Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
File: DkGjlotidBs200i-DSyRxdSxM6I.mft (raw, json)
Hash identifier: jtgWUAmhNTQiLYwxZC3HtjgTBCHGNIirfA77aOm+2eM=
Subject key identifier: F6:48:8A:E5:5A:A8:65:31:1E:76:CD:26:E4:A0:A1:E7:8C:B9:D0:EA
Authority key identifier: 0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
Certificate issuer: /CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Certificate serial: 01A0021432BF3C67A0B0492A31C1EAB53CCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 21:01:13 +0000
Manifest this update: Fri 14 Aug 2026 21:01:13 +0000
Manifest next update: Sat 15 Aug 2026 21:01:13 +0000
Files and hashes: 1: 8zauiXBaFMH5VLxzsSvMEUumaxQ.roa (hash: sJvy2vx8n7/hTOLyUNRFHLLiMRYWbPfkI+7/KsQidiw=)
2: DkGjlotidBs200i-DSyRxdSxM6I.crl (hash: 0s0Jy0m4C/pHYBYDgG9GdxvSQDHhjRiV6PUIfk3eDmQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:32:bf:3c:67:a0:b0:49:2a:31:c1:ea:b5:3c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Validity
Not Before: Aug 14 21:01:13 2026 GMT
Not After : Aug 15 21:01:13 2026 GMT
Subject: CN=f6488ae55aa865311e76cd26e4a0a1e78cb9d0ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:5d:0e:ea:60:bc:52:59:79:d7:e5:5f:c3:
46:8c:f9:e2:df:88:15:f4:e1:c0:2d:45:4b:0d:fc:
51:41:66:6e:b9:eb:73:17:25:2b:0f:4b:35:18:27:
1c:0c:f5:47:f1:05:11:c1:3b:35:24:4d:51:27:a3:
95:61:b9:a7:32:e4:fd:18:97:92:dd:65:e6:f6:55:
e0:a9:c3:f1:dd:1f:9c:35:58:dd:c0:11:3f:d4:f2:
5a:40:8b:3f:b2:bc:d5:4f:31:8b:f4:45:51:e4:6d:
0c:5f:79:3a:1f:a3:4e:95:38:9b:ee:18:b0:1c:08:
55:09:9f:90:15:4b:29:85:7d:97:0f:03:16:fa:95:
6b:99:27:3d:c5:fe:ef:2f:78:12:05:4f:1c:35:ef:
8f:f9:46:99:42:5c:d6:a5:8b:f9:6f:bd:1c:60:ba:
1e:5e:71:f2:f1:9a:dc:2b:e4:2f:5f:f2:0e:53:75:
90:76:54:df:bb:b6:65:8b:cc:78:c9:fe:a2:5b:56:
8d:0d:76:fb:f8:bf:6a:90:91:bf:62:39:75:25:2d:
82:fa:0d:50:45:f3:b4:93:b9:c1:dc:8b:6c:78:51:
64:c7:51:39:c0:bb:9f:9d:33:8a:ff:9a:53:dd:15:
8a:77:f9:70:cf:5a:dc:5b:db:b1:49:db:d6:5c:18:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:48:8A:E5:5A:A8:65:31:1E:76:CD:26:E4:A0:A1:E7:8C:B9:D0:EA
X509v3 Authority Key Identifier:
keyid:0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:aa:82:f0:14:27:ef:3a:d4:38:55:8d:2d:e0:33:ff:cf:3c:
a4:dc:68:ac:2b:5e:ef:58:64:56:c0:c9:f6:9f:ed:22:7e:85:
c0:97:92:59:c7:a6:9b:2d:3b:50:f0:f2:4b:cf:0d:7a:e0:0d:
9d:9f:21:dd:2f:a2:d3:cb:61:2b:91:3b:14:d6:72:b1:9f:eb:
fc:8c:55:70:e7:0e:37:30:ca:a5:fd:3d:0f:04:cc:25:eb:81:
67:a4:c4:3a:4d:13:8d:bf:a9:02:23:3c:1e:44:b1:dc:72:c5:
31:ca:a0:fc:64:88:71:73:b8:01:53:59:f4:04:ce:e9:67:e3:
7f:83:95:06:79:de:36:4c:28:8f:37:83:d0:07:7a:70:8a:e9:
4d:10:df:62:21:9c:67:4d:c9:17:b2:25:c7:47:4c:8e:15:ac:
7a:6d:f9:ef:2f:56:51:80:c7:ab:76:48:30:03:ef:ec:46:fc:
b4:3d:00:13:c4:2c:00:6f:23:2c:5f:4c:e8:65:ac:8a:f7:35:
07:17:13:ef:86:7f:29:24:fd:f2:b6:10:29:ee:0b:82:55:1c:
03:98:f4:34:ab:9e:c7:12:4c:86:1c:dd:fa:69:04:49:cf:27:
85:b4:cc:26:70:93:75:44:35:ea:23:10:9c:96:28:c7:6c:6e:
cf:53:c5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:36:44 2026 by rpki-client