Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
File: DkGjlotidBs200i-DSyRxdSxM6I.mft (raw, json)
Hash identifier: W7QrB8hsTPm2P77UZ60nq6MEQU7QQ7e/fQRsJs0NRew=
Subject key identifier: F0:B2:4B:8D:D4:1D:93:AA:8A:B2:74:F3:F5:CC:12:11:78:39:92:54
Authority key identifier: 0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
Certificate issuer: /CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Certificate serial: 01A13ECB39FA03367D6B2617FC93C0A1F989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 09:01:08 +0000
Manifest this update: Thu 15 Oct 2026 09:01:08 +0000
Manifest next update: Fri 16 Oct 2026 09:01:08 +0000
Files and hashes: 1: 8zauiXBaFMH5VLxzsSvMEUumaxQ.roa (hash: sJvy2vx8n7/hTOLyUNRFHLLiMRYWbPfkI+7/KsQidiw=)
2: DkGjlotidBs200i-DSyRxdSxM6I.crl (hash: Z3CuI8a3eHyE8PQsf0gGhZdq6suGeKe3YCmgc2NGQoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 08:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:cb:39:fa:03:36:7d:6b:26:17:fc:93:c0:a1:f9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Validity
Not Before: Oct 15 09:01:08 2026 GMT
Not After : Oct 16 09:01:08 2026 GMT
Subject: CN=f0b24b8dd41d93aa8ab274f3f5cc121178399254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:a6:cf:46:50:70:01:0f:d3:fb:db:f8:e9:6e:
42:45:1d:69:5c:38:9f:ea:81:41:f0:af:ea:cb:c1:
f1:e8:ee:f9:cc:28:22:65:47:5b:03:2a:36:43:05:
d5:31:4b:f6:5b:48:01:00:43:75:28:76:cd:cf:ef:
db:48:52:c4:50:de:ce:54:c1:50:4d:7c:f7:c4:e7:
03:4a:86:da:2f:3f:46:f5:25:54:d3:99:41:da:fa:
08:62:d9:bb:6b:3a:f8:55:ee:ac:39:ce:09:cf:9e:
5f:17:2e:a4:d7:b3:9c:72:7f:28:84:09:56:a1:8b:
ed:04:e6:c6:cc:d1:4a:5c:30:bf:b3:b7:e7:89:6b:
04:bb:6b:64:2a:55:25:6e:cc:6e:21:67:46:7a:41:
20:86:da:6f:e2:a8:ba:d7:8c:65:88:48:9c:5a:5a:
7b:94:3f:16:3e:c5:10:ec:70:1f:19:1e:0a:31:f0:
e7:b6:90:85:57:ef:7e:98:a8:48:9d:3f:d4:dd:8e:
67:9a:fc:28:fc:5b:c8:8b:2b:f7:6e:58:1f:de:ce:
d1:d7:e6:61:18:02:cb:02:11:88:0b:20:dd:7b:3c:
79:a3:12:09:a8:82:dd:01:32:17:78:ff:14:0f:cf:
52:93:f3:ac:72:4a:93:69:ab:6e:24:fe:f0:b1:43:
1f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B2:4B:8D:D4:1D:93:AA:8A:B2:74:F3:F5:CC:12:11:78:39:92:54
X509v3 Authority Key Identifier:
keyid:0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:69:d4:8f:be:91:04:d5:7a:88:47:55:e0:1b:d3:26:75:12:
51:ef:9e:53:0b:82:27:a1:0c:70:11:db:e7:41:b6:e4:6e:41:
