Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: j5oqzCpQZa4v9QWWA5nl1uIURIqyODFzD7hqGsshdZ4=
Subject key identifier: FA:C2:F1:58:79:DB:6A:F5:74:02:50:89:53:1E:A9:89:16:CC:7A:35
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 019D2771FA71E55761A756B52D50BBD8B481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 1534
Signing time: Thu 26 Mar 2026 00:01:14 +0000
Manifest this update: Thu 26 Mar 2026 00:01:14 +0000
Manifest next update: Fri 27 Mar 2026 00:01:14 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: LhNmibx9p4AxPuwp+ohODpEEeR51LRmD9d7AjtbFzuU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:fa:71:e5:57:61:a7:56:b5:2d:50:bb:d8:b4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Mar 26 00:01:14 2026 GMT
Not After : Mar 27 00:01:14 2026 GMT
Subject: CN=fac2f15879db6af574025089531ea98916cc7a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c6:5b:07:5c:f5:67:ef:98:46:8e:ec:e7:cc:
ab:f1:09:e5:64:0c:74:3c:62:c4:ca:df:55:e8:61:
9d:ca:e4:a0:0c:cb:8b:d1:e9:11:7f:e4:b8:8c:42:
64:62:d8:a9:ea:b0:a4:81:1b:ad:5e:08:52:b3:66:
e4:42:37:1f:d2:0d:9e:83:2a:bb:81:51:7b:14:65:
9f:16:2e:da:ce:94:27:7b:14:f2:58:c6:a7:63:17:
ec:6d:46:07:be:a6:7e:e6:4b:01:d1:85:83:c9:76:
1f:90:07:87:c4:19:54:ee:55:b9:68:db:00:b1:46:
29:f8:29:5f:d7:e4:17:cd:39:6d:dd:49:9d:7a:d6:
98:ee:f6:95:34:c1:68:61:a1:e1:22:c8:34:fb:8e:
a7:0c:a2:6b:51:78:7e:30:d7:94:32:50:2b:2e:19:
a3:d1:24:23:8a:ae:0c:8e:d8:f9:e5:34:68:72:ae:
e4:bb:bc:b1:cf:fa:26:a3:30:36:c5:44:ef:b0:53:
a3:20:5c:50:d2:77:d6:b5:a3:8a:36:d0:69:b4:10:
b8:ff:e9:fd:55:00:58:01:f2:a4:c9:be:7a:ec:e2:
c2:c2:0d:da:d2:a7:1f:b4:d7:bf:80:fd:84:d1:ae:
4c:28:c6:24:a3:c2:dd:c7:47:1d:97:d7:eb:b1:ac:
69:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C2:F1:58:79:DB:6A:F5:74:02:50:89:53:1E:A9:89:16:CC:7A:35
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:85:1e:d3:13:e4:fa:3d:69:63:d3:da:67:62:e5:4c:93:12:
e1:7d:de:fc:15:da:83:a5:8c:a2:b4:f6:d7:b6:16:5f:be:6b:
bc:9a:10:1d:23:ce:f9:b1:eb:31:40:68:06:78:11:6f:32:a4:
2b:39:14:ba:71:dc:cb:61:1f:e6:21:40:5b:4f:d3:dc:29:8f:
e4:e1:3d:a0:8b:df:d6:7f:f9:24:ff:72:da:fa:91:4a:3e:5e:
cf:2b:98:82:b8:1f:70:34:6c:8e:ef:9c:5a:1d:97:6d:2c:2d:
b6:e4:0c:5c:d3:75:ff:ab:35:47:74:99:21:0b:2b:7d:42:3b:
4a:a0:c1:86:52:3d:ac:50:37:f7:d1:c8:3b:80:85:fb:cc:9a:
ea:59:63:97:d9:e7:97:55:25:4b:9f:f6:85:ce:0a:08:f9:27:
eb:34:e2:42:36:2d:1d:06:c1:7b:2f:04:c6:9c:43:6c:8e:2c:
d7:e1:be:95:2e:62:30:21:a7:81:35:e2:27:f1:fc:06:d9:cd:
50:76:0f:86:b2:11:83:94:b9:c5:2b:d7:31:44:bc:cb:1b:7b:
33:a3:07:88:ee:d3:1f:94:ee:fc:83:a4:83:6a:44:fa:d7:c0:
b2:6a:25:43:99:b3:e7:57:56:ae:cd:d7:2e:42:76:88:2c:f9:
fc:79:22:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:40:07 2026 by rpki-client