Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier: 3Pf8uStp71tjGgKX+dx/EVdPTnBtKSJNIGl+yDZPRQs=
Subject key identifier: 43:96:BD:E7:7A:31:E9:DE:85:69:C2:60:AE:FB:6C:C0:A5:8A:4B:56
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 019F186819788B4322DE07CCD910B6E4D3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number: 1989
Signing time: Tue 30 Jun 2026 12:01:43 +0000
Manifest this update: Tue 30 Jun 2026 12:01:43 +0000
Manifest next update: Wed 01 Jul 2026 12:01:43 +0000
Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: f+pG4PhbPidpQVyw/JiQlse+PzzJN3iY0TLoe6W7+10=)
2: uTNM_Qx3Kksos1PgtvUNZevyWHs.roa (hash: 5x2Iwvw5H8NZducy/95N1nopK5CCb4aO6OaFpQG4yP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 12:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:68:19:78:8b:43:22:de:07:cc:d9:10:b6:e4:d3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: Jun 30 12:01:43 2026 GMT
Not After : Jul 1 12:01:43 2026 GMT
Subject: CN=4396bde77a31e9de8569c260aefb6cc0a58a4b56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:5b:e2:f7:85:07:70:70:0b:5a:c2:d0:e4:80:
fb:f4:6a:a5:fd:29:c5:d6:35:12:8c:6a:9e:2b:d2:
90:e4:7d:48:15:63:d6:e8:dd:f1:fe:45:5d:bf:a8:
23:fb:f8:ab:76:f7:14:ea:66:8f:ba:5b:2b:93:3f:
d4:df:0b:37:07:ff:2f:9f:f7:b5:58:a6:0e:75:7e:
99:f7:de:da:be:00:5b:4f:f3:ec:7e:38:6f:c7:4d:
f3:82:ca:36:43:32:35:6b:b2:c8:b8:78:24:7d:95:
c8:9b:b2:d5:a0:1f:8e:f6:21:28:57:bc:ed:1f:7c:
84:d9:b5:fa:ee:e7:a6:e4:d6:08:a3:23:92:5f:b9:
62:cb:d2:ea:60:59:ba:f4:93:ac:2b:8d:bc:69:9e:
db:32:9a:0a:25:0c:95:69:10:d8:14:90:85:74:b0:
3f:fc:81:44:e7:9e:28:a9:18:5a:56:60:c8:5a:62:
e0:13:50:ba:f7:09:57:97:5f:8f:0e:2e:d8:59:ab:
b5:a9:7a:20:6e:9a:23:ca:af:3e:c8:5c:72:97:43:
37:4b:36:87:54:8d:87:da:1b:56:30:b9:1b:ff:62:
99:5e:d3:03:1e:28:4c:64:78:bb:e1:76:0d:be:cd:
32:de:08:bd:75:6a:ad:99:50:3a:b0:21:91:a0:26:
14:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:96:BD:E7:7A:31:E9:DE:85:69:C2:60:AE:FB:6C:C0:A5:8A:4B:56
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:4a:70:55:17:5a:e3:c7:32:a4:4d:7d:4c:f4:e9:2b:e6:22:
27:11:53:94:6b:16:2e:6c:66:45:05:9f:bf:a8:5c:99:57:76:
0a:89:2f:12:bb:e7:4d:0b:53:98:9e:e6:7e:ef:2c:d1:0c:a7:
80:4a:cb:13:13:60:df:79:63:85:10:7c:fd:ab:96:17:7b:3c:
53:e7:ed:db:97:8f:a6:3a:6e:c9:98:2d:ce:48:2d:d4:27:9c:
80:6c:df:bf:c3:25:bc:94:87:d9:a0:0f:8f:ce:3c:29:4c:27:
62:8b:64:ff:4b:7d:96:d5:06:77:a5:f7:65:4a:c9:9b:1e:95:
c2:30:e9:e9:aa:83:e3:2d:c2:62:93:93:f5:0e:21:8f:21:25:
77:4b:25:e3:57:15:33:18:7f:5a:1b:5d:f0:93:51:56:93:08:
ac:7c:d6:88:02:76:aa:8e:b5:3a:79:17:57:21:91:8b:28:a1:
ea:48:fd:3f:fc:51:56:07:47:35:cc:7c:16:a2:b7:bf:d1:ea:
77:19:04:33:07:1f:70:7f:aa:94:ab:c1:94:55:c1:c7:54:39:
e0:5b:00:d0:3e:ca:c5:8f:33:72:78:b3:9e:70:3f:f5:cb:e7:
0b:85:c8:de:e3:72:a2:4e:ca:22:8c:59:8d:a2:49:13:e3:f8:
fb:f3:be:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:19:17 2026 by rpki-client