Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
File: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft (raw, json)
Hash identifier: iPhUk8gpEH8elUpi6Yjk+ceeoGMAGrOh7tqfl9FCG9M=
Subject key identifier: A6:2E:04:0B:A6:F4:C4:4D:1A:C2:9E:0E:13:B9:E5:7A:FA:D4:72:41
Authority key identifier: 0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
Certificate issuer: /CN=0e29a482de0d56746c3045269f99205204f95484
Certificate serial: 019D9AE2FB164A628E88C8AC05E9F86D2E5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
Manifest number: 1468
Signing time: Fri 17 Apr 2026 10:00:59 +0000
Manifest this update: Fri 17 Apr 2026 10:00:59 +0000
Manifest next update: Sat 18 Apr 2026 10:00:59 +0000
Files and hashes: 1: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl (hash: B5OCXidVMJo/Z/cR+i8sgd9Ys5ZZzMz2OjZyGHfskZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:fb:16:4a:62:8e:88:c8:ac:05:e9:f8:6d:2e:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e29a482de0d56746c3045269f99205204f95484
Validity
Not Before: Apr 17 10:00:59 2026 GMT
Not After : Apr 18 10:00:59 2026 GMT
Subject: CN=a62e040ba6f4c44d1ac29e0e13b9e57afad47241
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:55:10:e3:08:db:05:a2:06:db:fd:20:a8:fe:
b1:b4:50:d1:09:0c:05:2c:a8:b7:82:c7:85:49:70:
84:b2:17:20:91:f2:62:b9:d0:88:31:58:89:2d:e2:
4c:20:79:ec:a3:23:37:09:fa:eb:4e:1f:4b:96:28:
4e:8a:43:a8:1c:6f:d5:73:fb:d7:cf:f0:cb:cd:a4:
fb:1b:b3:6c:14:ed:47:81:9a:3e:78:64:1b:b9:44:
ee:80:60:f9:a8:2e:15:6f:d3:b9:fb:b3:bb:80:f9:
f0:90:da:60:ae:1b:45:7d:63:79:51:12:75:d6:8f:
b9:9e:bd:2f:ae:7e:02:82:09:46:c0:59:ec:88:73:
bb:36:29:0b:da:9c:9d:37:36:84:88:67:87:a1:12:
cc:ee:83:b5:d3:bc:7b:e7:1c:bb:c8:47:d5:a4:35:
0d:3f:a7:19:a4:b8:be:c7:0c:eb:b4:7f:1a:7c:1d:
bc:65:29:ac:ae:e8:7f:d1:7b:a5:3e:0b:39:e0:66:
32:5f:5d:da:78:13:29:0d:75:e5:b7:b6:ac:ec:b9:
2b:37:87:c1:28:f7:db:9b:84:b4:91:5b:bb:dc:81:
ca:8b:89:3c:41:74:df:75:4e:fc:de:c6:49:20:ee:
28:09:ed:a4:9b:6e:50:18:cf:73:2c:48:be:3c:a0:
fa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:2E:04:0B:A6:F4:C4:4D:1A:C2:9E:0E:13:B9:E5:7A:FA:D4:72:41
X509v3 Authority Key Identifier:
keyid:0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:87:3e:76:8b:1b:bf:57:f2:c0:ee:0d:47:88:1a:b8:30:52:
6d:41:f3:50:88:25:8d:d3:44:5a:96:42:b3:dd:e1:21:98:9a:
26:9f:12:ba:b5:0f:cb:b1:ef:f5:82:94:01:65:94:89:1b:df:
1a:19:6a:95:92:95:77:0a:2d:57:88:28:72:7b:21:25:1b:9a:
be:41:67:f7:56:89:30:8c:d2:ab:47:09:49:1c:e1:dd:56:ac:
84:d9:2f:24:7d:a1:6c:40:9c:b3:e3:1b:a0:28:20:e0:80:4e:
80:72:1f:17:fd:cf:de:d8:d5:da:63:15:01:fe:b7:33:c8:20:
70:53:de:c2:5f:1c:d1:f5:b1:d5:76:02:36:22:bc:42:18:98:
ec:ea:49:75:03:15:8c:98:6e:07:b8:62:b4:31:c2:2d:a9:c4:
e2:72:1a:d6:60:2d:42:5b:9b:22:08:21:75:70:6a:4c:01:d6:
30:54:1b:87:19:83:b4:ca:0d:43:ce:61:64:1d:8b:c8:10:ee:
4b:92:56:21:e4:52:fc:bd:72:85:52:52:e6:36:28:82:bf:ae:
4f:33:4b:36:3f:e8:33:55:90:77:1d:69:7f:87:e6:5d:df:43:
0c:0b:5b:92:45:8d:9d:63:19:df:a0:47:8a:4b:4a:29:cb:e4:
fe:9a:ff:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:37:45 2026 by rpki-client