Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier: F3Eu66crPtIivNrBgqfsahN0FZWNoGnYfzf5NQLxIqQ=
Subject key identifier: 87:CA:06:FD:C0:9D:54:B2:2D:68:6B:7C:75:A4:CD:B5:7B:7C:0D:83
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 01A000255F02FB10197CFE6F67849E8F06C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 12:00:44 +0000
Manifest this update: Fri 14 Aug 2026 12:00:44 +0000
Manifest next update: Sat 15 Aug 2026 12:00:44 +0000
Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: ht2DC4g6Zm6NjDmvMqGgW3mGo/83goc+EbysQ3NZU70=)
2: uTNM_Qx3Kksos1PgtvUNZevyWHs.roa (hash: 5x2Iwvw5H8NZducy/95N1nopK5CCb4aO6OaFpQG4yP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 12:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:25:5f:02:fb:10:19:7c:fe:6f:67:84:9e:8f:06:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: Aug 14 12:00:44 2026 GMT
Not After : Aug 15 12:00:44 2026 GMT
Subject: CN=87ca06fdc09d54b22d686b7c75a4cdb57b7c0d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c8:d5:74:fc:c1:d0:c4:c9:94:fb:ae:b1:fc:
7e:0d:e4:99:1f:91:c4:d9:69:8c:77:90:c7:0c:3c:
3f:be:0c:b9:eb:e8:a7:90:ea:8d:05:ad:ba:20:ff:
e8:19:18:b1:97:c9:45:a5:c8:7b:df:f9:f6:a5:bf:
16:ee:1c:18:97:64:39:de:58:fd:be:9a:7e:31:49:
5a:ca:64:a5:7f:ee:35:22:02:a5:00:b3:f0:df:2c:
8c:e6:94:d7:f8:88:72:64:8c:d4:6b:3e:d3:86:d4:
a7:39:0b:fd:94:d4:bf:7d:f5:7a:39:ee:d3:05:49:
83:11:56:37:68:1e:b7:62:5c:17:65:b3:99:12:b0:
66:7d:bc:06:1a:bd:41:88:7f:e3:dd:9b:2d:df:d6:
0b:df:1c:dd:a8:27:3d:93:40:60:fc:22:d6:ea:f6:
3b:a4:36:02:3e:4e:71:37:3c:56:51:b9:9f:a1:72:
98:57:51:b5:7d:8b:64:56:1c:6b:80:04:2a:31:eb:
71:03:4a:49:be:2e:ec:5e:2b:d3:1c:e3:ea:25:e5:
38:6d:6b:ca:47:9c:0d:7b:0b:78:34:18:bb:23:bc:
e7:9c:f7:1c:5d:5d:88:6f:f1:6a:66:73:44:d3:5f:
ab:e0:23:b7:ba:d3:49:3d:08:c3:2d:28:48:ed:15:
fd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:CA:06:FD:C0:9D:54:B2:2D:68:6B:7C:75:A4:CD:B5:7B:7C:0D:83
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f2:47:00:63:ca:85:24:2a:d7:4d:42:5f:72:c4:bb:e0:d5:
d5:f9:1f:7a:a1:55:71:a0:4f:98:61:a1:6d:f6:ba:4d:1a:45:
bf:f3:99:d0:4e:26:de:01:ac:c3:8d:b6:14:71:a4:dd:26:1d:
24:48:ab:23:87:fd:4a:9d:2f:6f:e9:ea:9d:9c:2e:1a:2c:a0:
18:27:fa:2a:a7:a4:6a:86:00:a8:82:49:15:9e:60:25:80:f4:
d3:ca:ba:bc:9a:ee:6e:67:d7:18:f9:5b:25:50:67:f1:80:07:
c1:01:7a:03:8b:b5:4c:39:36:b2:45:83:49:4d:45:17:33:56:
28:32:06:78:f7:b3:fd:27:2f:c4:7e:fc:50:d0:47:6e:4e:a8:
d1:7e:a8:6a:47:8b:1a:21:71:c2:b5:90:9f:6e:23:ff:f6:c1:
3b:01:11:a6:69:94:a4:6f:e7:d3:e3:b8:93:d6:c4:10:53:0d:
e5:9a:d3:3d:7e:ed:4d:7e:80:6c:19:62:79:28:5f:56:9c:15:
7e:33:6b:bc:79:85:e1:b1:e6:26:be:09:fc:5f:b3:4e:ea:d3:
85:f8:b7:aa:76:b1:79:7c:d1:0a:82:22:c5:86:69:25:70:53:
1e:c2:a7:de:9e:59:0e:9b:07:fb:d1:a9:e1:6f:ec:91:e8:29:
66:c7:15:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:07 2026 by rpki-client