Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier: HUwyqNgJNhDxQ909myLfyKbQMCtRf4qZ9MIYVVM0mNk=
Subject key identifier: 3E:09:AE:D8:61:47:EF:7E:08:75:84:33:51:0A:D4:2F:3A:31:09:8B
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 019E1D599CC9BD20887A123A93ABD1F18077
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 18:01:12 +0000
Manifest this update: Tue 12 May 2026 18:01:12 +0000
Manifest next update: Wed 13 May 2026 18:01:12 +0000
Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: 1w/kCx340KQeMizX0XO6XIe+0Fn8e+lcrVp/c2TmBa0=)
2: uTNM_Qx3Kksos1PgtvUNZevyWHs.roa (hash: 5x2Iwvw5H8NZducy/95N1nopK5CCb4aO6OaFpQG4yP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:9c:c9:bd:20:88:7a:12:3a:93:ab:d1:f1:80:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: May 12 18:01:12 2026 GMT
Not After : May 13 18:01:12 2026 GMT
Subject: CN=3e09aed86147ef7e08758433510ad42f3a31098b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d7:a7:2b:69:3f:a4:e0:40:4c:c8:a0:54:3f:
26:40:cb:48:2d:59:d3:bc:e4:9d:63:46:3b:da:e0:
84:e4:80:cf:56:4c:83:d9:42:9f:a4:69:38:80:eb:
8e:f5:b2:8b:9d:89:e7:1b:40:76:6d:2a:33:78:fd:
a2:6d:45:f4:f6:54:49:5e:cf:52:6b:26:bb:fb:db:
1a:d9:a7:6f:01:98:39:8e:4c:3d:36:9f:96:b2:9c:
f3:da:ff:23:3d:a5:62:46:eb:45:5f:d6:e5:58:32:
1a:2f:33:05:24:49:72:19:f7:3d:73:a2:c9:c7:cb:
ae:31:8e:0e:0a:e8:1f:ab:e6:50:dc:e0:e5:39:73:
07:39:1d:ef:46:e5:ce:93:84:d9:e6:85:f8:e6:c4:
62:1c:4d:93:00:af:2b:4a:db:ac:69:af:47:bc:d7:
13:b9:b5:01:21:29:b5:cf:03:ee:a6:96:15:39:43:
96:19:90:c4:17:8d:15:d1:28:06:2a:f9:df:e0:46:
66:c2:83:77:a6:8e:d1:6c:08:24:6b:28:d9:75:bf:
bf:8d:74:44:c2:c8:9e:0d:a9:fe:75:98:3d:95:b0:
49:20:25:ae:85:0e:db:04:c9:5f:50:9c:0b:d9:95:
3d:32:93:8a:4c:0b:e8:15:70:24:58:73:c6:70:e6:
9c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:09:AE:D8:61:47:EF:7E:08:75:84:33:51:0A:D4:2F:3A:31:09:8B
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:13:75:a2:e5:80:ed:31:ae:7b:75:ee:13:0c:49:eb:77:6f:
1e:f6:4a:06:fe:ae:c3:89:96:21:a2:a5:a3:1b:ef:0f:9b:f2:
ba:d5:63:79:23:bc:69:a2:94:ed:3d:40:4b:06:34:83:28:27:
f0:38:20:b7:2b:f9:65:2d:11:d6:28:ef:25:a4:5d:95:54:54:
a7:c8:99:56:d3:ac:2a:ff:d4:5d:4c:64:bf:9d:64:a2:9c:94:
2e:16:aa:8b:c2:94:8e:1e:6a:ed:9d:a0:f7:84:7b:15:d3:4a:
6c:fb:ab:58:a6:3c:c8:23:87:36:98:23:c6:b5:fd:3e:d3:a7:
45:c1:b2:4f:70:7c:cb:2a:4f:88:ad:ec:e3:c3:57:b4:fd:ea:
d4:cc:28:57:9b:6d:63:fb:5f:8c:03:33:94:7b:82:d5:3c:c5:
db:ff:d7:f9:88:de:de:47:eb:27:aa:f3:7b:ee:68:91:1c:99:
11:92:e8:1a:35:ed:93:1d:16:cb:98:07:a4:17:5e:f2:9a:08:
76:ad:19:ac:62:08:0a:a0:2a:01:b0:67:36:a5:b2:af:9d:3e:
be:78:b3:c7:a0:12:b5:b9:2b:b1:c5:a4:14:12:8e:c6:42:56:
37:d7:08:54:76:a9:fb:0b:2e:7f:37:d4:4b:2c:9a:6b:4b:d4:
ab:40:07:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:54 2026 by rpki-client