Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
File: DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft (raw, json)
Hash identifier: /V4f6+udwLzu3lOSnwFA8BcOZ0P4ygqSwRS9dxB+1Gg=
Subject key identifier: E4:85:93:62:F7:49:2A:DC:CD:CD:F7:6F:AD:6F:58:4B:F5:DD:7B:F0
Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Certificate serial: 01A0EB53255236C598503E0CA26F3AD0B36A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
Manifest number: 02F9
Signing time: Tue 29 Sep 2026 04:01:29 +0000
Manifest this update: Tue 29 Sep 2026 04:01:29 +0000
Manifest next update: Wed 30 Sep 2026 04:01:29 +0000
Files and hashes: 1: DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl (hash: 8FWTOTn4D4rYsR2iPs+Fx7K1UVOfjbyIKuuAigQ/Vu0=)
2: GlhmPCyy1FDf_YTiqeYgVfiC97w.roa (hash: aM5XCtKjHw7PII1T2KGsCatDptMXLc32zqDWbo5CqIM=)
3: qqcaq47Akg1rjPpdSSbGkwyrvpk.asa (hash: cwFdQdAV6zODkwY2szZRrvlvnRzifxMX56MS8xtw3IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:53:25:52:36:c5:98:50:3e:0c:a2:6f:3a:d0:b3:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Validity
Not Before: Sep 29 04:01:29 2026 GMT
Not After : Sep 30 04:01:29 2026 GMT
Subject: CN=e4859362f7492adccdcdf76fad6f584bf5dd7bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:25:36:61:88:25:89:10:5c:67:13:1f:86:a7:
8d:31:d0:40:66:84:2d:ca:18:79:c1:d2:e0:d6:50:
f8:25:fc:16:2f:34:15:1b:37:bb:28:ed:7c:98:dc:
a6:06:d5:97:25:24:0a:72:ff:9b:d8:b4:ae:71:97:
7c:3d:8e:7d:db:90:d5:87:68:e8:39:66:77:dd:8b:
a6:f7:0a:3b:31:02:ec:02:fe:0b:ee:1b:4b:dd:be:
c8:d4:15:46:07:af:3b:2c:4a:d6:bd:ea:17:1e:83:
a6:f9:bb:09:9b:50:29:93:82:18:21:0f:24:f5:c0:
42:02:a9:76:29:84:0f:fd:a2:1a:3b:f5:94:dc:df:
de:26:bb:a5:1a:b1:26:0d:3d:a9:18:23:40:5e:d6:
1b:c3:c1:82:f2:81:88:38:94:1c:3b:0a:00:6b:7a:
5b:08:f9:94:96:01:e4:30:5e:da:7c:6e:54:59:06:
ff:d0:6e:4c:22:e4:c5:38:ec:1f:e1:75:c4:dc:e3:
73:93:9c:35:e0:90:0d:80:aa:cf:26:d1:f9:43:28:
51:88:c1:09:47:73:2e:84:4d:0f:7f:a0:04:6c:7b:
b2:e0:81:f7:1c:9e:d0:94:94:28:df:6d:83:40:78:
09:6f:a7:10:57:4e:85:31:31:23:46:ee:a8:94:0d:
0f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:85:93:62:F7:49:2A:DC:CD:CD:F7:6F:AD:6F:58:4B:F5:DD:7B:F0
X509v3 Authority Key Identifier:
keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7c:51:03:d5:60:fa:b0:b3:61:8a:56:c1:44:89:56:39:6f:
70:64:31:3f:5e:06:de:ab:3a:83:17:ad:d8:99:bc:1a:85:1d:
c5:54:c7:2c:2d:7d:82:44:1a:9e:5d:f2:59:db:2b:dc:44:aa:
21:74:bd:32:0e:e7:93:87:1f:cd:f6:e0:73:7d:25:66:8d:d0:
4a:92:98:b0:62:ab:6c:b0:6b:83:fb:1c:c0:e8:cf:6b:9e:12:
f2:b3:ab:25:72:10:3e:4e:99:b4:6e:7d:09:07:04:ff:2d:ea:
3f:62:d5:09:33:82:23:e3:16:e8:68:75:29:7c:81:93:48:cf:
db:a2:ca:7e:42:d4:96:40:77:c4:96:1e:0b:34:a7:8d:c3:27:
44:9b:ed:06:a9:fe:25:ae:db:99:ee:5b:5c:ff:b2:8e:3e:f5:
ac:d5:e1:b5:d1:f1:fc:0f:5e:63:0c:ca:e9:c3:df:f1:9c:a1:
dc:5a:8d:0f:a3:a0:39:0e:69:e9:9d:2a:a2:78:22:1f:cb:99:
93:8a:79:44:76:05:e8:21:c5:f0:54:f0:39:1d:84:9f:0e:38:
af:e9:f1:f3:81:12:76:c1:f7:01:2b:05:ce:ea:66:66:55:f5:
63:82:26:6d:99:05:d0:15:5c:71:4f:31:78:3f:52:bd:15:2c:
9a:fe:af:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 12:27:11 2026 by rpki-client