Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File: DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier: 1cNBXssNt1e97FO74MYY7KohdtDRz+Y8UP+Ij0XtWtw=
Subject key identifier: 56:75:23:7E:C0:42:FD:A2:BF:23:4D:BE:9A:EB:18:54:ED:2E:68:7F
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 01A0C331EC5C3446462BD9F2CF0D9856461E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number: 19F9
Signing time: Mon 21 Sep 2026 09:00:23 +0000
Manifest this update: Mon 21 Sep 2026 09:00:23 +0000
Manifest next update: Tue 22 Sep 2026 09:00:23 +0000
Files and hashes: 1: A16F9NsEyUOAtSY1zXDtoFPyOvI.roa (hash: jjt60ulArhgQ6L6QMOP8j3tqRiV3ooxzVNi5fS2TRAM=)
2: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: lIWffLktDqLkTXyNOY8jrjjh8jKKFgfjXS+JWmCI4Lk=)
3: NGm2691GZapBpm1gs6Z4jmfhBoM.roa (hash: QTDvgh3teR3/EHNz+lSlNu8bj0kDo1oZ37zpvYw3lqc=)
4: tYghUUQTWWijOlLVQiaZ-lUBiJg.roa (hash: yzQ7/oZUAo82y+3OUIGvO1eCeftZH4ELWkeUYAVvzb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 09:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:31:ec:5c:34:46:46:2b:d9:f2:cf:0d:98:56:46:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Sep 21 09:00:23 2026 GMT
Not After : Sep 22 09:00:23 2026 GMT
Subject: CN=5675237ec042fda2bf234dbe9aeb1854ed2e687f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0c:fa:1f:b3:b0:66:df:a7:e0:d1:07:29:fe:
61:46:ab:21:f8:20:fe:31:24:26:44:59:e5:01:ae:
66:14:9a:ab:ef:29:f5:4f:de:de:86:3b:d6:9c:57:
42:49:89:a2:8b:91:d7:c2:07:47:68:6e:0a:2c:24:
ad:bb:cf:a2:3f:3a:02:7c:4c:e8:49:fa:39:7b:ce:
5f:db:ca:90:f7:8d:8c:1f:21:8c:fd:be:3d:62:31:
6e:6a:96:c0:08:3f:33:8a:e4:55:3a:f0:dc:0b:24:
eb:74:ce:a7:e9:d3:a1:e5:ec:a2:de:c3:25:e0:1c:
c0:05:06:ac:6d:bb:d6:df:4f:ec:48:bf:e6:6d:08:
ef:7e:23:99:41:95:26:4a:02:31:27:e6:ec:44:57:
fc:91:ae:b6:fe:21:86:41:54:86:80:b2:cb:b0:77:
ea:c6:d8:8a:a0:a6:b3:cc:18:48:8a:9a:2b:a5:41:
bd:cc:ed:68:1a:59:c2:c4:a0:d3:ba:ab:5c:6d:72:
6f:50:c4:a2:35:d8:9d:b8:93:92:a9:f2:f1:39:8d:
4e:76:58:71:75:e4:81:bf:54:4c:03:f8:68:e9:0a:
6e:d3:7b:e6:be:ef:24:89:cd:40:03:ac:58:00:df:
f6:2c:14:9b:0a:6f:82:54:86:5a:3a:2b:5d:08:a4:
f4:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:75:23:7E:C0:42:FD:A2:BF:23:4D:BE:9A:EB:18:54:ED:2E:68:7F
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bb:b2:e8:d6:68:7a:25:dc:67:b0:81:50:10:b5:4f:d3:e4:
11:c7:e2:dd:20:53:f0:12:ba:29:5b:88:f8:97:43:18:9a:9c:
1e:cf:0f:93:91:f7:ec:24:9e:0d:3b:f1:4d:62:c2:6c:f9:0c:
86:a1:84:16:02:da:07:e4:db:de:8f:06:4e:19:ec:8a:74:d4:
7f:f7:1e:62:88:e0:dd:e6:89:88:20:9d:ee:61:e0:03:f3:2c:
79:01:54:04:74:b1:52:0a:71:23:8f:5b:c3:22:4e:32:4b:ef:
a4:f7:8e:0c:c4:0c:86:5b:ae:3e:1e:d3:9a:18:04:1d:58:91:
14:d0:74:fa:15:14:13:26:24:3f:33:02:36:15:76:af:06:8e:
f1:c0:20:cf:7b:21:c2:e3:fe:92:76:40:33:bd:02:ef:f1:55:
a5:1e:52:49:55:2c:57:8a:49:61:bc:c6:a5:14:83:29:6d:28:
9b:16:49:e4:c3:ac:8c:af:7e:2e:a1:b4:89:03:4a:44:28:00:
4c:e2:40:e4:51:ea:39:1f:a9:74:e6:41:2a:f2:48:8e:65:df:
c7:8c:1e:47:12:eb:92:68:38:5a:72:9a:ad:d2:aa:09:f6:fc:
66:85:83:8b:33:44:df:f0:41:24:4f:38:6e:e2:69:7f:53:cf:
7b:5f:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 21:29:20 2026 by rpki-client