Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
File: DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft (raw, json)
Hash identifier: zMg7WDv2iMosHedgzvOKjcc+eIAE0HLV08YLIdmVpcQ=
Subject key identifier: 78:2E:73:BC:7C:91:45:23:F9:DC:A5:36:09:E4:20:A4:C3:47:0E:E0
Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Certificate serial: 019CDE4577DEF87B28C1CC2D66BBE7B1F1FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
Manifest number: E0
Signing time: Wed 11 Mar 2026 19:00:20 +0000
Manifest this update: Wed 11 Mar 2026 19:00:20 +0000
Manifest next update: Thu 12 Mar 2026 19:00:20 +0000
Files and hashes: 1: DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl (hash: 5IB6VrNMPlWolDdEOKPD4PoHTLPAWTkurxB8rZWDviA=)
2: GlhmPCyy1FDf_YTiqeYgVfiC97w.roa (hash: aM5XCtKjHw7PII1T2KGsCatDptMXLc32zqDWbo5CqIM=)
3: qqcaq47Akg1rjPpdSSbGkwyrvpk.asa (hash: cwFdQdAV6zODkwY2szZRrvlvnRzifxMX56MS8xtw3IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Mar 2026 18:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:de:45:77:de:f8:7b:28:c1:cc:2d:66:bb:e7:b1:f1:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Validity
Not Before: Mar 11 19:00:20 2026 GMT
Not After : Mar 12 19:00:20 2026 GMT
Subject: CN=782e73bc7c914523f9dca53609e420a4c3470ee0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:93:96:62:a3:61:bf:84:4d:f6:d1:b1:06:3a:
dd:84:6c:b5:9a:0b:d9:09:87:37:f9:49:4c:5a:69:
9f:28:53:1f:e5:e7:d8:97:56:5a:48:ca:65:f0:49:
13:f2:ee:bf:d4:fd:bb:c9:9f:33:7e:a4:b5:c4:c1:
c8:99:fe:c0:af:03:f3:5a:ad:d1:a9:c1:fb:f8:76:
10:8d:4c:23:de:c9:f6:16:12:ac:bd:a0:a4:94:be:
21:6f:3f:0c:88:60:fb:8c:ec:f5:25:e6:ff:45:9e:
6e:b0:68:3a:4a:84:45:10:b5:2b:32:c2:14:68:91:
95:14:6c:2a:33:34:18:9d:ad:7b:19:84:88:d4:95:
58:0b:14:54:51:a7:de:85:d5:fe:3f:d6:ea:70:df:
bd:05:ec:71:93:5f:b7:22:67:5f:50:9b:8b:52:27:
85:2a:2e:37:78:19:e1:6b:c9:5a:a4:21:ce:9e:e1:
e0:14:95:04:75:ac:c5:6a:0d:d6:53:6e:3d:d7:77:
09:81:64:8b:a9:74:e0:af:39:80:c0:27:2c:a4:5f:
da:26:ab:f5:33:de:af:61:50:16:31:96:7e:89:d5:
4e:e5:c4:72:06:ed:40:62:4a:10:e1:30:6f:6a:1c:
92:dc:5f:86:7d:60:1a:09:5f:18:fb:9d:2c:ee:00:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:2E:73:BC:7C:91:45:23:F9:DC:A5:36:09:E4:20:A4:C3:47:0E:E0
X509v3 Authority Key Identifier:
keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:da:aa:1d:d5:70:be:72:45:76:46:ea:fc:5c:a2:62:ea:a6:
1a:19:1e:2d:42:10:67:30:fe:c5:7b:0e:f6:f9:ff:b7:d6:04:
07:25:a8:18:ae:02:1c:92:2b:0c:f2:c5:23:f5:c3:cc:51:29:
25:0a:d6:f5:95:14:dd:1b:ac:a7:0d:f6:a9:c0:25:99:e0:10:
3b:91:2f:aa:d9:3f:bc:a2:30:0f:d8:29:03:1b:75:16:88:2d:
ce:f7:58:c0:c2:4a:9e:ed:94:22:dd:38:bd:19:f4:0e:4c:4e:
7b:22:4c:64:4d:e8:5b:b3:e2:07:16:d9:1e:9d:0a:74:fb:b5:
c2:66:13:81:92:47:1e:d0:8e:a2:2c:7b:e4:50:97:3c:65:36:
8f:c2:5a:d8:a4:a5:50:fa:4e:83:e8:ff:44:79:85:00:0d:e0:
a0:2d:4f:e4:ff:e6:f8:4b:9e:42:48:1c:43:a0:d8:0c:3d:2e:
df:11:4b:18:e9:b0:04:f4:d1:39:26:78:2a:82:15:79:3b:29:
f0:cd:fd:c9:05:9f:1d:4b:67:aa:90:66:b5:a7:f8:ae:4f:7d:
85:25:98:14:3e:e2:b2:d5:8a:94:6b:06:10:8a:71:06:04:b7:
d3:92:a6:b9:a4:b2:80:33:57:86:b9:ea:78:fc:07:99:c6:ca:
9a:32:61:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 03:08:06 2026 by rpki-client