Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
File: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft (raw, json)
Hash identifier: /XbsuY3TasnvMA1k6FY+/0fhbC0nKaafpoojwLVBPWA=
Subject key identifier: DD:58:F7:25:2D:F5:42:1F:84:21:C7:5B:19:12:40:A0:A2:CC:E7:6C
Authority key identifier: 0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
Certificate issuer: /CN=0e29a482de0d56746c3045269f99205204f95484
Certificate serial: 019EC06DF8699C5E8EF2E7F6C8B8CEEAB598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
Manifest number: 1500
Signing time: Sat 13 Jun 2026 10:01:32 +0000
Manifest this update: Sat 13 Jun 2026 10:01:32 +0000
Manifest next update: Sun 14 Jun 2026 10:01:32 +0000
Files and hashes: 1: Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl (hash: DuzZ7BmwrEI8XQ4J0ghBeSuPUS9/l/6TiPBgUALlc64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:f8:69:9c:5e:8e:f2:e7:f6:c8:b8:ce:ea:b5:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e29a482de0d56746c3045269f99205204f95484
Validity
Not Before: Jun 13 10:01:32 2026 GMT
Not After : Jun 14 10:01:32 2026 GMT
Subject: CN=dd58f7252df5421f8421c75b191240a0a2cce76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7a:7f:7b:4d:17:a8:35:d4:b6:f3:81:9a:0a:
7c:b7:4c:ca:05:e1:15:b6:05:ab:32:6c:2a:0c:6b:
04:6a:7e:de:51:03:c1:a2:45:33:3f:15:81:c8:6a:
4d:1e:f8:5d:93:d6:7c:cf:d8:2c:2f:5f:81:1a:74:
b5:0f:72:d1:72:4d:e3:26:be:a0:86:8e:5d:a6:8d:
bf:05:4d:2d:f0:05:3f:7f:e0:3e:53:7a:54:a5:9b:
9f:10:f9:77:d4:03:3b:b2:af:3e:6d:f9:25:99:3d:
e5:6d:21:a3:05:6a:e2:8d:2b:7c:1a:3d:bc:12:81:
d1:a1:6a:0f:d4:53:60:05:b7:f2:be:b4:93:e4:db:
43:bd:2d:b1:e7:eb:61:24:28:27:33:9c:f0:fd:00:
50:49:3a:2d:e3:3c:62:b0:86:17:a2:3e:ff:d4:0d:
c6:5e:6b:ce:0b:f4:fd:d2:4c:f8:b6:d0:9a:df:0f:
12:74:96:e5:83:c6:37:08:43:2e:d2:19:20:cc:45:
9f:05:78:5e:3b:ae:ec:2b:1f:61:64:66:77:36:ec:
53:4e:93:3c:53:e5:ce:ff:31:b6:76:fa:52:9e:10:
fb:13:4c:4a:67:95:89:29:d9:e3:96:0a:1f:e4:ed:
1e:eb:3d:8e:66:cd:29:32:0d:57:9f:99:d9:d5:dd:
08:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:58:F7:25:2D:F5:42:1F:84:21:C7:5B:19:12:40:A0:A2:CC:E7:6C
X509v3 Authority Key Identifier:
keyid:0E:29:A4:82:DE:0D:56:74:6C:30:45:26:9F:99:20:52:04:F9:54:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/14a273-8b75-476c-b9e3-8bbd93940eef/1/Dimkgt4NVnRsMEUmn5kgUgT5VIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:45:e9:44:b0:b9:07:c1:4c:55:ea:20:4e:48:4f:d0:3c:83:
