Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier: YEhejv/hdnRb8F/ELJthhoaz0L9HT2uFD4IQLAkdewU=
Subject key identifier: 72:38:2B:AA:D9:E7:13:3B:09:E8:17:1E:44:39:3A:BB:3B:2B:E5:20
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 01A10AA70D7168DCB03E5A4A7D120EEBFF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number: 1A8B
Signing time: Mon 05 Oct 2026 06:01:22 +0000
Manifest this update: Mon 05 Oct 2026 06:01:22 +0000
Manifest next update: Tue 06 Oct 2026 06:01:22 +0000
Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: i/PGk2vtU8xa/E1xAQygDqiwKy0cmGe6s36r23PmOAs=)
2: uTNM_Qx3Kksos1PgtvUNZevyWHs.roa (hash: 5x2Iwvw5H8NZducy/95N1nopK5CCb4aO6OaFpQG4yP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 06 Oct 2026 06:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0a:a7:0d:71:68:dc:b0:3e:5a:4a:7d:12:0e:eb:ff:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: Oct 5 06:01:22 2026 GMT
Not After : Oct 6 06:01:22 2026 GMT
Subject: CN=72382baad9e7133b09e8171e44393abb3b2be520
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:bd:f7:86:5d:fd:13:99:a0:22:ac:52:47:
cc:d9:fc:50:5b:30:30:6c:38:20:70:b3:f9:4e:d3:
15:18:9b:d5:e3:12:ac:38:7b:c2:3f:ef:bc:43:cb:
42:71:33:b1:b6:2a:f5:4e:72:57:ec:87:f9:50:92:
34:a7:f4:08:38:9d:93:f0:94:41:4c:3d:39:a2:4a:
6e:ec:9e:ec:38:af:85:95:db:fa:c4:12:bf:02:38:
42:a7:9f:b8:4e:28:69:fe:ca:19:76:2d:4e:3d:dc:
48:87:2a:eb:fc:f1:80:d3:07:bc:74:83:47:ac:00:
c0:6d:b3:66:e3:a4:71:05:77:e8:6f:42:62:f6:6f:
92:e6:ed:4b:16:53:d3:dc:5f:08:60:5c:35:aa:ff:
ed:e8:de:01:1a:b3:97:9e:76:1e:20:d9:7e:18:40:
13:e8:f3:ee:3a:e1:40:62:25:cd:9b:13:a6:23:22:
ad:93:e5:b4:c9:a0:0a:08:82:39:56:b7:88:cb:e7:
83:ed:51:7f:45:38:a4:e9:14:17:c1:f9:de:d2:0f:
36:49:a7:27:aa:c7:35:34:ef:a5:e1:d0:a8:87:6e:
ef:40:3f:6d:64:5e:05:b2:c4:ca:13:0f:17:8a:ae:
26:df:a1:99:d3:33:95:67:8f:80:65:15:5f:64:a1:
fa:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:38:2B:AA:D9:E7:13:3B:09:E8:17:1E:44:39:3A:BB:3B:2B:E5:20
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:fa:72:59:42:67:a2:e6:a7:40:b7:15:b2:0d:b7:56:0b:2f:
9d:8c:20:50:69:cf:e7:f8:49:5e:17:50:95:f4:c8:a8:3f:00:
0d:7d:d5:78:57:f5:6a:dd:b2:34:2b:5d:5d:1a:ff:26:8d:8e:
3e:72:bc:38:83:77:b9:0f:af:1f:2d:86:93:68:41:71:8f:14:
21:85:8c:bd:0e:c9:7f:6a:82:67:f0:cc:b4:48:57:8e:78:70:
9e:05:03:5f:b8:dd:21:7d:e8:61:c5:a4:64:9c:98:44:26:28:
e6:cb:23:a4:d6:67:9a:8c:32:e9:16:d1:ee:8e:7a:1c:d0:02:
cc:69:ef:4f:f5:01:25:9c:08:99:01:cb:6e:c2:39:56:3f:46:
22:09:62:eb:5d:67:93:f3:95:29:9c:23:20:c2:57:05:bf:24:
b9:1f:b4:18:de:47:d7:53:9d:38:23:88:68:c9:59:4c:a5:23:
4d:7f:e5:11:e3:5b:f9:28:f5:98:08:bb:12:d6:32:56:74:e5:
ba:23:73:d4:2d:b8:14:1f:41:7d:73:3d:90:27:27:38:bf:27:
10:d5:d1:9d:cc:b9:34:81:f0:88:84:cd:96:a1:49:67:c8:31:
7f:3f:5f:c3:fd:c6:79:91:4d:c5:2e:ee:08:83:94:7d:b7:77:
76:3b:11:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 5 13:07:33 2026 by rpki-client