Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: ecFwLznAp13Muno3gmdvebknW+9Ys9d63s0k7+NXDGM=
Subject key identifier: 50:9E:DB:D0:A9:7D:E6:AC:36:C4:FE:93:C5:6B:17:7F:9D:44:9C:B8
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 019EC0DAEE57CF23B0A8CA6D3DDBB1129863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 1608
Signing time: Sat 13 Jun 2026 12:00:33 +0000
Manifest this update: Sat 13 Jun 2026 12:00:33 +0000
Manifest next update: Sun 14 Jun 2026 12:00:33 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: 2t7RXGSx8HsdE8ooSIZVYuVx1K17nhXqupTwAtWQrKs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:ee:57:cf:23:b0:a8:ca:6d:3d:db:b1:12:98:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Jun 13 12:00:33 2026 GMT
Not After : Jun 14 12:00:33 2026 GMT
Subject: CN=509edbd0a97de6ac36c4fe93c56b177f9d449cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c5:1e:37:05:25:54:7e:28:17:f1:5e:97:ab:
8d:cf:16:5a:2b:19:67:01:e1:b7:7f:e7:04:a2:f9:
e8:2a:09:e6:d8:9b:84:56:94:2c:d9:53:1d:16:cf:
ba:85:20:ed:cf:43:db:95:e2:a0:52:6c:b2:f3:9c:
9b:5a:9c:a1:0d:d3:6c:53:24:24:76:db:ad:a2:77:
d1:20:42:4f:20:49:eb:ca:a4:3f:cc:7f:47:9a:37:
a6:50:7f:29:d1:76:ad:d7:af:dd:d0:65:6e:80:85:
44:58:88:4e:96:ce:11:29:ca:16:5c:b6:cb:f9:a1:
46:c8:77:3a:51:14:09:aa:e0:e2:df:10:55:7f:e8:
d1:b5:00:06:3d:b3:bf:cd:2c:fd:5e:2d:28:89:fb:
2b:a7:0e:e3:e9:ad:cb:8d:ca:50:d6:0d:97:53:c8:
96:46:b5:0f:4b:7e:de:8f:2c:3f:ce:69:25:f9:6d:
a2:d7:37:65:19:1f:3d:61:a9:b0:0d:56:ab:cb:cf:
cf:1d:c9:cf:49:fc:1d:ee:22:57:ab:19:f9:a9:e6:
8d:81:56:da:ab:16:c0:3d:f8:7c:6e:6e:93:27:b1:
dd:66:d3:ed:bc:9a:3c:a9:e9:ae:fa:1d:18:79:24:
84:0f:03:22:48:d0:a3:72:16:5e:43:0d:83:0c:8f:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9E:DB:D0:A9:7D:E6:AC:36:C4:FE:93:C5:6B:17:7F:9D:44:9C:B8
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:7f:f0:94:ed:9b:78:de:29:d3:24:e1:1f:21:7f:ba:4d:39:
50:09:6d:fb:46:7d:6c:0f:77:1e:cb:04:17:bb:8f:95:b5:8f:
2d:3f:ab:65:ef:13:31:90:7b:c7:01:19:f2:25:0f:04:1f:1e:
db:4e:cf:9a:f4:b4:f4:53:2a:f0:ee:39:1d:a8:3c:6f:24:47:
35:ac:1a:f5:ab:b0:f7:5c:5c:0f:c5:57:7b:f7:25:22:63:82:
e0:08:c1:d9:53:42:df:4f:ba:ca:12:c1:38:6c:43:31:55:31:
6c:cd:7c:11:20:29:4b:03:33:16:84:01:43:46:20:43:18:f9:
d5:eb:a8:fc:ef:97:13:a6:cf:f0:da:bc:2d:36:cf:5d:c6:1d:
6d:b7:b9:cc:64:25:b8:79:a1:83:c4:cd:87:84:35:f1:f5:bc:
58:9e:98:5a:d9:6a:19:61:61:70:62:73:9c:17:31:99:7c:82:
52:e7:53:0e:0c:88:55:42:5c:49:61:b4:f3:5d:95:74:e1:b9:
cb:f6:94:4f:06:9b:0f:81:4c:a1:99:2a:e0:4e:36:21:b2:39:
be:29:f0:83:0e:9d:55:e7:d4:c7:c8:64:be:ff:98:2d:d9:82:
bc:61:85:20:64:8d:39:5e:5e:b7:cb:59:6f:ff:dd:98:55:6d:
a5:a9:89:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2u5XzyOwqMptPduxEphjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmMDgwODlhYWE3YzI4MzY1NGJjZGE1MGE5MzM0NjRlNzEy
NzkxYjAwHhcNMjYwNjEzMTIwMDMzWhcNMjYwNjE0MTIwMDMzWjAzMTEwLwYDVQQD
Eyg1MDllZGJkMGE5N2RlNmFjMzZjNGZlOTNjNTZiMTc3ZjlkNDQ5Y2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMUeNwUlVH4oF/Fel6uNzxZaKxln
AeG3f+cEovnoKgnm2JuEVpQs2VMdFs+6hSDtz0PbleKgUmyy85ybWpyhDdNsUyQk
dtutonfRIEJPIEnryqQ/zH9HmjemUH8p0Xat16/d0GVugIVEWIhOls4RKcoWXLbL
+aFGyHc6URQJquDi3xBVf+jRtQAGPbO/zSz9Xi0oifsrpw7j6a3LjcpQ1g2XU8iW
RrUPS37ejyw/zmkl+W2i1zdlGR89YamwDVary8/PHcnPSfwd7iJXqxn5qeaNgVba
qxbAPfh8bm6TJ7HdZtPtvJo8qemu+h0YeSSEDwMiSNCjchZeQw2DDI+IlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFCe29CpfeasNsT+k8VrF3+dRJy4MB8GA1UdIwQY
MBaAFA8ICJqqfCg2VLzaUKkzRk5xJ5GwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgt
NjMwNDIzMmJlYzNjLzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9jYTc4MDktYTdhOC00OGJjLTg0ZTgtNjMwNDIzMmJlYzNj
LzEvRHdnSW1xcDhLRFpVdk5wUXFUTkdUbkVua2JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3/wlO2b
eN4p0yThHyF/uk05UAlt+0Z9bA93HssEF7uPlbWPLT+rZe8TMZB7xwEZ8iUPBB8e
207PmvS09FMq8O45Hag8byRHNawa9auw91xcD8VXe/clImOC4AjB2VNC30+6yhLB
OGxDMVUxbM18ESApSwMzFoQBQ0YgQxj51euo/O+XE6bP8Nq8LTbPXcYdbbe5zGQl
uHmhg8TNh4Q18fW8WJ6YWtlqGWFhcGJznBcxmXyCUudTDgyIVUJcSWG0812VdOG5
y/aUTwabD4FMoZkq4E42IbI5vinwgw6dVefUx8hkvv+YLdmCvGGFIGSNOV5et8tZ
b//dmFVtpamJ0g==
-----END CERTIFICATE-----
Generated at Sat Jun 13 18:51:13 2026 by rpki-client