Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: Kc6GB4vxfxIqmiBS/KotXge4kubV5xlsr5Ex3FohQYM=
Subject key identifier: 6F:71:22:59:DE:DF:DF:36:4E:F1:22:CF:86:93:41:1F:12:18:A2:99
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 019FA8992095ADE726D4053F9F7D0DBAF2CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 1680
Signing time: Tue 28 Jul 2026 12:00:35 +0000
Manifest this update: Tue 28 Jul 2026 12:00:35 +0000
Manifest next update: Wed 29 Jul 2026 12:00:35 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: mQbnS5EqRCOJATSxnoxW3mUiQZotm098ZMljcupSf4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:20:95:ad:e7:26:d4:05:3f:9f:7d:0d:ba:f2:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Jul 28 12:00:35 2026 GMT
Not After : Jul 29 12:00:35 2026 GMT
Subject: CN=6f712259dedfdf364ef122cf8693411f1218a299
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5a:bc:44:2a:6c:e9:b6:e1:00:90:98:eb:f2:
7b:7d:a7:37:50:20:71:8e:d2:ed:61:03:ee:9e:05:
b1:4d:08:d4:11:cd:71:e2:03:74:0d:06:fb:bc:81:
dd:d3:c2:66:79:7a:43:ae:80:a3:48:f2:c2:9c:59:
e0:2d:05:ff:45:28:eb:81:f1:b6:63:b9:42:d8:41:
e6:79:63:ec:70:a9:bb:d5:fe:20:de:67:5e:c5:c8:
9f:b6:48:e0:06:c0:b8:5b:8b:31:9b:6f:ed:2d:ae:
5a:07:bb:dd:d9:d7:95:53:fc:a4:04:08:5a:4e:21:
ed:af:14:51:d3:ce:4a:8d:2d:bf:a8:97:dc:39:ab:
3a:a9:73:04:ea:88:ae:d8:a1:bc:40:df:c2:61:dc:
53:ee:9a:4d:93:a0:c4:20:fd:be:d7:6b:30:1d:5e:
5a:d7:90:18:89:42:35:63:43:3b:0f:15:75:b9:84:
f3:78:40:82:84:52:2e:65:03:0e:23:54:07:56:00:
95:f7:1b:c8:db:d6:c9:0f:b0:a7:dc:7b:35:cf:71:
e4:da:7a:26:06:b1:49:0b:7a:08:aa:57:45:92:81:
e4:fe:a2:52:c9:4e:0d:e9:ef:ce:d1:33:c7:a5:8a:
0d:ca:38:1b:1f:f3:35:7b:20:c5:82:2a:3c:1b:84:
14:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:71:22:59:DE:DF:DF:36:4E:F1:22:CF:86:93:41:1F:12:18:A2:99
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7d:e0:2c:f1:80:6e:20:48:c9:9f:0e:e0:12:9f:dd:23:59:
de:ab:46:32:bf:84:5f:29:f6:71:a1:0c:72:ee:07:c3:d7:36:
a8:ce:53:5a:0b:d5:ec:dc:ec:cf:00:e5:04:8c:08:d1:a7:b2:
54:cc:2b:d5:2f:0d:24:94:5a:15:32:f0:49:db:19:9c:40:83:
66:85:23:72:df:5e:23:db:41:95:d2:82:35:16:28:e1:2e:3b:
f7:96:0e:da:df:ab:e1:6a:86:3b:86:5a:33:75:32:f7:9e:84:
4b:73:a0:80:3f:10:a7:f7:f5:39:5f:4b:17:95:e6:67:2e:67:
41:12:a4:81:4e:8f:eb:aa:e3:d1:ab:ce:f5:c3:8c:50:79:7c:
34:de:0a:4f:ee:d1:2c:c5:56:a5:d3:2c:bb:33:50:a2:7b:88:
96:be:92:44:56:03:33:20:34:1b:2b:c0:74:11:e2:ad:f5:ba:
20:cb:8d:c9:83:12:72:97:48:d3:aa:aa:c2:46:e2:95:97:1e:
9d:72:a4:3a:08:2e:76:25:6d:e4:01:2a:ef:38:57:85:9e:af:
5f:a1:30:b7:b1:ab:29:18:62:7a:82:a7:65:fe:81:6d:57:12:
71:df:57:89:a7:a0:8e:40:30:7a:a7:35:0d:f5:6c:da:56:77:
e9:bf:8d:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+omSCVrecm1AU/n30NuvLKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMDgwODlhYWE3YzI4MzY1NGJjZGE1MGE5MzM0NjRlNzEy
NzkxYjAwHhcNMjYwNzI4MTIwMDM1WhcNMjYwNzI5MTIwMDM1WjAzMTEwLwYDVQQD
Eyg2ZjcxMjI1OWRlZGZkZjM2NGVmMTIyY2Y4NjkzNDExZjEyMThhMjk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2lq8RCps6bbhAJCY6/J7fac3UCBx
jtLtYQPungWxTQjUEc1x4gN0DQb7vIHd08JmeXpDroCjSPLCnFngLQX/RSjrgfG2
Y7lC2EHmeWPscKm71f4g3mdexciftkjgBsC4W4sxm2/tLa5aB7vd2deVU/ykBAha
TiHtrxRR085KjS2/qJfcOas6qXME6oiu2KG8QN/CYdxT7ppNk6DEIP2+12swHV5a
15AYiUI1Y0M7DxV1uYTzeECChFIuZQMOI1QHVgCV9xvI29bJD7Cn3Hs1z3Hk2nom
BrFJC3oIqldFkoHk/qJSyU4N6e/O0TPHpYoNyjgbH/M1eyDFgio8G4QUgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9xIlne3982TvEiz4aTQR8SGKKZMB8GA1UdIwQY
MBaAFA8ICJqqfCg2VLzaUKkzRk5xJ5GwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgt
NjMwNDIzMmJlYzNjLzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgtNjMwNDIzMmJlYzNj
LzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATn3gLPGA
biBIyZ8O4BKf3SNZ3qtGMr+EXyn2caEMcu4Hw9c2qM5TWgvV7NzszwDlBIwI0aey
VMwr1S8NJJRaFTLwSdsZnECDZoUjct9eI9tBldKCNRYo4S4795YO2t+r4WqGO4Za
M3Uy956ES3OggD8Qp/f1OV9LF5XmZy5nQRKkgU6P66rj0avO9cOMUHl8NN4KT+7R
LMVWpdMsuzNQonuIlr6SRFYDMyA0GyvAdBHirfW6IMuNyYMScpdI06qqwkbilZce
nXKkOggudiVt5AEq7zhXhZ6vX6Ewt7GrKRhieoKnZf6BbVcScd9XiaegjkAweqc1
DfVs2lZ36b+Nsw==
-----END CERTIFICATE-----
Generated at Tue Jul 28 20:44:33 2026 by rpki-client