Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
File: DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft (raw, json)
Hash identifier: YgLo3RIYR0+nXuK2MmBLJNUew21E8RAbtz90JqIiDd0=
Subject key identifier: 72:4C:02:85:5E:51:95:38:CD:6B:08:3E:C3:68:7E:28:B3:A8:EB:EE
Authority key identifier: 0E:42:C2:E7:FB:02:1B:11:1A:71:9F:ED:A9:3C:61:E5:C3:53:7F:A7
Certificate issuer: /CN=0e42c2e7fb021b111a719feda93c61e5c3537fa7
Certificate serial: 019FA25FF095BC511FEBB06E98E47E58A2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
Manifest number: 016C
Signing time: Mon 27 Jul 2026 07:00:24 +0000
Manifest this update: Mon 27 Jul 2026 07:00:24 +0000
Manifest next update: Tue 28 Jul 2026 07:00:24 +0000
Files and hashes: 1: DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl (hash: u0A/tKxlru3hspfRHQ8oKQDDNiM3vsggRqizLduuHks=)
2: u3zxwv8aiDPFhl4Oxz0_bf9g92U.roa (hash: wBX3vONdNDvp84LOZvpcknzsgcTIkj6k0n194mkJDS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:5f:f0:95:bc:51:1f:eb:b0:6e:98:e4:7e:58:a2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e42c2e7fb021b111a719feda93c61e5c3537fa7
Validity
Not Before: Jul 27 07:00:24 2026 GMT
Not After : Jul 28 07:00:24 2026 GMT
Subject: CN=724c02855e519538cd6b083ec3687e28b3a8ebee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:0a:26:3e:dd:b0:34:c8:4e:63:2a:40:12:
ea:bb:69:54:0e:93:dc:66:d7:4f:f3:1b:64:03:1c:
e5:b4:c0:67:68:81:41:d4:02:9a:a7:55:6b:6a:c3:
8a:cb:4d:85:46:0a:f8:43:c4:be:03:83:c0:7e:9d:
2d:63:73:78:0f:fd:70:ce:88:a5:e0:14:75:28:ea:
63:01:73:95:ba:cb:87:19:41:72:5f:a0:5e:e7:9b:
4e:55:3f:fb:fb:21:ae:10:68:fb:ac:4b:a6:71:a7:
d8:85:e1:fd:af:0d:c6:ec:87:2a:e8:55:66:42:fb:
4c:f1:84:05:f8:69:f1:c7:61:da:61:f1:f6:c7:f3:
81:4e:3c:b0:83:f7:d2:01:7c:78:1d:dd:f7:26:3e:
72:d9:37:24:f5:94:95:22:46:d7:77:a7:c9:cf:8c:
43:7e:ac:76:75:79:29:9d:8d:65:03:16:23:62:2d:
f0:86:8f:de:2f:02:c9:96:97:a4:fc:82:4f:5a:9d:
4f:09:c8:89:6f:8e:87:da:bc:7c:29:1b:fa:98:ad:
41:cb:16:89:e9:5f:27:92:ec:92:2c:fb:79:d5:da:
78:41:c1:8c:f3:8c:d6:04:d6:b9:32:bb:ee:df:1b:
19:26:e7:40:d0:7a:52:68:60:68:14:7e:49:1f:a7:
9d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:4C:02:85:5E:51:95:38:CD:6B:08:3E:C3:68:7E:28:B3:A8:EB:EE
X509v3 Authority Key Identifier:
keyid:0E:42:C2:E7:FB:02:1B:11:1A:71:9F:ED:A9:3C:61:E5:C3:53:7F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:f5:91:ea:38:30:db:9c:13:02:97:62:8b:b3:2b:36:db:83:
