Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
File: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft (raw, json)
Hash identifier: Gu3XQJtbqsAYKfBYvdZtws68GJKZLzYr3d0eQqu9CDo=
Subject key identifier: E8:FE:69:63:10:6D:3B:38:14:5C:75:FA:A4:4E:97:C3:E5:26:57:EF
Authority key identifier: 0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
Certificate issuer: /CN=0e29a482de0d56746c3045269f99205204f95484
Certificate serial: 019D2703F38A2116AA77BA1B8EDC4C9334B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
Manifest number: 142C
Signing time: Wed 25 Mar 2026 22:01:03 +0000
Manifest this update: Wed 25 Mar 2026 22:01:03 +0000
Manifest next update: Thu 26 Mar 2026 22:01:03 +0000
Files and hashes: 1: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl (hash: DsTL+mLGJWlGESfiQzO3Jk8tY/Ie3eQjoveHcsS1l9w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:f3:8a:21:16:aa:77:ba:1b:8e:dc:4c:93:34:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e29a482de0d56746c3045269f99205204f95484
Validity
Not Before: Mar 25 22:01:03 2026 GMT
Not After : Mar 26 22:01:03 2026 GMT
Subject: CN=e8fe6963106d3b38145c75faa44e97c3e52657ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:20:27:46:49:92:9e:00:f8:24:39:86:88:
9b:46:82:c1:22:51:22:80:b9:39:f2:aa:c0:25:a5:
1d:ff:f5:b1:34:0f:99:93:bf:bb:68:05:6e:57:c9:
89:30:5d:57:b0:b5:34:aa:92:40:85:08:61:6f:a5:
7d:12:56:6f:e3:66:ae:20:7e:97:55:b7:af:20:4b:
bd:5c:3f:06:82:d6:39:bc:24:f5:9d:92:59:31:9e:
82:0d:4b:07:c2:5c:83:e3:f7:0e:9c:b5:f1:62:4b:
b0:b2:e5:f4:fb:c1:ba:66:ff:75:cb:4c:5e:72:2c:
ca:d9:18:6e:7f:89:3a:03:50:27:db:56:ab:15:16:
51:21:01:e9:88:1e:80:68:3d:2d:76:f1:3c:c4:13:
98:c4:9a:84:c0:27:72:7c:18:6e:42:b2:f6:7a:f7:
67:71:14:ea:81:14:7d:b5:1c:6c:f2:9d:84:cf:a9:
10:63:6f:32:92:01:b0:41:58:59:f4:9a:5b:ee:7f:
c3:6c:d8:f3:f7:a7:da:ea:24:f7:7a:e4:55:bc:00:
ae:6e:43:aa:77:89:e9:c0:cb:d7:03:c8:3b:dd:46:
33:63:06:61:4d:85:dc:64:54:fe:f9:a7:ec:e2:06:
b7:a2:dd:30:5e:6f:3e:09:4f:6a:1d:79:bc:aa:2c:
f8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FE:69:63:10:6D:3B:38:14:5C:75:FA:A4:4E:97:C3:E5:26:57:EF
X509v3 Authority Key Identifier:
keyid:0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d5:0a:65:42:df:d2:12:74:10:cb:15:d4:70:fb:51:4e:74:
34:81:31:cd:3e:4d:13:ca:75:13:21:f2:69:d1:ee:24:08:14:
82:2b:19:e4:27:b8:cb:7e:bd:e8:e8:be:a0:fb:74:fc:71:a1:
2d:6e:0c:e0:20:e2:16:29:d4:53:25:f8:09:ea:44:28:6b:55:
14:ba:ec:28:e4:16:b6:67:8f:dc:da:59:cf:09:b5:2a:d1:80:
c2:d4:11:b1:8b:0f:95:30:37:7c:32:8d:ae:d8:b9:b2:81:82:
2b:96:af:5b:99:b6:93:56:4d:d4:b6:93:dc:11:1e:21:50:79:
9d:cd:99:20:9d:ab:03:3f:ce:b1:22:b5:c0:23:a3:0d:38:0d:
0a:de:9c:ec:da:11:b3:f6:b3:a3:a7:16:87:7d:d0:15:25:3f:
ed:43:35:23:78:91:fb:bd:42:63:22:bb:db:d7:87:d6:7b:37:
98:04:e5:33:0d:e7:2b:59:d3:45:82:9e:48:90:f9:10:8c:7d:
1b:ff:5e:9d:bc:a5:88:b1:10:e8:c0:7d:14:bc:a6:56:ca:22:
f4:f3:f8:84:4e:bb:ae:36:26:ad:f4:79:8b:ed:12:48:ff:0a:
0e:90:92:fb:fb:87:22:a9:28:a4:03:73:8f:b2:ac:ff:b4:a3:
1c:e4:91:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:23:32 2026 by rpki-client