Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.mft
File: DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.mft (raw, json)
Hash identifier: 1nxxTYryNtSt6X7TirDiwNWr38cVW8m8/9MPflUYynA=
Subject key identifier: 11:EF:31:76:BB:FF:64:86:CE:3F:4A:38:D9:B3:5B:C3:93:9A:40:8A
Authority key identifier: 0C:A4:DC:9F:35:28:52:13:FB:2B:70:F1:F3:03:71:C1:63:2F:21:C4
Certificate issuer: /CN=0ca4dc9f35285213fb2b70f1f30371c1632f21c4
Certificate serial: 019F3A85B17DC1F56FC1A0C57E3E1D81A921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.mft
Manifest number: 13
Signing time: Tue 07 Jul 2026 03:01:07 +0000
Manifest this update: Tue 07 Jul 2026 03:01:07 +0000
Manifest next update: Wed 08 Jul 2026 03:01:07 +0000
Files and hashes: 1: DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.crl (hash: IdZhKaqYuyuT3Qcb2PnnIRe4ljvSUTtzayJ09QUC9/4=)
2: Pmyh4imTnw0NWXX_3yLDINvGWCk.roa (hash: QegoWgfiWcVE8E11dfbKes3Tm9kqwxOHdbl4ivPOgTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3a:85:b1:7d:c1:f5:6f:c1:a0:c5:7e:3e:1d:81:a9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4dc9f35285213fb2b70f1f30371c1632f21c4
Validity
Not Before: Jul 7 03:01:07 2026 GMT
Not After : Jul 8 03:01:07 2026 GMT
Subject: CN=11ef3176bbff6486ce3f4a38d9b35bc3939a408a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:db:dd:9a:4a:51:26:5a:e3:0d:6c:a5:9c:
aa:a9:fc:05:07:18:06:7b:85:e9:85:ef:82:cf:cf:
b3:60:cc:84:25:f3:ab:c0:ea:49:55:07:db:73:d8:
b7:0b:91:90:45:29:22:b7:88:24:0c:2d:f5:cd:eb:
d2:5e:30:58:26:90:fa:18:e0:bc:d6:90:9b:ba:37:
cd:5d:3b:a4:7a:f7:a7:e0:ad:11:66:f8:79:ed:06:
ec:d2:39:ce:44:bd:b8:ce:8f:b4:8c:94:ba:10:7c:
cd:48:37:04:c0:7c:05:e8:44:0c:c3:26:a4:ef:b5:
3b:94:b4:1d:eb:da:a7:e4:94:8d:7b:e4:e6:be:72:
2c:7d:44:3f:02:cd:4c:27:86:34:be:85:9c:e8:d5:
e2:3f:ef:7c:a8:b5:83:4f:d8:3f:c8:db:2a:f3:68:
ee:b6:82:40:63:25:06:8f:cd:6c:34:1a:92:0a:8d:
da:32:40:b1:78:8a:ed:d8:b4:23:9c:14:04:4b:4a:
9b:98:e1:9a:33:19:57:9b:11:64:b2:f3:9c:53:bf:
be:a9:f6:83:ca:90:af:40:e2:dc:9c:60:c8:b3:9b:
63:09:13:d4:62:bc:43:2a:76:71:38:99:85:11:c1:
0b:de:aa:93:c5:7a:e1:f5:8a:da:90:44:70:38:93:
86:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EF:31:76:BB:FF:64:86:CE:3F:4A:38:D9:B3:5B:C3:93:9A:40:8A
X509v3 Authority Key Identifier:
keyid:0C:A4:DC:9F:35:28:52:13:FB:2B:70:F1:F3:03:71:C1:63:2F:21:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:34:81:11:54:aa:ec:61:ae:4c:40:94:50:00:eb:72:a7:e6:
98:cb:68:9e:65:a1:49:fb:2e:7c:e8:8b:55:79:d3:0d:59:fb:
57:7e:ba:36:cc:3e:4e:86:71:c7:3d:81:2d:b9:88:3f:24:a3:
52:59:a7:5f:a9:4d:74:55:96:3b:ee:26:ea:1f:35:64:9c:b1:
2e:3c:30:16:e4:6a:69:fe:e8:e6:38:0f:55:f5:6a:be:1c:75:
90:e0:01:31:09:fc:db:16:97:0c:e5:75:a3:29:6b:e5:da:9a:
e4:63:7e:27:44:a9:c9:fe:cd:f0:df:30:82:42:b4:28:ba:35:
3a:9b:c5:fc:c1:cd:01:f4:ee:c9:0a:e1:de:a8:99:86:89:6d:
00:47:3a:0d:b1:bb:f2:6a:4a:3c:c1:a6:b0:ec:bf:96:a0:62:
16:1c:23:11:eb:da:28:38:c1:fa:a5:b1:c4:70:87:dd:fe:40:
3a:42:ff:5c:95:a7:8d:15:2d:e0:95:ff:56:42:78:ef:e5:b5:
bd:dc:7a:e6:ee:03:9b:e2:de:6d:b6:73:e0:24:d9:59:be:b3:
53:20:c1:44:31:10:ce:aa:9a:fa:77:58:5a:e8:a5:3c:bf:35:
ae:7a:fa:8b:34:aa:ea:32:f3:86:6b:8b:d0:08:54:fb:c3:e6:
00:a8:44:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 11:42:28 2026 by rpki-client