0b:31:96:36:9e:88:d8:c6:95:1c:2e:85:68:07:a3:04:16:0e:
30:c8:34:a7:b9:64:44:b0:1e:19:00:4d:57:e7:d6:0d:09:6d:
07:90:af:56:84:c4:ac:8b:92:08:cc:96:e7:8e:f9:1f:2d:80:
8f:7a:61:b1:e4:f9:98:82:9d:d1:b0:e6:65:71:85:1a:85:80:
04:0a:d4:10:6f:c8:53:9d:7d:b8:e0:b3:f6:de:56:67:62:4b:
d0:14:68:f6:f5:84:7b:03:dd:2b:c8:c5:27:a0:3f:48:40:08:
ba:91:74:a1:62:a2:15:cf:88:a8:f0:89:e6:e8:6e:39:a2:b6:
26:98:50:1f:f0:aa:06:e6:dc:34:c2:7b:eb:4d:97:f2:92:cc:
43:0f:ee:07:80:e6:98:da:56:4d:ae:27:45:18:46:92:60:51:
57:1e:9a:a2:ba:43:f7:fa:f9:f6:1c:e6:1f:71:89:ee:f3:7b:
0c:53:a0:46:45:ca:62:da:13:36:7f:6d:c6:f1:b7:76:0c:46:
9d:80:28:56:3a:9b:f6:e5:26:8b:49:56:84:c0:cf:f6:1d:2f:
58:44:0c:96:0f:f4:fc:2a:76:64:5e:b2:e4:a1:aa:43:bf:6e:
aa:1f:66:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+iX/CVvFEf67BumOR+WKLbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDJjMmU3ZmIwMjFiMTExYTcxOWZlZGE5M2M2MWU1YzM1
MzdmYTcwHhcNMjYwNzI3MDcwMDI0WhcNMjYwNzI4MDcwMDI0WjAzMTEwLwYDVQQD
Eyg3MjRjMDI4NTVlNTE5NTM4Y2Q2YjA4M2VjMzY4N2UyOGIzYThlYmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtokKJj7dsDTITmMqQBLqu2lUDpPc
ZtdP8xtkAxzltMBnaIFB1AKap1VrasOKy02FRgr4Q8S+A4PAfp0tY3N4D/1wzoil
4BR1KOpjAXOVusuHGUFyX6Be55tOVT/7+yGuEGj7rEumcafYheH9rw3G7Icq6FVm
QvtM8YQF+Gnxx2HaYfH2x/OBTjywg/fSAXx4Hd33Jj5y2Tck9ZSVIkbXd6fJz4xD
fqx2dXkpnY1lAxYjYi3who/eLwLJlpek/IJPWp1PCciJb46H2rx8KRv6mK1ByxaJ
6V8nkuySLPt51dp4QcGM84zWBNa5Mrvu3xsZJudA0HpSaGBoFH5JH6edqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHJMAoVeUZU4zWsIPsNofiizqOvuMB8GA1UdIwQY
MBaAFA5Cwuf7AhsRGnGf7ak8YeXDU3+nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtMQzVfc0NHeEVhY1pfdHFUeGg1Y05UZjZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xNDMzN2MtMTc0ZS00ZTBhLTg5M2Et
Yjk4OThmNGVmNzdlLzEvRGtMQzVfc0NHeEVhY1pfdHFUeGg1Y05UZjZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8xNDMzN2MtMTc0ZS00ZTBhLTg5M2EtYjk4OThmNGVmNzdl
LzEvRGtMQzVfc0NHeEVhY1pfdHFUeGg1Y05UZjZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp/WR6jgw
25wTApdii7MrNtuDCzGWNp6I2MaVHC6FaAejBBYOMMg0p7lkRLAeGQBNV+fWDQlt
B5CvVoTErIuSCMyW5475Hy2Aj3phseT5mIKd0bDmZXGFGoWABArUEG/IU519uOCz
9t5WZ2JL0BRo9vWEewPdK8jFJ6A/SEAIupF0oWKiFc+IqPCJ5uhuOaK2JphQH/Cq
BubcNMJ7602X8pLMQw/uB4DmmNpWTa4nRRhGkmBRVx6aorpD9/r59hzmH3GJ7vN7
DFOgRkXKYtoTNn9txvG3dgxGnYAoVjqb9uUmi0lWhMDP9h0vWEQMlg/0/Cp2ZF6y
5KGqQ79uqh9mCg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 13:58:22 2026 by rpki-client