Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
File: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft (raw, json)
Hash identifier: 32IzqH/KTS3f0rPnngpfOuYifsHOYV4A+7vpscJw+uE=
Subject key identifier: 60:AF:36:76:01:93:E7:1F:6A:8E:43:54:BB:F5:00:1E:35:93:58:6E
Authority key identifier: 0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
Certificate issuer: /CN=0e29a482de0d56746c3045269f99205204f95484
Certificate serial: 019FAA1A183C1A948AEF8F0A15DBB9D80C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
Manifest number: 1579
Signing time: Tue 28 Jul 2026 19:01:04 +0000
Manifest this update: Tue 28 Jul 2026 19:01:04 +0000
Manifest next update: Wed 29 Jul 2026 19:01:04 +0000
Files and hashes: 1: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl (hash: jCAAPMjgugB0lHVKpP68ZMhpxiGYK5myMO3DQllv4gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:18:3c:1a:94:8a:ef:8f:0a:15:db:b9:d8:0c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e29a482de0d56746c3045269f99205204f95484
Validity
Not Before: Jul 28 19:01:04 2026 GMT
Not After : Jul 29 19:01:04 2026 GMT
Subject: CN=60af36760193e71f6a8e4354bbf5001e3593586e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:87:1f:5e:8f:c0:df:ad:8d:b6:a5:6a:e5:47:
02:29:ea:85:03:ab:81:7a:71:96:77:ce:b3:32:87:
f1:df:e5:11:d4:8f:66:46:2e:93:dc:f1:0e:78:43:
d5:b8:9d:15:99:d1:cd:c1:e5:ae:8f:13:ea:e0:12:
18:70:41:97:e4:a4:6d:2c:be:3a:26:ae:a3:25:ad:
b8:55:a5:b5:94:11:35:40:80:44:a6:63:49:2a:99:
20:ac:00:1e:4d:9e:7a:59:04:9f:19:b3:b3:2b:56:
60:d0:ed:06:9f:ac:7a:2c:8e:49:3f:59:39:04:65:
be:ec:cf:9a:ee:5f:67:13:1d:bc:41:b5:9f:76:27:
23:b0:f6:b7:f5:7e:fb:9c:9e:5e:0d:1f:0b:5d:d5:
60:12:b7:84:db:b5:8a:a9:54:63:b4:5c:4b:ff:1e:
88:1c:18:60:66:c3:58:8b:9e:b1:be:65:36:f7:a8:
5c:d8:46:a1:5b:50:a0:4f:9c:c1:81:cf:be:d2:8f:
f4:f7:33:42:ea:83:77:14:93:a6:9c:68:b7:7b:ec:
23:2d:f3:fe:03:37:e6:03:79:be:5d:be:ca:2d:84:
41:40:bd:e7:4d:33:09:d0:50:d3:c7:5d:09:d9:df:
6f:54:a9:9d:b8:ac:26:cf:06:05:1e:fc:0d:31:8f:
4f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:AF:36:76:01:93:E7:1F:6A:8E:43:54:BB:F5:00:1E:35:93:58:6E
X509v3 Authority Key Identifier:
keyid:0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c2:82:0d:76:c8:5e:b7:9f:5f:d8:d6:aa:22:81:05:38:ea:
53:13:33:f8:8e:40:8b:c1:16:2e:9c:91:40:5d:89:ea:8f:fa:
b6:40:54:51:cb:75:a4:25:ce:3d:93:35:38:ca:f9:32:79:96:
5f:55:d1:8c:0c:af:ae:a8:76:b8:65:f9:d8:79:42:56:5b:59:
6f:b8:89:cd:c0:68:c1:ec:1e:a7:f0:40:df:21:07:63:41:92:
56:ed:8f:91:97:8d:1f:35:b4:e8:52:72:28:bf:89:ba:21:45:
80:fa:10:02:c3:34:c1:b5:31:13:0d:fb:33:cd:5e:f8:02:63:
f8:d7:c9:c2:5a:dc:e8:1a:67:26:be:f4:2d:6e:82:72:0b:e1:
2b:f1:bc:48:28:cc:48:da:6d:c9:63:fc:12:fa:5a:60:1e:fa:
9c:59:5f:cd:72:02:a6:ff:6c:73:d0:e3:37:37:f1:c9:69:fa:
8c:71:18:48:4a:7d:cf:08:7b:b4:38:08:a6:b3:a6:1c:a6:51:
e3:67:79:d9:14:ac:9f:ac:e9:23:fd:2b:9b:67:0a:c8:9b:4e:
5f:20:94:b7:a2:a2:8f:82:9d:82:67:16:8e:72:5a:dd:cb:2c:
a5:ec:a7:1b:32:27:5d:0c:fd:8b:e4:63:ee:e2:8e:6d:ed:43:
15:15:12:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:01:46 2026 by rpki-client