Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: c6EOjlNXU0blegHA78Gvw166z5XDOScGNOZky0+fOKQ=
Subject key identifier: 83:1C:F9:1E:36:8F:D8:97:DA:05:D9:3F:8F:17:9A:13:C0:69:B2:5D
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 01A0DD98217F73368C4DBBEF4ACDB7AEBB76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 1720
Signing time: Sat 26 Sep 2026 12:02:09 +0000
Manifest this update: Sat 26 Sep 2026 12:02:09 +0000
Manifest next update: Sun 27 Sep 2026 12:02:09 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: h1N9c+x7+G/QWsJEEmBeJi0o1qJrwxxBpM4pmCElFuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 12:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dd:98:21:7f:73:36:8c:4d:bb:ef:4a:cd:b7:ae:bb:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Sep 26 12:02:09 2026 GMT
Not After : Sep 27 12:02:09 2026 GMT
Subject: CN=831cf91e368fd897da05d93f8f179a13c069b25d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ca:7e:53:d5:b9:48:93:75:64:e7:18:a9:f7:
8a:23:8f:98:13:28:44:94:bf:ea:bf:47:70:af:46:
b7:2f:02:f2:98:5a:c0:bb:08:79:0b:1e:5d:3c:b6:
a7:98:3c:b0:95:c3:d6:a0:94:2f:aa:ea:83:4c:bf:
64:1e:c2:3f:11:61:f7:a5:05:1c:1b:3a:6d:5d:bc:
fb:b4:17:ea:6d:59:a5:e6:b7:30:f9:ba:e8:f6:eb:
09:e8:6d:8b:8d:05:ed:cf:72:e6:50:64:82:e6:f6:
06:7d:d9:ef:33:be:39:1a:38:e2:75:24:ca:8f:46:
85:4d:43:b6:5c:72:46:00:fe:43:76:1d:61:63:88:
59:8f:92:e0:ab:9f:cf:7d:64:3a:b7:2f:d8:f6:74:
57:11:ab:b1:19:f5:6a:8a:d8:9a:06:e5:26:8f:2d:
32:9b:22:0c:3c:12:12:5e:f0:f4:f3:18:f2:36:2f:
34:e3:0a:ca:d1:e0:b0:bd:b8:1a:e9:3c:8a:19:7d:
46:06:13:52:e6:fa:76:91:14:5d:be:af:04:e6:b2:
90:35:a9:38:ab:e6:ff:11:a9:ec:34:3f:bc:e8:89:
8b:55:0d:01:ea:08:46:db:95:82:bd:45:77:29:de:
5a:23:95:10:18:1c:89:30:e7:1b:be:70:2f:91:2e:
95:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:1C:F9:1E:36:8F:D8:97:DA:05:D9:3F:8F:17:9A:13:C0:69:B2:5D
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:b1:55:d4:57:bc:6a:a3:ad:5e:28:cc:b2:a3:00:0b:1d:a8:
31:bd:4e:dd:8c:c3:67:4f:ee:82:d9:e2:0d:5e:4d:a5:84:f7:
f2:29:9b:f8:eb:16:ee:7d:57:e6:0b:5a:e4:db:e8:fd:7c:54:
76:93:10:12:7e:17:7c:b3:2f:32:4a:e6:eb:9b:6c:7b:92:66:
88:28:b2:90:68:9a:9b:32:94:56:80:4e:6b:de:02:ca:15:4f:
d3:38:87:f8:10:75:c2:43:98:57:7a:68:ac:45:52:61:99:61:
9f:08:07:92:1b:f1:72:03:15:41:16:41:25:1f:7a:45:ec:3f:
8d:a7:40:68:38:9c:c7:03:76:06:f0:f2:7f:b7:06:1e:15:61:
07:86:f5:e4:73:35:6a:52:55:65:d1:02:79:4c:bc:c6:bb:6d:
83:90:d4:09:6e:f5:52:a1:19:42:ea:4b:ca:59:77:3a:c2:2a:
ad:74:10:09:0a:59:82:5f:21:63:c4:c8:ee:bd:9b:d0:f5:42:
b0:4b:d8:b0:e7:32:ef:28:5f:27:93:d7:0f:ea:f9:17:fd:40:
55:36:68:85:23:03:f5:60:33:4e:3d:ec:43:0d:f0:e1:d2:bf:
42:40:17:87:9a:e7:d0:a9:8b:b0:e1:37:84:91:c6:65:5d:01:
cf:5e:bd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:17:12 2026 by rpki-client