Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: fkCWQ3AH0+0RMTmVzzrccOGByHjfutvsMvr5e1PBzfE=
Subject key identifier: EC:77:FE:98:53:C3:B2:6E:E4:21:B0:4D:FA:2A:7C:80:38:C6:DD:3C
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 019D9962D43EB5A09AE61C0793C39166FF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 156F
Signing time: Fri 17 Apr 2026 03:01:23 +0000
Manifest this update: Fri 17 Apr 2026 03:01:23 +0000
Manifest next update: Sat 18 Apr 2026 03:01:23 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: NuLcjA2oeGKt9a9w1M5vFO0GSND4/lxzT0yCYQ+4ERo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:d4:3e:b5:a0:9a:e6:1c:07:93:c3:91:66:ff:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Apr 17 03:01:23 2026 GMT
Not After : Apr 18 03:01:23 2026 GMT
Subject: CN=ec77fe9853c3b26ee421b04dfa2a7c8038c6dd3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:31:33:c4:b7:89:21:4a:19:f3:da:01:5d:9e:
91:43:70:f4:ab:f5:e0:78:5f:f6:b3:f2:fc:33:1e:
e5:9a:28:90:eb:c5:c7:05:7d:26:25:18:45:f8:33:
05:2f:47:d3:6a:5e:ac:59:be:af:9e:be:bf:72:a7:
3a:da:db:03:90:04:ec:66:5d:3f:40:b7:0a:ae:10:
c9:df:94:1b:36:ed:0c:78:16:4b:cd:ee:9e:7b:ae:
45:1b:6c:00:6c:44:a2:60:24:be:24:35:de:7d:87:
07:ab:7d:fa:2f:e7:37:2e:26:d5:f6:39:da:a9:1a:
76:39:fe:ec:14:e9:b3:a2:c9:50:07:c6:f3:96:56:
2e:68:a6:c0:1b:0f:59:1e:bd:7c:df:4b:19:ec:35:
f0:fa:16:86:7c:a7:2a:5d:d0:9a:e7:fa:51:ed:a7:
b6:bb:e8:7a:fa:10:c1:84:a9:79:9f:e5:a2:a2:94:
fd:9e:aa:e9:3b:e0:26:49:9e:52:e0:9b:b8:86:ac:
69:74:60:4f:41:f7:82:55:ae:8f:dd:ee:de:dc:b6:
71:47:c4:64:5c:7c:cc:45:d3:64:b9:e7:28:9a:66:
9f:f7:c4:5a:83:3f:65:c2:06:55:bc:8c:7a:37:4f:
64:48:dc:83:6b:38:53:b5:db:73:e8:48:ee:76:a6:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:77:FE:98:53:C3:B2:6E:E4:21:B0:4D:FA:2A:7C:80:38:C6:DD:3C
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c3:1e:01:c1:19:3e:2c:86:12:b8:a4:86:ca:cc:ac:50:32:
1b:54:5a:0d:52:d2:77:f0:22:52:0e:a6:c1:25:ad:d1:81:e2:
52:76:e5:82:71:53:4d:50:a1:8d:6e:66:ea:c6:b8:82:56:63:
98:3b:02:c8:62:98:5f:3b:62:cc:0c:cc:94:3d:71:85:f5:83:
55:f4:ac:3d:04:94:71:ad:d0:55:41:c1:f6:2a:d0:dd:74:dd:
d6:a7:dc:07:a9:bf:b6:9c:be:01:69:33:bb:09:b5:2f:be:3f:
6f:97:26:b7:9c:f5:87:c5:8c:c1:08:e0:27:4e:2c:d9:56:f3:
b2:34:73:6e:0d:67:7b:5e:80:99:0f:24:59:55:38:c1:09:c8:
61:13:0d:63:ed:c1:39:c4:fa:82:b5:e5:42:7d:38:6e:82:c9:
4f:a3:0f:0f:41:a9:22:55:15:54:83:03:11:d3:e8:6e:f6:08:
0d:4f:38:36:e2:e9:07:a0:85:03:a5:70:0a:2b:c3:3e:69:05:
6e:17:62:53:a4:6d:aa:15:16:e2:c3:aa:33:2d:31:58:21:ac:
34:b6:97:4b:64:bd:2c:46:5e:ff:25:cf:d7:2d:e0:25:01:be:
3d:c0:21:27:be:7f:85:85:95:fd:11:18:1f:a9:c3:0f:5d:87:
15:6c:a2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:24:23 2026 by rpki-client