Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier: 47Wyo3wowq1ztQe7Zgk/r3Ukunlv0ecvUe8xvzFH/V8=
Subject key identifier: 65:39:11:B6:36:B1:B3:31:09:9F:5C:A7:BA:69:5B:FD:1C:53:F3:36
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 019D39782F0B262853BF6A1E1E7A46B1CD49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number: 1891
Signing time: Sun 29 Mar 2026 12:01:10 +0000
Manifest this update: Sun 29 Mar 2026 12:01:10 +0000
Manifest next update: Mon 30 Mar 2026 12:01:10 +0000
Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: ukxf9eNm6aQa5P8OUDKusGHrzAtt13YfEUVr8NiBSuI=)
2: uTNM_Qx3Kksos1PgtvUNZevyWHs.roa (hash: 5x2Iwvw5H8NZducy/95N1nopK5CCb4aO6OaFpQG4yP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:78:2f:0b:26:28:53:bf:6a:1e:1e:7a:46:b1:cd:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: Mar 29 12:01:10 2026 GMT
Not After : Mar 30 12:01:10 2026 GMT
Subject: CN=653911b636b1b331099f5ca7ba695bfd1c53f336
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:72:3b:9c:4e:33:50:f6:a3:f7:02:4d:0e:4e:
a3:77:15:7e:97:23:9d:97:34:d2:8f:65:b9:20:4e:
6e:5a:76:a3:ed:0e:98:76:8a:1b:be:12:13:42:89:
31:42:75:81:69:ca:c0:f9:80:92:af:65:d7:84:ed:
12:bf:bd:1b:95:ca:4a:c8:e9:29:34:64:0f:d5:e7:
01:5f:bd:c2:c9:4a:a2:99:0c:73:ea:eb:2b:c2:87:
d9:1e:a3:3c:54:dc:34:8a:b3:d3:18:51:db:c5:51:
60:4a:12:ba:b4:f6:e4:fb:06:fc:27:38:f5:a5:55:
ba:c2:ef:90:8e:3a:ce:eb:d9:69:46:6b:7d:a6:95:
9b:b2:aa:97:6e:4c:83:13:1e:23:e9:eb:24:c4:0f:
5e:be:4d:52:54:78:5e:6d:ae:d7:10:c9:91:9c:51:
1a:bc:95:1f:ea:24:b2:70:e3:cb:b5:a9:35:20:c9:
98:ed:59:d6:76:5f:c9:59:61:4e:8c:15:04:e3:0e:
bf:38:4b:a7:51:f1:fd:52:14:4b:f8:ff:e8:62:75:
99:46:66:19:e5:72:18:90:cf:37:51:73:6b:52:44:
58:1c:4e:20:99:17:08:c9:89:50:6d:9c:81:6c:75:
df:45:45:3f:36:fd:37:fe:d2:2b:9a:2f:cb:e0:e7:
37:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:39:11:B6:36:B1:B3:31:09:9F:5C:A7:BA:69:5B:FD:1C:53:F3:36
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:a8:9d:2e:cc:81:96:11:66:da:b6:7d:81:4e:a4:d5:d2:b6:
d5:b5:2b:83:3a:39:0f:ad:13:30:a3:47:51:e7:ea:ff:45:ba:
5b:02:0d:9e:42:54:05:5c:c4:89:ac:42:e9:0a:80:c5:b0:1f:
4e:cb:c8:91:85:b2:59:a9:28:85:f8:c2:d6:27:c2:e4:21:24:
a8:e3:1e:6c:17:cf:12:31:c6:12:71:e0:6e:38:73:a9:a4:bd:
ca:0d:9a:5c:42:38:bd:ba:66:31:99:66:e8:6f:c7:97:2c:8c:
36:77:22:ed:99:bd:23:fb:36:bb:8d:a2:5e:c8:65:18:a7:90:
cb:40:83:fa:94:7f:09:e1:33:09:59:d4:94:d9:84:f8:42:ab:
3b:d0:cc:5a:52:e3:95:d7:b9:82:1c:a4:e0:64:a4:aa:83:90:
95:68:9f:e5:96:7a:0c:d0:5f:52:51:ef:7a:96:e3:a4:e5:73:
90:80:f0:3a:61:50:a7:15:69:6e:8c:1e:7b:96:b0:dc:01:4a:
82:a5:53:81:26:bd:8f:ce:e2:c4:33:bf:69:42:40:74:17:74:
72:fe:c2:ac:03:11:87:70:a0:23:ea:e9:f1:08:72:61:60:1c:
43:b6:8a:8c:b8:a8:d9:fe:7a:58:06:94:08:3c:8e:b1:ed:dc:
a9:27:ec:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:45 2026 by rpki-client