Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
File: dim08aCQrAe-F2LewzjmoP412X4.mft (raw, json)
Hash identifier: uSNQodlPLl7es5NoHk1c7hHG1fA6p0n4CykAIMYfWtg=
Subject key identifier: 1E:B7:AD:E0:B9:A9:43:1C:5F:3F:1A:CD:43:31:CB:9E:E9:13:BC:35
Authority key identifier: 76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
Certificate issuer: /CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Certificate serial: 019CAA8F9EB3E5CFA25A39EB95743D2F9052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
Manifest number: 0819
Signing time: Sun 01 Mar 2026 18:01:04 +0000
Manifest this update: Sun 01 Mar 2026 18:01:04 +0000
Manifest next update: Mon 02 Mar 2026 18:01:04 +0000
Files and hashes: 1: dbNHTd-1z8qgFUsw14HxSaBJdjY.roa (hash: u/8d5zfiDeQsTVL+VutwftOnhD4pJpGB5hjJcsmietI=)
2: dim08aCQrAe-F2LewzjmoP412X4.crl (hash: bxJFd5NOGJRdtVD/tMY1kvScglUiAfvE4gu4J5Oajb8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:9e:b3:e5:cf:a2:5a:39:eb:95:74:3d:2f:90:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7629b4f1a090ac07be1762dec338e6a0fe35d97e
Validity
Not Before: Mar 1 18:01:04 2026 GMT
Not After : Mar 2 18:01:04 2026 GMT
Subject: CN=1eb7ade0b9a9431c5f3f1acd4331cb9ee913bc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:b4:eb:f1:96:9d:cd:76:f0:e4:c8:15:b5:03:
cd:92:d0:c3:0c:ad:6e:df:0c:68:0a:ce:52:dd:f4:
de:c5:1b:88:41:b5:dc:b5:55:ad:28:cf:be:81:e4:
2a:3f:13:5f:e4:cb:ba:68:08:7a:c6:54:17:ac:1e:
30:a5:ba:70:9a:ff:db:c0:d4:16:81:db:13:36:87:
be:cd:d1:f9:27:32:69:b6:4b:ad:9a:63:1a:b5:58:
75:e2:b4:3c:5c:08:be:6c:2b:47:27:4e:51:fd:ec:
3a:8c:5a:3c:20:fd:01:da:c4:8c:47:44:81:cc:79:
a4:d1:cf:77:7b:70:d0:1c:63:44:05:0c:14:5b:45:
2f:92:33:07:df:48:58:0d:a2:85:fa:b1:e3:b5:e5:
ce:e2:86:6a:ce:37:ca:e2:17:53:97:25:a3:91:ea:
ab:a6:39:39:40:a9:df:e9:35:4d:e7:1e:7c:33:60:
6d:f1:34:d1:f1:ca:40:2c:c3:99:27:f1:7a:02:ca:
43:8b:8d:c6:76:1b:32:4a:0d:35:7a:72:28:76:30:
cf:97:f2:ba:0f:2d:c4:b6:86:6c:c7:82:d4:22:57:
67:c5:d0:b3:73:e3:e1:cf:99:a3:43:c8:5e:2d:82:
68:53:eb:bb:d5:68:05:77:11:f5:53:e5:d7:de:c2:
f5:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B7:AD:E0:B9:A9:43:1C:5F:3F:1A:CD:43:31:CB:9E:E9:13:BC:35
X509v3 Authority Key Identifier:
keyid:76:29:B4:F1:A0:90:AC:07:BE:17:62:DE:C3:38:E6:A0:FE:35:D9:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dim08aCQrAe-F2LewzjmoP412X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/a1ef63-16a7-4a94-b114-5f175b5ae038/1/dim08aCQrAe-F2LewzjmoP412X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0e:7c:5e:f8:02:db:6b:ac:70:8c:04:9b:35:7d:ca:84:10:
13:50:c8:fd:e5:9d:b3:32:51:f0:89:2b:5e:74:d7:31:86:68:
47:49:17:34:cb:f2:a6:5e:fb:7f:66:3b:f4:41:f3:05:36:f6:
a9:42:4a:75:16:54:1f:09:88:d7:8e:53:30:4e:e3:23:4a:17:
51:a0:31:56:e4:4b:e5:52:f2:76:b8:a8:ea:f5:ff:76:25:81:
a6:43:dc:03:ed:6c:de:44:7f:25:be:19:3a:db:31:68:18:b3:
93:6a:e6:4f:5f:81:19:d1:aa:5a:c5:f0:76:c2:3b:e5:f9:62:
14:2c:14:b7:79:70:99:ec:9d:df:13:be:0c:32:96:4c:8f:d9:
40:0d:be:94:fe:38:33:7c:43:6c:c8:15:71:34:3c:35:b4:df:
77:f7:4d:3d:f5:d5:b1:c8:ac:ed:71:2a:be:c5:0e:ee:f0:76:
e3:f2:65:5d:06:5d:9a:41:23:4c:15:d7:cc:0f:9e:ef:2a:5f:
70:ec:d2:95:b9:39:2a:f1:6b:ea:e7:be:fb:a9:84:e5:1c:6f:
64:f7:c6:be:bd:9d:69:0d:80:1e:ab:dd:a9:e5:d7:d0:e9:33:
ed:5c:e3:ff:e2:f6:42:0d:ad:09:2e:c3:57:ca:bb:61:94:6f:
d5:16:38:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:16 2026 by rpki-client