Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
File: DIZmK3UsijvnLoVEOU_5JvaPv34.mft (raw, json)
Hash identifier: trolNTC0zbaWm4pwJ/LNi5aPDs0JnpoSEtPqKZoeMuE=
Subject key identifier: 89:84:33:4C:C5:DA:90:EF:95:C4:23:DA:C5:AD:1E:A6:AF:A6:DF:6D
Authority key identifier: 0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
Certificate issuer: /CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Certificate serial: 019FA93DFF7A500671644EDE5DD311D6F7D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
Manifest number: 1967
Signing time: Tue 28 Jul 2026 15:00:40 +0000
Manifest this update: Tue 28 Jul 2026 15:00:40 +0000
Manifest next update: Wed 29 Jul 2026 15:00:40 +0000
Files and hashes: 1: A16F9NsEyUOAtSY1zXDtoFPyOvI.roa (hash: jjt60ulArhgQ6L6QMOP8j3tqRiV3ooxzVNi5fS2TRAM=)
2: DIZmK3UsijvnLoVEOU_5JvaPv34.crl (hash: 4whTDmZPN+X344gzUlAwdz0huuiodQukYLA+IpnNnmE=)
3: NGm2691GZapBpm1gs6Z4jmfhBoM.roa (hash: QTDvgh3teR3/EHNz+lSlNu8bj0kDo1oZ37zpvYw3lqc=)
4: tYghUUQTWWijOlLVQiaZ-lUBiJg.roa (hash: yzQ7/oZUAo82y+3OUIGvO1eCeftZH4ELWkeUYAVvzb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:3d:ff:7a:50:06:71:64:4e:de:5d:d3:11:d6:f7:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c86662b752c8a3be72e8544394ff926f68fbf7e
Validity
Not Before: Jul 28 15:00:40 2026 GMT
Not After : Jul 29 15:00:40 2026 GMT
Subject: CN=8984334cc5da90ef95c423dac5ad1ea6afa6df6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:c1:55:1f:da:ab:8e:2b:60:e4:3e:43:51:
05:37:5f:98:50:83:dd:c3:f3:49:33:1f:48:94:32:
18:35:90:52:df:0c:e4:b7:d5:d3:43:47:85:11:20:
8f:31:05:68:2c:d0:b5:86:c6:dd:f9:6d:eb:12:7e:
a0:a1:44:c9:c1:57:64:b0:25:76:8f:10:11:d7:ab:
4a:67:31:15:a2:36:89:95:be:a7:d6:c1:73:52:bb:
47:3f:29:4b:f7:97:2b:41:4e:8b:7d:1d:6f:e5:10:
8e:45:a5:71:bf:0a:b0:fd:3c:0c:22:27:05:1a:00:
5e:15:4f:c2:cb:1c:7b:09:28:f9:a6:cd:dd:21:eb:
da:49:9a:d1:ed:e1:97:bf:09:ca:cc:0b:ab:11:6b:
1b:74:7b:46:12:b8:fc:eb:1a:4c:43:e5:06:c6:f3:
14:d4:76:83:24:7d:d5:0d:ec:3a:a1:b3:25:ac:2c:
ab:e2:ea:86:88:3d:27:d4:ca:bb:8f:21:45:22:4e:
60:66:f7:ff:37:f1:1e:20:41:a2:c3:7e:af:06:ee:
df:04:82:48:b5:54:b3:28:4b:a6:e5:9c:cd:8a:88:
98:ca:bc:4a:28:9a:19:37:f3:bc:e2:76:84:9f:e0:
3c:35:66:57:14:f4:32:ff:12:3e:e9:0d:e7:0e:2f:
8b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:84:33:4C:C5:DA:90:EF:95:C4:23:DA:C5:AD:1E:A6:AF:A6:DF:6D
X509v3 Authority Key Identifier:
keyid:0C:86:66:2B:75:2C:8A:3B:E7:2E:85:44:39:4F:F9:26:F6:8F:BF:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIZmK3UsijvnLoVEOU_5JvaPv34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/09c4b2-46a9-4f88-99b8-1ccc9c295e8e/1/DIZmK3UsijvnLoVEOU_5JvaPv34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b5:1f:93:e8:0b:78:df:36:20:45:ad:81:7e:1a:df:d7:18:
2f:8c:cd:d6:cd:ab:3a:f7:dc:35:9a:e0:b7:fa:42:b5:ef:f8:
ba:eb:48:ca:93:10:4d:90:fd:db:b1:f0:39:cf:55:c0:e3:a5:
a8:6b:d9:14:04:cd:e1:ac:65:a8:7a:e1:28:8e:06:83:67:60:
14:1e:86:7e:58:ca:42:64:63:21:ab:7c:06:a6:57:23:55:e3:
f1:c5:ee:51:4a:eb:8b:c5:b3:14:cb:fd:ad:25:a8:b3:24:ac:
d0:b2:e0:2c:0e:3e:0a:c8:bf:68:a4:d9:99:f6:0d:d0:90:36:
38:e6:e1:47:a0:ae:63:fb:3a:8c:9b:dc:76:d7:95:ae:94:b5:
51:52:3f:27:a5:06:59:81:a2:c9:5c:89:78:50:c4:08:cc:24:
b7:e4:6f:5a:48:24:eb:b6:7c:4a:83:3c:a1:b3:f2:a7:81:4e:
88:70:9b:ff:b9:b6:54:fd:d0:91:bd:4b:e7:56:91:b7:bc:d8:
5e:25:22:24:1d:9e:8b:73:e6:ef:13:4d:d9:34:12:16:b8:21:
28:66:86:55:1d:bf:d7:c9:d0:f9:5d:2c:f4:9b:b9:4c:a6:e6:
23:19:89:3f:8a:f8:fc:e1:1d:26:ca:a8:de:fe:1e:f2:8b:1b:
58:ea:1c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:54:40 2026 by rpki-client