:e7:a1:09:1f:fd:0e:b4:0e:3e:9b:06:73:30:
79:f4:05:b8:8d:bc:13:f6:4d:bc:d4:6c:4c:42:09:2c:04:d4:
cc:ee:d5:69:96:ab:7e:33:85:fc:24:a1:fa:5f:60:a9:bb:e1:
a7:35:c3:b0:48:44:28:16:34:f3:e0:1a:d2:aa:61:d1:9e:b6:
0d:8e:4d:67:84:2e:60:05:13:75:07:7b:36:4e:71:49:18:ba:
b6:ea:2c:15:a1:4a:6e:cb:46:ee:69:f0:63:40:31:63:82:96:
77:56:37:f8:2e:76:81:d3:9d:fa:6b:25:23:83:f8:b5:75:94:
04:bb:e5:d1:01:c1:68:5d:3c:e8:8e:44:7b:72:a7:6b:bd:b9:
fc:ad:8f:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjXBNblTf5HHs4RFTHxZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0ODJiMDE3NzE3Y2E4M2EwNWU0Y2JjM2YyNjZmMTJhNTM1
OWQ1ZTUwHhcNMjYwOTEwMDkwMjAwWhcNMjYwOTExMDkwMjAwWjAzMTEwLwYDVQQD
EygwMTJhZDk3Mzc0ZjcwMGVmNGNhZWE5ZTQxMDBmNDI2ZTU1OGYyZWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YX6NDrs6iBJzYcANvDfYjduCe//
S0sLALK//NOV/m2S7fw2nK4QDm1EsKcUxmGAyNBFFRRVDjqkpSEreUVMPAj0Unf2
14g0iMsC/bRbGpVBOYRkwRiM2sMvwImwtHqYFmnVN+KSirVsRRUop6oVw1ED5til
0cqILLPFy0iwOAJlMmo0CK0d37aQdeOR+R1p/otYHO/nAsV/Mz7y/t1K9O6ARkb6
LmkMGFKdVjCxgpE5co/LpS8hPt3SO19KajxzzDdoYrbZxaMdblVcuWu/hG72YKas
fP5R4N68gurywZK6A0dsiBhnHpua/F8+PzXS+o8rZuBgyDu5EFIytadPPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAEq2XN09wDvTK6p5BAPQm5Vjy7AMB8GA1UdIwQY
MBaAFHSCsBdxfKg6BeTLw/Jm8SpTWdXlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kNDgzNWItNzMyMy00NjcxLWFkNTkt
N2ZiMDU5MjBlMjI4LzEvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9kNDgzNWItNzMyMy00NjcxLWFkNTktN2ZiMDU5MjBlMjI4
LzEvZElLd0YzRjhxRG9GNU12RDhtYnhLbE5aMWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkB3eOJp
84L1IC9puoinIMf+JditU2frfduyVPANF/NPEpWMr1tc/RqpqoY8iwLoPaGW2EJN
vdtlsL9c8tqyfFpOhk/4DpqNE+dZzkLWDsBTjYC1evghFyZsJRVpt6YceBONwQIx
kf78SySBhL2Tt9XnoQkf/Q60Dj6bBnMwefQFuI28E/ZNvNRsTEIJLATUzO7VaZar
fjOF/CSh+l9gqbvhpzXDsEhEKBY08+Aa0qph0Z62DY5NZ4QuYAUTdQd7Nk5xSRi6
tuosFaFKbstG7mnwY0AxY4KWd1Y3+C52gdOd+mslI4P4tXWUBLvl0QHBaF086I5E
e3Kna725/K2PAA==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:15:37 2026 by rpki-client