Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
File: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft (raw, json)
Hash identifier: vgZdKlREKkuWDhbzoo9CTm8S9NuRC4Qbp73UndVR1/8=
Subject key identifier: 71:E2:CE:FD:80:4F:38:8C:0F:F3:F8:C0:41:4F:FB:A4:BC:39:C0:D7
Authority key identifier: 0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
Certificate issuer: /CN=0e29a482de0d56746c3045269f99205204f95484
Certificate serial: 019CAD5A25BB669EEBF787A6FE0E9F4442D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
Manifest number: 13ED
Signing time: Mon 02 Mar 2026 07:01:32 +0000
Manifest this update: Mon 02 Mar 2026 07:01:32 +0000
Manifest next update: Tue 03 Mar 2026 07:01:32 +0000
Files and hashes: 1: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl (hash: JXod1vkPJmTGPSO7kxLAqYeW5ei4mfUXzvW179y81tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:25:bb:66:9e:eb:f7:87:a6:fe:0e:9f:44:42:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e29a482de0d56746c3045269f99205204f95484
Validity
Not Before: Mar 2 07:01:32 2026 GMT
Not After : Mar 3 07:01:32 2026 GMT
Subject: CN=71e2cefd804f388c0ff3f8c0414ffba4bc39c0d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:63:27:c5:71:53:bc:6d:ee:57:0d:da:b8:26:
ee:31:9f:3f:29:28:65:b1:ad:5e:b1:5c:f3:8b:89:
b4:dd:be:61:a1:dd:2d:88:5f:ac:a5:41:67:97:2c:
51:f3:f2:cb:96:0b:12:83:4d:dd:dc:8b:e3:48:a3:
ee:54:3c:5b:79:14:0c:1b:b2:1d:54:f6:55:45:33:
6c:30:83:6f:53:06:1d:88:4f:ac:6c:b9:60:ff:47:
4e:16:12:1e:06:46:30:67:b1:0f:eb:f4:a9:20:53:
c3:01:c6:02:31:06:6e:ea:4e:35:9e:d2:58:72:01:
e7:66:d7:ed:82:cb:3d:61:f8:3d:30:95:22:d0:d1:
5c:7d:31:22:f1:9f:57:d1:f0:2a:ab:b8:0b:ad:df:
08:20:ab:c6:0f:ae:44:48:a1:32:dc:92:c9:15:29:
0a:1e:15:e5:98:f9:72:92:d6:ed:c1:a1:6a:9f:ed:
e6:08:a4:d3:8f:1e:5b:90:83:ef:b4:55:1d:a7:fa:
18:51:f9:bc:49:4e:a0:88:6f:25:aa:be:af:96:53:
d5:84:e4:b7:e9:e0:62:9f:0a:a0:1e:59:8c:22:dc:
97:7a:e5:43:4e:95:d0:a7:47:1d:da:b3:77:8c:63:
c3:7f:41:f2:2a:ff:17:81:10:fb:d3:d9:07:b2:a2:
d2:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E2:CE:FD:80:4F:38:8C:0F:F3:F8:C0:41:4F:FB:A4:BC:39:C0:D7
X509v3 Authority Key Identifier:
keyid:0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:ee:38:69:a0:d3:72:38:7e:05:ab:f2:c6:9d:33:0e:4d:3d:
31:2a:83:ca:d9:42:f5:a1:87:42:59:b2:3d:6a:db:1f:f0:1c:
98:bc:0a:07:11:c5:98:32:ea:21:95:af:a3:36:ee:31:d2:05:
a3:68:9d:1f:9a:0e:2c:0c:66:f8:73:b9:e8:85:f5:2b:77:ef:
2c:fd:5e:0a:07:5d:4b:78:9f:10:1d:23:87:d4:b3:4f:9b:79:
9e:ab:2c:a8:a2:23:ad:47:81:65:6d:15:78:66:a0:42:56:cf:
11:9a:1e:34:12:dc:92:be:07:c0:82:9b:a0:cf:93:60:8b:fa:
03:f8:d6:5d:10:d0:7a:f3:b0:e8:3c:67:5a:50:c2:9d:74:ed:
34:59:2a:ad:3f:20:9b:70:a6:e7:54:40:09:81:dc:36:8e:c3:
d4:0c:ac:bf:4a:55:e7:07:09:86:6a:7a:4a:1a:14:b4:1e:4e:
f5:28:5d:4b:fe:0c:81:cf:f2:06:38:e7:6f:6d:95:1b:3c:8d:
27:98:21:1a:5e:7e:84:de:3b:f3:0f:0c:8c:ef:9a:65:36:c6:
49:3c:d4:4d:45:14:78:e4:34:99:a7:7e:bb:64:40:0c:85:ee:
1a:03:15:0b:c5:39:90:90:3f:b5:77:6e:cc:85:72:a9:c8:9e:
ec:38:80:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:31:57 2026 by rpki-client