Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
File: DwgImqp8KDZUvNpQqTNGTnEnkbA.mft (raw, json)
Hash identifier: lVcJ78VqgG82xUzHsLXl4wbXv3QpOh+zGjANlaAGrAY=
Subject key identifier: CC:25:84:46:A5:C9:A6:A9:6B:C6:0D:C6:44:14:99:9C:68:9C:A8:F8
Authority key identifier: 0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
Certificate issuer: /CN=0f08089aaa7c283654bcda50a933464e712791b0
Certificate serial: 019CABD9AB5DED31AEB3BA228E161809A995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
Manifest number: 14F4
Signing time: Mon 02 Mar 2026 00:01:34 +0000
Manifest this update: Mon 02 Mar 2026 00:01:34 +0000
Manifest next update: Tue 03 Mar 2026 00:01:34 +0000
Files and hashes: 1: DwgImqp8KDZUvNpQqTNGTnEnkbA.crl (hash: pslaQNdZRYoMM2/gN/BfOzyYduwlcFddkVLgu7g6SzA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:ab:5d:ed:31:ae:b3:ba:22:8e:16:18:09:a9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f08089aaa7c283654bcda50a933464e712791b0
Validity
Not Before: Mar 2 00:01:34 2026 GMT
Not After : Mar 3 00:01:34 2026 GMT
Subject: CN=cc258446a5c9a6a96bc60dc64414999c689ca8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:27:33:72:ee:17:ae:38:89:62:b7:6f:08:62:
be:e4:94:9d:3a:b1:9e:d3:35:38:9c:04:62:cf:9b:
c7:43:b9:eb:74:67:3d:d7:4e:a6:31:04:18:21:2d:
f0:da:eb:7e:5b:ee:85:92:3a:22:d5:a3:59:a9:9b:
6e:e2:85:ce:50:93:d8:66:e0:93:3d:b8:25:81:4a:
55:7a:69:67:73:7c:bc:f2:e6:ca:8a:cf:6d:ea:ce:
8b:eb:2d:80:f2:8f:11:33:62:df:6a:ed:99:bf:e1:
e8:3d:3e:48:2d:24:66:8c:d0:5e:8f:81:f9:1d:30:
b0:ab:9e:7d:20:63:40:d0:f4:32:13:0f:cb:61:7d:
66:a5:26:5e:c2:88:f2:80:6b:db:5b:62:7f:8b:7a:
70:e5:33:b1:30:8a:91:b4:37:c4:fc:ad:34:49:f8:
c8:e2:f3:a3:72:75:3a:52:bb:71:ad:7e:49:08:7d:
31:77:a2:50:a0:8e:15:e2:6d:e5:1f:db:b0:a9:46:
6b:90:2b:07:f0:a6:37:ba:91:e6:07:d1:70:92:49:
ff:7a:58:f4:bf:e4:04:aa:27:32:ba:77:aa:26:fd:
d1:3a:20:6b:e3:98:d9:b8:b1:fe:ae:b4:a6:09:b4:
db:12:3c:5a:2d:d4:67:f0:9f:94:76:a2:fa:bc:fc:
81:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:25:84:46:A5:C9:A6:A9:6B:C6:0D:C6:44:14:99:9C:68:9C:A8:F8
X509v3 Authority Key Identifier:
keyid:0F:08:08:9A:AA:7C:28:36:54:BC:DA:50:A9:33:46:4E:71:27:91:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DwgImqp8KDZUvNpQqTNGTnEnkbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ca7809-a7a8-48bc-84e8-6304232bec3c/1/DwgImqp8KDZUvNpQqTNGTnEnkbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:44:a0:67:6b:c4:74:95:bb:49:9a:f8:00:22:bb:e3:8a:1c:
a7:7a:6d:39:6e:5e:71:78:fc:84:ee:a7:e7:63:2d:81:87:65:
8b:93:0e:90:cc:1f:4a:47:1c:17:1c:86:62:fe:79:e8:76:9c:
55:65:0a:73:53:00:10:ac:84:bc:c3:f6:bd:13:fc:6f:f3:34:
5f:20:b1:12:5c:3a:68:ab:9d:9c:e1:4e:85:15:a4:a5:ab:dc:
7c:e9:bc:a1:10:52:52:6c:73:ab:1d:35:91:7a:86:43:e2:36:
55:df:03:07:25:f2:6f:a2:33:14:0b:17:9f:ed:a5:20:af:e6:
a4:f8:a0:f4:a7:72:4c:eb:87:d3:c2:b7:f7:f7:a1:13:08:c9:
9f:04:b6:33:46:e1:11:65:20:1d:a7:fc:fb:76:18:b6:99:3b:
ba:90:27:cd:0a:3e:96:28:54:62:b7:fa:87:15:de:08:b2:e1:
70:96:b4:e6:f6:5f:0e:5e:0d:4d:32:92:18:35:3c:6e:f9:78:
34:35:e1:e2:61:17:d2:dd:59:25:ef:2c:1a:8b:62:a3:cb:cd:
b0:ee:76:98:b9:6c:7c:a3:96:4c:4d:72:12:a0:91:b7:a2:e6:
3d:cf:bb:67:e1:67:4c:55:18:83:0e:dd:23:70:2e:22:cc:02:
8d:7c:43:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:46 2026 by rpki-client