Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
File: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft (raw, json)
Hash identifier: FwrEsoY7pt7mMnPnGRxyneKcJJO49Xa8YBBxn7FGMiI=
Subject key identifier: FF:9E:E2:65:7C:D2:4A:D1:6A:83:D6:68:02:FE:95:75:B3:31:11:74
Authority key identifier: 0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
Certificate issuer: /CN=0e29a482de0d56746c3045269f99205204f95484
Certificate serial: 01A0EAAEB688DC116CE822E0992072B1439C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
Manifest number: 161F
Signing time: Tue 29 Sep 2026 01:01:53 +0000
Manifest this update: Tue 29 Sep 2026 01:01:53 +0000
Manifest next update: Wed 30 Sep 2026 01:01:53 +0000
Files and hashes: 1: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl (hash: vNnzuxoeJh2m4vItAkES+asSwoGmPN3Nl5wzfnZSvYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:ae:b6:88:dc:11:6c:e8:22:e0:99:20:72:b1:43:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e29a482de0d56746c3045269f99205204f95484
Validity
Not Before: Sep 29 01:01:53 2026 GMT
Not After : Sep 30 01:01:53 2026 GMT
Subject: CN=ff9ee2657cd24ad16a83d66802fe9575b3311174
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d5:2b:e4:bc:4e:95:79:59:2f:21:db:1c:7f:
db:25:28:7a:ba:41:8f:fb:c4:78:26:24:24:46:ff:
88:83:52:44:99:79:b0:91:b3:63:ec:72:15:26:58:
9d:cf:e6:ad:4c:6a:00:ce:fd:f3:b0:ce:69:1a:6e:
58:06:fa:bb:83:3d:5b:02:ab:ea:6d:a5:86:9f:ff:
73:ed:6f:90:07:3b:cb:04:70:f0:24:3d:a1:57:71:
53:1a:b1:1e:e9:ad:22:de:8b:87:86:96:c7:f4:5b:
5d:1f:68:60:ea:89:ec:12:fc:7e:fb:89:2e:f8:41:
4d:74:65:f0:49:0b:c8:f3:05:2a:ae:9e:0d:01:c5:
f5:1d:ad:fd:7b:7c:fd:6f:35:e3:6c:af:07:01:3a:
1f:53:41:40:ab:36:0f:05:04:91:64:bb:41:db:ee:
15:c5:1b:18:15:0e:a0:79:08:28:df:f6:60:8f:ad:
8f:0d:d5:af:e6:ed:07:51:4f:0d:9b:72:c3:c2:53:
bc:35:f9:bd:21:28:c1:07:b8:76:b9:14:a8:d9:56:
3a:b8:31:c6:01:51:2a:c7:2a:f9:0e:27:20:e4:41:
00:e6:c3:3c:7a:59:1b:71:be:f4:84:b2:2e:07:74:
3f:b1:f4:1e:a0:4c:b0:1a:e4:3f:fb:5c:bd:a2:54:
ab:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9E:E2:65:7C:D2:4A:D1:6A:83:D6:68:02:FE:95:75:B3:31:11:74
X509v3 Authority Key Identifier:
keyid:0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:bf:0b:52:d4:dd:6b:57:9e:5e:a9:0f:34:89:73:e8:9f:4c:
f6:48:55:79:82:7d:46:3b:78:6d:c4:18:2e:98:67:57:04:fa:
52:88:43:c4:16:7c:f0:e8:b4:da:69:30:18:5b:72:a2:15:c2:
2f:b6:ee:84:dd:91:2f:34:e4:f8:dc:f0:85:33:40:6f:81:1a:
41:0b:ac:38:0d:8b:da:cd:56:85:41:6b:12:ec:d0:93:07:03:
f5:d5:d8:dc:1d:1e:6f:e0:25:59:5e:07:07:d3:c8:22:c3:08:
9e:65:a5:38:5e:0b:54:52:8e:29:ba:b7:5b:b3:a5:91:d2:f7:
87:07:57:8c:66:62:5e:a8:3b:e8:ca:0a:c2:b7:0d:e1:c0:16:
6d:8f:46:72:c2:55:c0:74:8d:14:a7:d5:9f:11:48:32:24:7f:
66:64:06:75:14:1e:06:f1:1c:a5:77:15:d4:29:12:e6:8c:47:
e9:f6:dc:5e:e4:20:eb:c4:9c:21:1f:f1:ab:90:f1:b4:10:7f:
09:cd:50:e8:d6:1d:44:b3:d7:25:24:17:13:1f:bd:e7:a6:a7:
4d:35:7c:6a:99:f3:e7:e6:94:15:2f:a5:3f:20:2e:3f:db:68:
00:35:12:ed:b3:bc:0c:05:ce:de:a0:85:7c:14:4a:ab:1e:98:
4a:8f:57:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDqrraI3BFs6CLgmSBysUOcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMjlhNDgyZGUwZDU2NzQ2YzMwNDUyNjlmOTkyMDUyMDRm
OTU0ODQwHhcNMjYwOTI5MDEwMTUzWhcNMjYwOTMwMDEwMTUzWjAzMTEwLwYDVQQD
EyhmZjllZTI2NTdjZDI0YWQxNmE4M2Q2NjgwMmZlOTU3NWIzMzExMTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9Ur5LxOlXlZLyHbHH/bJSh6ukGP
+8R4JiQkRv+Ig1JEmXmwkbNj7HIVJlidz+atTGoAzv3zsM5pGm5YBvq7gz1bAqvq
baWGn/9z7W+QBzvLBHDwJD2hV3FTGrEe6a0i3ouHhpbH9FtdH2hg6onsEvx++4ku
+EFNdGXwSQvI8wUqrp4NAcX1Ha39e3z9bzXjbK8HATofU0FAqzYPBQSRZLtB2+4V
xRsYFQ6geQgo3/Zgj62PDdWv5u0HUU8Nm3LDwlO8Nfm9ISjBB7h2uRSo2VY6uDHG
AVEqxyr5Dicg5EEA5sM8elkbcb70hLIuB3Q/sfQeoEywGuQ/+1y9olSr6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+e4mV80krRaoPWaAL+lXWzMRF0MB8GA1UdIwQY
MBaAFA4ppILeDVZ0bDBFJp+ZIFIE+VSEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGlta2d0NE5WblJzTUVVbW41a2dVZ1Q1VklRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNGEyNzMtOGI3NS00NzZjLWI5ZTMt
OGJiZDkzOTQwZWVmLzEvRGlta2d0NE5WblJzTUVVbW41a2dVZ1Q1VklRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNGEyNzMtOGI3NS00NzZjLWI5ZTMtOGJiZDkzOTQwZWVm
LzEvRGlta2d0NE5WblJzTUVVbW41a2dVZ1Q1VklRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl78LUtTd
a1eeXqkPNIlz6J9M9khVeYJ9Rjt4bcQYLphnVwT6UohDxBZ88Oi02mkwGFtyohXC
L7buhN2RLzTk+NzwhTNAb4EaQQusOA2L2s1WhUFrEuzQkwcD9dXY3B0eb+AlWV4H
B9PIIsMInmWlOF4LVFKOKbq3W7OlkdL3hwdXjGZiXqg76MoKwrcN4cAWbY9GcsJV
wHSNFKfVnxFIMiR/ZmQGdRQeBvEcpXcV1CkS5oxH6fbcXuQg68ScIR/xq5DxtBB/
Cc1Q6NYdRLPXJSQXEx+956anTTV8apnz5+aUFS+lPyAuP9toADUS7bO8DAXO3qCF
fBRKqx6YSo9X8Q==
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:49:52 2026 by rpki-client