Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
File: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft (raw, json)
Hash identifier: W4Zz5drSwiF5M2fQGxGmf+PGwQ/RlPeMG8ZYDnv+irg=
Subject key identifier: 03:1F:A8:6F:2B:A1:FA:02:76:6D:9D:6E:10:A2:15:16:E8:F3:43:EC
Authority key identifier: 74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
Certificate issuer: /CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Certificate serial: 019E1EA38261C018FE95A53C7D81687488BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
Manifest number: 1899
Signing time: Wed 13 May 2026 00:01:32 +0000
Manifest this update: Wed 13 May 2026 00:01:32 +0000
Manifest next update: Thu 14 May 2026 00:01:32 +0000
Files and hashes: 1: Fq9jYIALK48Q3aXTspZ-EOBUjAk.roa (hash: +W+cPf/LWfCqktynR8k96IJai5gjN2wCMM+/QBq3qWs=)
2: LfVminLL1XTSWFhWFnt35YabzGc.roa (hash: sYYNW+Zpe52/Yb5LHf4cYWyg31t2neiSAy7KvTU4FSg=)
3: dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl (hash: QfxGxRz665yVHL3FIZg/WNoVW1GeMjs2ybxaLSd9Y0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:82:61:c0:18:fe:95:a5:3c:7d:81:68:74:88:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7482b017717ca83a05e4cbc3f266f12a5359d5e5
Validity
Not Before: May 13 00:01:32 2026 GMT
Not After : May 14 00:01:32 2026 GMT
Subject: CN=031fa86f2ba1fa02766d9d6e10a21516e8f343ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b3:7d:49:86:67:bc:89:84:12:a6:37:eb:90:
60:8e:7f:47:2f:ec:28:52:2d:af:62:8d:76:83:d4:
2f:3c:38:14:7c:00:22:12:fd:52:21:75:09:57:c4:
14:88:38:95:e5:cf:65:6c:c5:60:b4:f8:82:83:4b:
80:2b:92:4a:0b:49:18:89:50:fa:bf:6f:a2:76:6a:
64:0c:08:df:b0:5f:b3:63:40:5c:71:0b:b7:8a:af:
41:9f:98:1e:b2:a6:79:f9:b3:24:00:66:ad:f2:5e:
43:72:b5:3c:0a:e1:11:0b:60:8c:10:b4:d6:18:14:
e8:ff:10:8c:7c:d1:85:a0:64:87:d7:c0:64:7d:f0:
34:75:6a:58:51:a2:2d:b3:44:72:82:62:3b:13:37:
36:9b:b1:03:ca:e2:f2:08:65:93:88:aa:86:1f:3d:
cc:02:b4:13:ac:07:53:69:9a:a0:ce:dc:a9:6e:de:
f0:4a:43:e7:27:cd:17:2c:c7:8c:9f:4a:48:1d:13:
93:f8:59:92:27:aa:61:53:b7:47:69:75:5e:97:54:
62:a0:cd:32:10:64:d4:96:7e:33:11:b6:be:ef:46:
80:57:e7:d0:1f:fb:71:ee:bf:ee:f8:65:e6:77:f3:
be:3d:c5:bf:7c:8a:da:99:a4:46:9f:3e:1b:29:d2:
9d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:1F:A8:6F:2B:A1:FA:02:76:6D:9D:6E:10:A2:15:16:E8:F3:43:EC
X509v3 Authority Key Identifier:
keyid:74:82:B0:17:71:7C:A8:3A:05:E4:CB:C3:F2:66:F1:2A:53:59:D5:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d4835b-7323-4671-ad59-7fb05920e228/1/dIKwF3F8qDoF5MvD8mbxKlNZ1eU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ef:66:0d:76:c5:c5:ac:3d:0b:58:b5:a1:6b:ee:fe:9e:d8:
4c:99:5e:6b:f1:2f:fa:4d:3a:18:38:dc:b1:49:86:af:e7:fc:
a5:69:fb:bd:3d:a4:29:fb:16:55:31:c3:89:39:b1:57:2c:8f:
42:c9:26:be:fd:cf:2a:f8:76:f2:c6:25:88:d3:e9:91:55:1e:
79:80:96:de:23:e0:ce:b8:1d:62:08:a1:3c:b5:d0:13:1b:f3:
1a:c4:01:ea:a2:85:4f:1a:2f:3e:96:58:d2:7d:5b:5d:76:9e:
52:46:e2:79:04:f3:08:05:60:0e:e4:77:23:e5:12:28:94:4f:
35:d2:5e:f1:51:f9:dc:9e:dd:95:04:a8:77:bf:39:28:80:d4:
54:f5:b3:13:21:d4:d5:de:a8:32:09:24:0a:b4:06:56:6c:49:
54:17:ba:af:3f:75:61:fe:ed:8b:0f:dc:06:f2:b7:a6:41:31:
90:f3:e8:cd:a9:92:7f:36:11:17:eb:41:db:36:10:97:fe:79:
7c:dd:14:31:21:bc:c9:c1:b1:62:3c:62:e0:db:09:b2:0a:ef:
aa:98:d7:3c:d4:66:1f:77:85:10:22:67:0e:8c:d1:df:88:f8:
ae:bb:7c:90:36:96:2f:77:59:0b:a5:b7:b8:ea:b0:d9:6d:aa:
5a:42:89:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:19:49 2026 by rpki-client