Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
File: DIquGJxjzrVkPLCAMnvKo7Dvilk.mft (raw, json)
Hash identifier: vod2yH2p+C46imXYoD19Y4XNNQDLPS8/QlW0pW+lyxQ=
Subject key identifier: 65:9D:A5:45:0E:73:65:1A:72:64:38:70:8B:39:D0:2C:87:32:90:14
Authority key identifier: 0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
Certificate issuer: /CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Certificate serial: 01A1DF1509F10D0FC2FECD02E54B299B5CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
Manifest number: 1AF9
Signing time: Sun 15 Nov 2026 12:01:00 +0000
Manifest this update: Sun 15 Nov 2026 12:01:00 +0000
Manifest next update: Mon 16 Nov 2026 12:01:00 +0000
Files and hashes: 1: DIquGJxjzrVkPLCAMnvKo7Dvilk.crl (hash: jMZ4M4vmy9KZafptyK2kF6yxNSR6zDUBdlW0XeD+ObI=)
2: uTNM_Qx3Kksos1PgtvUNZevyWHs.roa (hash: 5x2Iwvw5H8NZducy/95N1nopK5CCb4aO6OaFpQG4yP0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:15:09:f1:0d:0f:c2:fe:cd:02:e5:4b:29:9b:5c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c8aae189c63ceb5643cb080327bcaa3b0ef8a59
Validity
Not Before: Nov 15 12:01:00 2026 GMT
Not After : Nov 16 12:01:00 2026 GMT
Subject: CN=659da5450e73651a726438708b39d02c87329014
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:2d:7d:01:d7:b4:32:b4:f2:b6:52:ba:ae:
c3:64:6e:3f:fe:46:aa:1c:fa:ed:dd:f6:c3:6d:de:
4f:a3:11:24:54:dd:a4:3a:14:58:87:f4:c3:5c:d0:
53:e8:99:03:89:d4:33:b4:2d:2d:95:1a:94:d2:2a:
0a:4d:be:ba:eb:86:c6:ab:1a:a8:86:4b:a5:59:75:
a0:e0:1a:92:65:15:e7:7e:4c:8c:fd:ab:e1:42:e5:
ef:a5:a4:42:fe:1e:83:dc:8b:97:80:93:dd:7e:85:
b4:b7:57:03:92:0e:aa:30:32:e8:af:a3:20:14:6b:
e2:42:1c:5f:bd:95:cc:43:a3:8a:fb:bd:31:4c:c8:
8c:24:31:43:34:fa:65:cb:31:70:bb:af:24:e5:36:
f1:f9:6f:16:49:89:0b:91:b4:d3:57:9e:04:af:fa:
5e:28:81:5f:c7:f1:18:b3:84:36:9d:11:d6:ea:10:
26:9a:bd:8e:f7:8a:3a:e2:55:fc:0a:fb:f1:b6:fb:
7f:13:ea:63:fb:7f:9f:39:ff:03:94:8a:4b:5e:98:
a3:cc:49:76:ca:4b:aa:59:c0:af:6d:9a:58:45:20:
5e:fe:db:de:49:f5:77:ee:d4:30:ea:9d:0d:8f:c9:
7f:f8:4a:ab:2d:10:c9:8a:c3:2c:7c:d2:db:9a:d9:
4c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9D:A5:45:0E:73:65:1A:72:64:38:70:8B:39:D0:2C:87:32:90:14
X509v3 Authority Key Identifier:
keyid:0C:8A:AE:18:9C:63:CE:B5:64:3C:B0:80:32:7B:CA:A3:B0:EF:8A:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DIquGJxjzrVkPLCAMnvKo7Dvilk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/5015f6-0bd0-49f9-b854-b6ba86cf31f9/1/DIquGJxjzrVkPLCAMnvKo7Dvilk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d1:d0:6e:fb:bb:cd:7e:66:64:a9:ba:4f:da:49:00:cc:f0:
d6:27:ff:c8:4c:65:5a:63:9d:45:00:6b:c9:10:e7:fb:3f:4c:
33:d2:f9:f5:4e:9e:55:ea:80:df:a1:82:81:8f:d1:27:bf:be:
05:25:62:e7:de:d1:90:ea:66:90:6a:6b:41:14:78:c9:f0:b9:
99:90:f4:35:7b:a2:b3:a9:2f:d2:85:e9:8c:97:5c:b2:35:af:
64:29:56:9e:24:c5:d5:ce:d5:17:d2:06:b4:58:6d:8e:58:1b:
70:a6:bc:7a:ab:b5:d0:10:a3:28:01:e1:c1:01:c6:fe:04:2a:
7c:6c:49:68:72:8c:ba:19:11:a9:60:af:4e:40:ec:1a:a3:44:
ea:a8:23:4d:01:88:db:7e:b2:d7:cc:73:a2:a5:99:eb:0c:59:
95:56:08:57:e6:89:f0:57:c2:90:b7:ee:e1:1b:67:31:39:fa:
a2:18:a2:6e:c5:7e:84:17:d6:39:06:73:ca:0b:29:87:88:34:
f3:aa:ac:27:ac:96:2f:a8:6b:c0:ad:ae:30:4f:fd:7c:05:24:
50:5b:be:2e:b5:7c:d7:ae:da:f0:8b:ad:72:72:f8:e7:6a:70:
3b:89:4c:24:0d:de:34:8a:04:fb:89:ee:0a:fa:b7:81:2e:4e:
a1:7a:d9:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 20:34:08 2026 by rpki-client