Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
File: DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft (raw, json)
Hash identifier: ZQSZVYDPrpZoynhnbjgS7dRftLV4kCOohXrXwUTV4GU=
Subject key identifier: F3:3F:C2:88:FD:9F:05:42:05:74:5A:AC:5D:78:D5:43:80:0F:2C:25
Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Certificate serial: 019D8FF2BD93E6E5FDCCD2AB9154015D5A5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
Manifest number: 013C
Signing time: Wed 15 Apr 2026 07:02:22 +0000
Manifest this update: Wed 15 Apr 2026 07:02:22 +0000
Manifest next update: Thu 16 Apr 2026 07:02:22 +0000
Files and hashes: 1: DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl (hash: TP8f9fVTsk5ioD3tj3QjhU89ECQI3+ux9SvVTMyruao=)
2: GlhmPCyy1FDf_YTiqeYgVfiC97w.roa (hash: aM5XCtKjHw7PII1T2KGsCatDptMXLc32zqDWbo5CqIM=)
3: qqcaq47Akg1rjPpdSSbGkwyrvpk.asa (hash: cwFdQdAV6zODkwY2szZRrvlvnRzifxMX56MS8xtw3IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Apr 2026 07:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:8f:f2:bd:93:e6:e5:fd:cc:d2:ab:91:54:01:5d:5a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Validity
Not Before: Apr 15 07:02:22 2026 GMT
Not After : Apr 16 07:02:22 2026 GMT
Subject: CN=f33fc288fd9f054205745aac5d78d543800f2c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:94:6e:cb:32:13:cf:7f:48:71:dd:f4:86:27:
5a:35:ed:2d:55:e7:e8:d1:15:05:a0:69:54:b0:5c:
99:2d:f1:c8:46:1f:c1:a3:dd:58:51:3f:86:c6:9c:
61:b7:72:6b:75:bd:c5:9f:71:7f:f3:d0:0d:cf:0a:
c4:a2:2e:70:2b:41:c3:bb:39:96:2d:30:36:e3:7e:
34:4e:da:a4:85:44:de:1b:0d:15:92:66:bf:8b:0e:
d6:73:e3:22:fc:88:61:25:84:a2:51:75:9b:e6:49:
2a:b3:4b:61:3e:f8:c6:65:35:a5:b6:c1:2e:ce:e9:
2b:81:db:9d:df:52:0b:0c:dd:77:56:be:0c:7f:6b:
36:23:9a:9b:e1:1b:67:02:4c:53:8a:45:84:19:6a:
96:a2:cb:6e:62:51:c5:e4:b9:bc:44:3b:68:0c:af:
bb:40:6b:99:bf:19:a1:30:34:13:68:d7:e2:a2:90:
e6:66:f3:36:b3:5b:50:72:7f:4d:f4:eb:ce:cb:c2:
f6:4f:5a:c5:a9:2e:46:4d:26:4e:70:dd:61:71:9e:
ae:1b:40:8f:38:31:d8:34:0a:53:e0:c8:08:c3:1f:
e3:17:66:84:dd:67:9b:13:cd:32:5e:a1:da:31:18:
a5:14:24:b3:3a:41:57:5a:bb:57:42:73:aa:ca:96:
10:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:3F:C2:88:FD:9F:05:42:05:74:5A:AC:5D:78:D5:43:80:0F:2C:25
X509v3 Authority Key Identifier:
keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:12:c2:16:bc:05:35:46:0a:82:c8:fe:8b:d7:28:5c:bb:80:
b1:66:2d:11:73:92:12:8e:d9:55:a0:01:b3:0d:df:4a:b4:05:
e0:b1:aa:ed:04:2e:8a:fb:0d:1d:ab:a4:aa:7b:19:46:40:f5:
3d:06:fb:43:f6:af:05:3b:ab:3b:d9:03:8c:28:63:83:f0:9f:
db:a6:2f:32:19:83:cc:59:75:a3:f8:47:da:7a:03:fe:fc:fb:
8d:6c:4a:87:6c:0f:56:44:4a:18:0e:cf:f7:68:34:ae:18:00:
07:88:7e:52:93:55:3c:25:af:20:c2:10:2f:10:51:b6:d5:04:
69:61:0b:39:18:ca:f8:6c:db:71:2f:f0:9d:c3:98:05:3d:7e:
19:57:3e:97:0c:6b:32:d7:0d:38:04:93:0f:67:56:95:c0:eb:
cb:c5:b0:4d:ef:d3:ed:8e:d1:bf:27:0d:c6:14:a5:85:51:2c:
b9:93:77:27:5c:a5:2c:f1:60:8e:a3:25:07:1a:8e:93:f7:87:
34:68:c6:91:4e:df:bb:ba:36:50:ba:88:cf:e6:d2:9d:0b:0f:
fc:f5:09:a8:43:23:7f:2f:62:b6:4b:a8:89:d6:e5:f3:61:db:
82:5a:eb:eb:8a:12:b7:88:26:93:e2:c4:b1:5d:d8:4a:14:90:
48:3a:c2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 15 13:56:09 2026 by rpki-client