Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File: DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier: L3dHXeGOtmIIDpRiX3j/2foBo7D2G9cUHxEfGsIY3Mo=
Subject key identifier: 04:A8:20:3E:CD:73:38:DF:92:24:10:35:A9:D8:F9:3F:0E:DB:77:57
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 019F9022FF1CFB50B195B57928B473874BBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number: 195A
Signing time: Thu 23 Jul 2026 18:00:40 +0000
Manifest this update: Thu 23 Jul 2026 18:00:40 +0000
Manifest next update: Fri 24 Jul 2026 18:00:40 +0000
Files and hashes: 1: A16F9NsEyUOAtSY1zXDtoFPyOvI.roa (hash: jjt60ulArhgQ6L6QMOP8j3tqRiV3ooxzVNi5fS2TRAM=)
2: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: J4kfFLtxwnz+1T+9OSYQ5i2WfVeqol1mj1T/zRWMp2o=)
3: NGm2691GZapBpm1gs6Z4jmfhBoM.roa (hash: QTDvgh3teR3/EHNz+lSlNu8bj0kDo1oZ37zpvYw3lqc=)
4: tYghUUQTWWijOlLVQiaZ-lUBiJg.roa (hash: yzQ7/oZUAo82y+3OUIGvO1eCeftZH4ELWkeUYAVvzb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:ff:1c:fb:50:b1:95:b5:79:28:b4:73:87:4b:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Jul 23 18:00:40 2026 GMT
Not After : Jul 24 18:00:40 2026 GMT
Subject: CN=04a8203ecd7338df92241035a9d8f93f0edb7757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c9:fa:92:2d:8e:fc:be:8e:9c:ee:07:87:89:
1b:ab:19:cc:e3:46:fa:78:3a:b1:96:15:8a:4c:e0:
3d:3b:9b:ba:4a:4d:9a:37:2a:4a:d9:33:7b:4b:74:
fa:7e:2f:ba:a1:0e:d7:ca:41:d4:61:e0:e9:0f:d4:
a3:b7:4e:e1:b5:83:d6:bc:db:6a:88:40:f9:36:f2:
15:c4:f0:48:e3:a2:b4:78:8e:4d:30:af:95:06:bb:
2c:0b:67:54:32:26:46:31:72:15:e7:21:dc:b0:47:
2d:7e:e0:d4:c2:d5:ba:0c:49:8f:d2:b4:fb:8b:be:
c0:82:82:fd:a6:fb:a4:f8:da:cb:35:25:ec:9c:68:
3e:f7:85:05:e0:b1:a3:90:2a:e6:72:65:8f:fb:1b:
a2:00:71:f6:ac:51:13:94:09:56:b2:fe:65:fb:c0:
73:6a:45:f7:0a:ff:3e:30:cb:20:c4:37:74:80:d4:
4c:03:82:0e:c6:e3:6c:74:70:4a:a1:7d:00:36:64:
2e:76:71:75:77:43:0f:35:a4:e1:1e:bf:47:2d:17:
ca:9c:98:b6:a0:2a:7c:3d:62:d1:8f:5f:56:4c:39:
90:36:c9:d6:ca:1f:5a:95:ee:09:d7:13:8e:fe:a4:
94:b1:ad:0e:1f:bd:a0:d3:1e:b0:70:b4:51:80:29:
93:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A8:20:3E:CD:73:38:DF:92:24:10:35:A9:D8:F9:3F:0E:DB:77:57
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:23:10:17:8d:f1:78:b7:e6:e4:f0:e7:1c:e8:0c:4a:51:41:
c8:ea:c0:14:96:2b:82:c1:f5:34:99:e4:0f:37:a0:58:aa:b7:
f3:cf:4c:e1:bf:d3:2e:39:af:a7:c1:83:25:f9:a4:69:32:0c:
74:20:2e:95:d7:dd:a1:0b:dc:0a:52:8c:c2:99:09:82:e9:40:
6a:f0:76:ed:2a:58:78:86:af:c8:6f:4c:29:3b:ad:e3:5c:3d:
a9:8f:ad:2b:ca:07:13:6a:17:6f:80:30:4f:a1:20:c2:64:de:
a4:a6:34:07:cf:5a:00:83:e0:61:d1:47:6d:46:01:04:44:a6:
9b:7d:bf:14:87:0a:7e:c4:09:3c:d5:af:9c:35:f7:c9:65:07:
80:2d:5a:3e:f3:85:6c:c3:70:9b:30:82:f0:a0:76:4e:f6:c5:
27:73:f0:9a:10:1f:24:0d:35:1c:c2:cd:44:4b:2c:5b:5a:11:
3d:5f:0a:0d:65:1d:8e:1b:10:61:a2:aa:23:f7:91:cf:22:4d:
ea:f2:5a:54:25:52:31:3f:1e:55:bb:37:ea:89:54:b1:b8:3a:
a1:52:17:32:11:a2:7f:21:e4:21:fa:6d:45:0c:12:83:e4:51:
37:64:79:57:69:00:61:88:67:d9:a7:14:36:ee:3d:1b:2e:21:
f8:ce:5d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:41:19 2026 by rpki-client