Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
File: dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json)
Hash identifier: TC1h5cNWB5RmKYkaUSto6Q+uTdlrrgWR7mhpoPfB8qs=
Subject key identifier: A8:B0:71:DD:75:01:E2:8C:9E:46:4B:57:EE:52:69:09:59:C9:52:40
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Certificate issuer: /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial: 019D98190A2C707AFA2D36A246296669DC6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
Manifest number: 0894
Signing time: Thu 16 Apr 2026 21:01:10 +0000
Manifest this update: Thu 16 Apr 2026 21:01:10 +0000
Manifest next update: Fri 17 Apr 2026 21:01:10 +0000
Files and hashes: 1: dbNHTd-1z8qgFUsw14HxSaBJdjY.roa (hash: u/8d5zfiDeQsTVL+VutwftOnhD4pJpGB5hjJcsmietI=)
2: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: H2RJhSG5y+/e30JeZXi33eE6prnkZtSnxfMecgxh3fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:19:0a:2c:70:7a:fa:2d:36:a2:46:29:66:69:dc:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Validity
Not Before: Apr 16 21:01:10 2026 GMT
Not After : Apr 17 21:01:10 2026 GMT
Subject: CN=a8b071dd7501e28c9e464b57ee52690959c95240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:85:94:c3:15:16:e2:26:c8:66:8c:44:09:7b:
b8:68:ab:4e:ed:7a:56:d7:66:ca:d6:9f:72:3a:47:
e4:be:65:40:cf:7b:70:e3:b4:5f:53:75:f0:f0:9e:
12:58:bf:b8:15:d7:e5:60:91:67:79:a6:51:e4:00:
91:74:61:f7:6f:22:1f:2a:d8:e4:6b:35:e0:6e:dd:
ec:88:ff:f5:d0:b5:02:a5:96:72:cf:2c:13:a7:b9:
dd:d5:12:d5:64:72:c8:84:26:07:0d:40:4b:9e:b7:
35:71:38:88:e9:c4:f9:e9:4c:5c:d4:e7:e0:0c:8f:
45:33:1f:c8:89:c2:bc:8d:5a:34:91:8a:f3:d3:bc:
ea:cd:89:e0:dd:11:99:8a:e1:28:cc:3b:80:91:d4:
4f:f4:64:1c:25:34:23:b3:e8:c3:3c:91:08:83:df:
3f:5f:fe:c7:57:93:b2:eb:3a:e3:22:db:90:67:01:
db:ba:ca:b2:af:9b:79:44:6e:41:d6:96:cd:24:37:
46:7f:0c:73:52:fa:8a:49:37:95:75:31:3e:ed:49:
d6:4e:53:1b:1c:e1:27:14:92:99:00:77:f0:36:b8:
b6:90:1a:06:7c:25:73:0b:ce:7e:8e:ea:74:6c:57:
16:90:a0:c6:1b:4d:51:96:0d:d1:e3:20:fc:09:93:
5e:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B0:71:DD:75:01:E2:8C:9E:46:4B:57:EE:52:69:09:59:C9:52:40
X509v3 Authority Key Identifier:
keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:5d:2b:4d:65:e2:c2:12:f3:27:d5:1a:9e:47:da:13:5e:d7:
57:9e:33:48:5a:26:1d:4e:1e:0a:47:c2:70:d1:46:4a:2d:b8:
72:5a:04:35:2a:ef:9a:39:2e:22:41:3d:69:24:6b:91:a4:9f:
6b:7f:8c:be:22:77:b2:a9:06:86:7d:44:80:d7:5f:d4:f3:a1:
77:12:1f:1d:06:e7:a8:dc:ab:b4:ad:62:63:f5:30:2a:66:15:
f4:00:c1:6a:cd:d3:d0:0f:cd:ef:7a:03:54:55:0e:b5:eb:cb:
26:d9:a4:e0:23:40:79:34:a0:0b:f8:21:aa:c8:34:f7:e5:a2:
94:dd:88:64:4f:04:c2:2f:cc:0a:d4:5a:9c:80:4d:5d:39:c0:
ef:a8:d5:51:17:93:c9:6e:58:77:4f:4a:cd:be:04:cc:05:2e:
9c:ae:2a:94:00:85:fc:84:40:89:ee:7c:80:cd:d4:76:42:b3:
94:3d:04:2b:53:39:4c:a8:d6:0f:ac:52:27:fa:1b:fb:90:07:
3f:2a:85:6e:21:30:35:de:70:37:07:12:8e:70:de:46:e2:44:
5a:6d:b5:ce:83:09:fe:93:c9:b4:98:5d:83:02:d8:a6:82:b8:
25:ca:eb:78:a9:38:d4:f1:40:96:b4:6a:b8:19:d2:22:1f:04:
d3:e7:0d:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGQoscHr6LTaiRilmadxrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MjliNGYxYTA5MGFjMDdiZTE3NjJkZWMzMzhlNmEwZmUz
NWQ5N2UwHhcNMjYwNDE2MjEwMTEwWhcNMjYwNDE3MjEwMTEwWjAzMTEwLwYDVQQD
EyhhOGIwNzFkZDc1MDFlMjhjOWU0NjRiNTdlZTUyNjkwOTU5Yzk1MjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYWUwxUW4ibIZoxECXu4aKtO7XpW
12bK1p9yOkfkvmVAz3tw47RfU3Xw8J4SWL+4FdflYJFneaZR5ACRdGH3byIfKtjk
azXgbt3siP/10LUCpZZyzywTp7nd1RLVZHLIhCYHDUBLnrc1cTiI6cT56Uxc1Ofg
DI9FMx/IicK8jVo0kYrz07zqzYng3RGZiuEozDuAkdRP9GQcJTQjs+jDPJEIg98/
X/7HV5Oy6zrjItuQZwHbusqyr5t5RG5B1pbNJDdGfwxzUvqKSTeVdTE+7UnWTlMb
HOEnFJKZAHfwNri2kBoGfCVzC85+jup0bFcWkKDGG01Rlg3R4yD8CZNeSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiwcd11AeKMnkZLV+5SaQlZyVJAMB8GA1UdIwQY
MBaAFHYptPGgkKwHvhdi3sM45qD+Ndl+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQt
NWYxNzViNWFlMDM4LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS9hMWVmNjMtMTZhNy00YTk0LWIxMTQtNWYxNzViNWFlMDM4
LzEvZGltMDhhQ1FyQWUtRjJMZXd6am1vUDQxMlg0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV10rTWXi
whLzJ9UankfaE17XV54zSFomHU4eCkfCcNFGSi24cloENSrvmjkuIkE9aSRrkaSf
a3+MviJ3sqkGhn1EgNdf1POhdxIfHQbnqNyrtK1iY/UwKmYV9ADBas3T0A/N73oD
VFUOtevLJtmk4CNAeTSgC/ghqsg09+WilN2IZE8Ewi/MCtRanIBNXTnA76jVUReT
yW5Yd09Kzb4EzAUunK4qlACF/IRAie58gM3UdkKzlD0EK1M5TKjWD6xSJ/ob+5AH
PyqFbiEwNd5wNwcSjnDeRuJEWm21zoMJ/pPJtJhdgwLYpoK4JcrreKk41PFAlrRq
uBnSIh8E0+cNsA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:43:39 2026 by rpki-client