Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File: DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier: 50Go1FQpq+Wuj2x68L/96UYwWuMvGS3rjnndN/IxxdM=
Subject key identifier: CF:55:93:F1:13:B9:05:22:75:5E:FE:1B:8F:69:2E:7E:3D:38:00:31
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 019E1D597387D5082080B1AE03F0C31F8115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number: 189A
Signing time: Tue 12 May 2026 18:01:01 +0000
Manifest this update: Tue 12 May 2026 18:01:01 +0000
Manifest next update: Wed 13 May 2026 18:01:01 +0000
Files and hashes: 1: A16F9NsEyUOAtSY1zXDtoFPyOvI.roa (hash: jjt60ulArhgQ6L6QMOP8j3tqRiV3ooxzVNi5fS2TRAM=)
2: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: /MpMMwcpGHfeSvJ2RaXDk4Zc2cEX0ep9I1NaiFqLJA4=)
3: NGm2691GZapBpm1gs6Z4jmfhBoM.roa (hash: QTDvgh3teR3/EHNz+lSlNu8bj0kDo1oZ37zpvYw3lqc=)
4: tYghUUQTWWijOlLVQiaZ-lUBiJg.roa (hash: yzQ7/oZUAo82y+3OUIGvO1eCeftZH4ELWkeUYAVvzb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:73:87:d5:08:20:80:b1:ae:03:f0:c3:1f:81:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: May 12 18:01:01 2026 GMT
Not After : May 13 18:01:01 2026 GMT
Subject: CN=cf5593f113b90522755efe1b8f692e7e3d380031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1d:a6:f3:7b:ad:24:f7:12:f2:0c:7e:3f:db:
11:8f:65:ba:07:5d:87:f1:05:6b:93:68:16:52:b6:
2a:37:eb:d9:d5:c4:c1:61:3c:c9:3f:13:d7:ef:36:
04:be:ed:18:8f:d9:e9:79:d9:a2:f3:1c:a3:0a:13:
74:22:7a:d3:eb:30:af:5f:1e:6f:7e:56:e8:ba:a0:
14:52:1b:5b:99:df:d0:91:ae:c5:12:65:39:2a:20:
1d:3b:a9:4b:dd:11:50:6a:55:4d:f2:19:4b:42:32:
b9:9e:bb:69:07:26:62:f8:d5:cb:5e:c1:2d:fe:8b:
1b:11:33:e4:78:56:7c:90:1e:69:15:23:64:02:4d:
4a:75:5e:90:10:fd:4a:34:2a:6b:a8:bd:95:62:e1:
50:de:82:a0:e5:5b:03:50:a2:ab:e2:26:1e:40:71:
a2:b1:8f:3d:e7:32:27:b8:fe:b6:9e:55:ec:2f:3c:
ec:28:bb:75:37:a6:b2:bf:15:31:ee:8a:bc:c9:d3:
8d:39:9f:b5:06:29:d4:35:f6:5d:90:bd:f4:c5:92:
a7:cc:88:73:2c:7d:e5:7d:c3:03:7d:54:d9:8d:a4:
e4:6f:be:bf:21:6f:79:67:af:9f:d0:e2:4d:d7:f5:
ef:03:6c:f1:bc:61:62:56:a8:41:28:cd:c2:fb:69:
44:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:55:93:F1:13:B9:05:22:75:5E:FE:1B:8F:69:2E:7E:3D:38:00:31
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:98:a9:59:2b:de:ca:28:f7:87:9d:a8:0c:d9:89:5b:2d:35:
94:96:66:02:94:2b:36:d6:01:c6:4a:99:46:ad:ed:7c:6b:64:
e0:16:42:f9:b1:91:4e:5e:1d:4f:a0:47:9b:b3:43:14:5a:ab:
2a:d1:5d:7d:f9:64:ad:6a:f5:7e:d6:c8:55:ec:81:2d:3f:a2:
8c:a9:3d:3f:0d:63:a6:63:8f:2b:8d:e5:35:f4:35:c5:19:6a:
f9:0c:7a:28:c1:cc:0a:2d:e2:67:3a:a8:7f:72:38:09:82:5a:
b8:4d:75:af:c6:36:17:79:58:97:30:7c:53:a6:23:a1:b7:07:
4c:1c:69:3f:4b:dc:36:c2:7d:ad:01:ed:23:da:e9:84:cd:06:
ae:d5:9b:4e:d0:81:67:38:a7:70:ab:05:7f:88:02:0d:c2:5d:
bc:f5:0c:43:ff:83:59:8a:90:39:d0:29:c9:ef:52:1e:b6:1c:
3e:36:fa:84:f7:3e:63:4a:d7:bb:27:ac:0d:3f:b0:28:cf:98:
10:00:6e:5f:bb:99:da:9f:2a:25:9a:d2:57:8d:40:2b:27:d2:
15:ee:d6:74:20:8f:6a:d8:df:bc:54:6d:85:f3:34:98:8c:a9:
82:7e:09:5d:e3:71:1e:42:fe:e1:a8:02:52:76:42:ea:54:f0:
b3:43:c7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:09:35 2026 by rpki-client