Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File: DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier: MkJYBsVOWsIlJ9AQ/1iIuTuuU41YWm18gHbJpdqzHBg=
Subject key identifier: F5:70:A3:C2:D6:D3:D3:26:0E:7F:9C:84:C2:F8:16:76:5A:55:FD:13
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 019D26282AA07F77A5A49E12E03121213C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number: 181A
Signing time: Wed 25 Mar 2026 18:00:59 +0000
Manifest this update: Wed 25 Mar 2026 18:00:59 +0000
Manifest next update: Thu 26 Mar 2026 18:00:59 +0000
Files and hashes: 1: A16F9NsEyUOAtSY1zXDtoFPyOvI.roa (hash: jjt60ulArhgQ6L6QMOP8j3tqRiV3ooxzVNi5fS2TRAM=)
2: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: kL2X4+Sy/h+9aYOovhDQhLKunsKWldTUbe80A9yM2rs=)
3: NGm2691GZapBpm1gs6Z4jmfhBoM.roa (hash: QTDvgh3teR3/EHNz+lSlNu8bj0kDo1oZ37zpvYw3lqc=)
4: tYghUUQTWWijOlLVQiaZ-lUBiJg.roa (hash: yzQ7/oZUAo82y+3OUIGvO1eCeftZH4ELWkeUYAVvzb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:2a:a0:7f:77:a5:a4:9e:12:e0:31:21:21:3c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Mar 25 18:00:59 2026 GMT
Not After : Mar 26 18:00:59 2026 GMT
Subject: CN=f570a3c2d6d3d3260e7f9c84c2f816765a55fd13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f5:b2:16:d3:79:d2:37:64:af:2c:9a:e3:1b:
75:ad:7b:8a:5b:8e:04:02:34:91:f9:a6:13:e1:82:
cc:66:6a:c2:e5:71:55:88:35:63:32:e3:79:ce:ad:
8d:c4:ae:7b:80:34:4b:bf:09:99:41:bf:83:c2:48:
ef:af:23:39:5a:63:f2:d5:52:75:a5:b0:d3:f2:5f:
a4:57:80:3b:58:9f:ea:8e:12:74:af:f2:f9:ea:f9:
99:39:1f:8a:3a:37:2c:01:0a:93:ca:f1:fa:03:9b:
66:cf:c2:7d:5b:a2:f4:92:d7:3b:f0:1e:fa:38:b3:
39:a4:00:4f:1d:b1:d1:b0:bb:9d:86:78:f4:c9:9a:
32:fb:cf:43:c1:65:59:16:24:62:17:6c:af:45:0a:
b4:d7:66:9d:03:fe:29:20:81:e2:4f:15:29:f1:f1:
93:ed:94:98:e4:94:72:d4:60:fa:e2:bc:73:b1:4a:
8f:e1:41:f0:f2:f7:97:90:0b:28:c2:9e:53:db:15:
b4:81:f8:ed:55:39:c7:a8:0f:6d:e2:15:a7:9e:a1:
64:6f:cf:02:ae:54:05:39:c6:fa:5d:31:ec:11:9a:
37:4c:77:df:c0:1e:00:76:c5:44:ae:49:dc:d3:95:
be:71:86:72:ca:39:32:8c:f4:87:12:bb:93:1d:79:
b1:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:70:A3:C2:D6:D3:D3:26:0E:7F:9C:84:C2:F8:16:76:5A:55:FD:13
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:43:41:91:3f:51:5b:f3:ed:07:a2:bb:e4:c4:fe:fe:33:50:
3b:4e:8e:c3:0a:1e:3c:de:bd:e9:47:d0:b8:8c:dc:aa:a9:05:
de:05:7d:9b:cc:74:74:d4:49:6e:71:f7:aa:56:d9:fc:aa:16:
d1:d1:d5:43:c2:ae:ec:e8:2f:5a:5e:31:aa:16:5f:a7:96:28:
a1:5a:3d:68:de:cd:1f:59:4d:23:6f:6a:31:04:88:7e:b8:87:
10:c5:1c:d3:80:65:c5:4c:3b:5a:a1:f0:aa:cb:aa:f5:aa:bc:
e6:df:81:7b:ea:2a:17:1f:5c:2b:a3:82:10:55:55:0d:5f:13:
66:a9:cf:0f:be:3b:e4:92:3f:66:5b:d1:5d:52:42:26:2b:c2:
2a:62:7c:7d:34:54:27:d7:d7:ef:93:c3:b6:e5:79:62:df:b1:
1c:b8:9b:9f:95:f7:d7:0d:0b:de:fe:83:9f:b4:42:75:82:32:
d7:58:43:5f:c1:10:dc:bb:fd:c8:cc:93:bc:3d:07:59:24:8f:
d9:aa:47:29:77:99:2e:31:9e:9b:95:2d:e1:81:d4:f7:9d:93:
47:7d:ab:11:50:a7:6a:75:dc:ac:b3:e6:58:d9:06:f2:df:d8:
96:5f:2c:c8:05:3a:e1:13:42:7b:a8:9e:89:6b:89:6e:3e:fe:
2c:b8:1f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:59 2026 by rpki-client