43:26:6c:bf:30:b3:be:e8:f6:aa:5c:0a:80:5b:31:bb:f8:4e:
15:67:f3:57:dc:66:04:52:27:d7:fc:4f:f9:ac:38:60:d5:3e:
79:eb:99:65:8d:5f:12:28:fa:c2:4a:04:bf:d5:28:fc:53:67:
94:1b:16:b3:10:42:d8:49:25:54:bd:cc:66:17:70:2a:0f:37:
0e:66:80:0e:a1:2a:dd:0f:9e:79:d5:7b:ce:26:4c:f3:80:54:
59:c9:3e:1d:10:df:fa:b1:5f:40:10:91:cb:7b:c1:47:6a:2e:
e3:b7:24:03:e7:72:66:2d:c8:b0:ae:1e:26:5c:51:cb:de:f9:
17:08:14:80:3f:17:bb:c1:7d:45:e3:0b:86:09:e3:76:18:89:
4c:99:a2:ae:6f:40:d0:5c:b3:a9:9d:dd:e7:64:2c:2f:46:1d:
2f:9f:bc:a5:da:1e:7f:27:91:19:92:cc:96:87:66:e7:e1:99:
8d:db:fa:b9:09:f8:c0:02:c3:8d:57:a3:0c:4a:5a:9f:63:93:
10:40:c1:ff:c5:92:66:0a:25:00:f8:75:00:fc:e1:70:ad:4e:
1a:74:3b:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE+yzn6AzZ9ayYX/JPAofmJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDFhMzk2OGI2Mjc0MWIzNmQzNDhiZTBkMmM5MWM1ZDRi
MTMzYTIwHhcNMjYxMDE1MDkwMTA4WhcNMjYxMDE2MDkwMTA4WjAzMTEwLwYDVQQD
EyhmMGIyNGI4ZGQ0MWQ5M2FhOGFiMjc0ZjNmNWNjMTIxMTc4Mzk5MjU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qbPRlBwAQ/T+9v46W5CRR1pXDif
6oFB8K/qy8Hx6O75zCgiZUdbAyo2QwXVMUv2W0gBAEN1KHbNz+/bSFLEUN7OVMFQ
TXz3xOcDSobaLz9G9SVU05lB2voIYtm7azr4Ve6sOc4Jz55fFy6k17Occn8ohAlW
oYvtBObGzNFKXDC/s7fniWsEu2tkKlUlbsxuIWdGekEghtpv4qi614xliEicWlp7
lD8WPsUQ7HAfGR4KMfDntpCFV+9+mKhInT/U3Y5nmvwo/FvIiyv3blgf3s7R1+Zh
GALLAhGICyDdezx5oxIJqILdATIXeP8UD89Sk/OsckqTaatuJP7wsUMf5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPCyS43UHZOqirJ08/XMEhF4OZJUMB8GA1UdIwQY
MBaAFA5Bo5aLYnQbNtNIvg0skcXUsTOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtHamxvdGlkQnMyMDBpLURTeVJ4ZFN4TTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wNWIxZjgtNGIzNS00MGJiLWEwMzQt
NzQ3NTIzMTkyMzYzLzEvRGtHamxvdGlkQnMyMDBpLURTeVJ4ZFN4TTZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8wNWIxZjgtNGIzNS00MGJiLWEwMzQtNzQ3NTIzMTkyMzYz
LzEvRGtHamxvdGlkQnMyMDBpLURTeVJ4ZFN4TTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2nUj76R
BNV6iEdV4BvTJnUSUe+eUwuCJ6EMcBHb50G25G5BQyZsvzCzvuj2qlwKgFsxu/hO
FWfzV9xmBFIn1/xP+aw4YNU+eeuZZY1fEij6wkoEv9Uo/FNnlBsWsxBC2EklVL3M
ZhdwKg83DmaADqEq3Q+eedV7ziZM84BUWck+HRDf+rFfQBCRy3vBR2ou47ckA+dy
Zi3IsK4eJlxRy975FwgUgD8Xu8F9ReMLhgnjdhiJTJmirm9A0FyzqZ3d52QsL0Yd
L5+8pdoefyeRGZLMlodm5+GZjdv6uQn4wALDjVejDEpan2OTEEDB/8WSZgolAPh1
APzhcK1OGnQ7EQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 16:29:24 2026 by rpki-client