16:2e:3e:4e:f8:3e:32:27:46:bf:b4:8e:3a:3b:5a:b4:a6:25:
97:71:8d:f2:04:9d:14:fd:ce:96:51:d3:5a:16:41:b9:9a:9d:
f1:e8:94:52:18:5a:76:38:0c:6a:e6:18:ca:fc:6d:61:40:39:
3d:53:bf:68:b5:2d:17:06:53:a0:15:cb:b7:85:8a:59:4a:02:
0c:15:d3:ef:42:91:a4:40:a0:e4:5f:95:a9:b9:a9:4b:38:4f:
6e:56:8b:b0:02:d8:59:c8:35:e2:ff:c6:37:22:72:6b:d9:2b:
7f:9c:bd:99:f1:c4:a5:d3:2d:ff:b2:85:b5:b7:21:55:9f:1e:
f5:d5:b0:17:5f:7d:93:dc:51:f9:aa:53:b9:6b:cf:61:08:b9:
08:0b:b9:3a:26:51:6e:e4:8a:4b:38:c8:ef:5b:c0:f1:fe:22:
c3:1a:81:35:62:dc:c8:23:83:00:09:32:a1:00:cf:02:11:b3:
6a:15:09:1e:e0:23:22:80:2a:cd:e7:6e:57:51:af:37:a1:96:
64:42:5d:00:33:a0:8f:11:96:a5:76:48:7a:cd:a4:4f:ea:c9:
5b:e5:8e:df:c8:fb:34:85:21:30:fa:12:38:6e:57:2f:07:2b:
2c:7e:81:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7AbfhpnF6O8uf2yLjO6rWYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlMjlhNDgyZGUwZDU2NzQ2YzMwNDUyNjlmOTkyMDUyMDRm
OTU0ODQwHhcNMjYwNjEzMTAwMTMyWhcNMjYwNjE0MTAwMTMyWjAzMTEwLwYDVQQD
EyhkZDU4ZjcyNTJkZjU0MjFmODQyMWM3NWIxOTEyNDBhMGEyY2NlNzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHp/e00XqDXUtvOBmgp8t0zKBeEV
tgWrMmwqDGsEan7eUQPBokUzPxWByGpNHvhdk9Z8z9gsL1+BGnS1D3LRck3jJr6g
ho5dpo2/BU0t8AU/f+A+U3pUpZufEPl31AM7sq8+bfklmT3lbSGjBWrijSt8Gj28
EoHRoWoP1FNgBbfyvrST5NtDvS2x5+thJCgnM5zw/QBQSTot4zxisIYXoj7/1A3G
XmvOC/T90kz4ttCa3w8SdJblg8Y3CEMu0hkgzEWfBXheO67sKx9hZGZ3NuxTTpM8
U+XO/zG2dvpSnhD7E0xKZ5WJKdnjlgof5O0e6z2OZs0pMg1Xn5nZ1d0IYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1Y9yUt9UIfhCHHWxkSQKCizOdsMB8GA1UdIwQY
MBaAFA4ppILeDVZ0bDBFJp+ZIFIE+VSEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGlta2d0NE5WblJzTUVVbW41a2dVZ1Q1VklRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8xNGEyNzMtOGI3NS00NzZjLWI5ZTMt
OGJiZDkzOTQwZWVmLzEvRGlta2d0NE5WblJzTUVVbW41a2dVZ1Q1VklRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8xNGEyNzMtOGI3NS00NzZjLWI5ZTMtOGJiZDkzOTQwZWVm
LzEvRGlta2d0NE5WblJzTUVVbW41a2dVZ1Q1VklRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABkXpRLC5
B8FMVeogTkhP0DyDFi4+Tvg+MidGv7SOOjtatKYll3GN8gSdFP3OllHTWhZBuZqd
8eiUUhhadjgMauYYyvxtYUA5PVO/aLUtFwZToBXLt4WKWUoCDBXT70KRpECg5F+V
qbmpSzhPblaLsALYWcg14v/GNyJya9krf5y9mfHEpdMt/7KFtbchVZ8e9dWwF199
k9xR+apTuWvPYQi5CAu5OiZRbuSKSzjI71vA8f4iwxqBNWLcyCODAAkyoQDPAhGz
ahUJHuAjIoAqzeduV1GvN6GWZEJdADOgjxGWpXZIes2kT+rJW+WO38j7NIUhMPoS
OG5XLwcrLH6BeA==
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:40:07 2026 by rpki-client