Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
File: DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft (raw, json)
Hash identifier: YzfL4gRfnO29cc1ZBsV3wb1uS7fXpeIgurYCvL2fYhQ=
Subject key identifier: 42:2F:E5:3E:3E:EF:3E:A4:60:74:8B:3A:5D:8C:7A:F6:B5:AB:85:6A
Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Certificate serial: 019FF9ECA327327D21609C817796845F8496
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
Manifest number: 027C
Signing time: Thu 13 Aug 2026 07:01:02 +0000
Manifest this update: Thu 13 Aug 2026 07:01:02 +0000
Manifest next update: Fri 14 Aug 2026 07:01:02 +0000
Files and hashes: 1: DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl (hash: Z2N8Io080iNTUpajZe1tvMz9l8GD7rKJaW6hDbwgGMM=)
2: GlhmPCyy1FDf_YTiqeYgVfiC97w.roa (hash: aM5XCtKjHw7PII1T2KGsCatDptMXLc32zqDWbo5CqIM=)
3: qqcaq47Akg1rjPpdSSbGkwyrvpk.asa (hash: cwFdQdAV6zODkwY2szZRrvlvnRzifxMX56MS8xtw3IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:ec:a3:27:32:7d:21:60:9c:81:77:96:84:5f:84:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Validity
Not Before: Aug 13 07:01:02 2026 GMT
Not After : Aug 14 07:01:02 2026 GMT
Subject: CN=422fe53e3eef3ea460748b3a5d8c7af6b5ab856a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2a:96:b6:81:2e:8d:3d:44:20:c6:0e:b3:2c:
8b:d5:42:95:ac:6b:76:4f:27:fb:4a:c8:f0:f7:9d:
de:b9:b6:65:d5:74:39:e9:af:99:37:20:59:3f:bb:
4b:79:4c:50:09:92:87:a1:f2:53:3b:2c:75:2b:69:
d0:eb:8a:fc:af:c9:f4:f5:37:ee:df:d9:d8:18:5c:
9b:47:26:20:2d:01:84:72:23:44:5c:a6:8e:a9:ec:
04:9e:85:b9:c6:32:db:29:fa:2f:cb:24:7b:3e:4c:
25:47:3f:e7:2e:3b:e2:04:d1:66:b5:7c:0c:ba:e0:
45:21:2f:2d:b6:14:4f:24:3f:25:a4:63:01:11:13:
3a:d6:40:ac:86:c1:57:fc:33:b8:d1:fa:63:6a:d7:
ed:34:11:bc:31:4b:17:19:d6:d5:20:34:05:d6:8d:
ed:4f:7b:d5:2e:55:4e:70:9f:7e:7a:56:e6:42:ef:
67:b6:72:9a:ca:8d:e7:f5:7d:74:f1:de:15:77:ed:
c7:9e:65:7b:0f:44:4c:60:aa:c6:e9:a8:33:6c:a4:
d6:d7:6d:52:8a:1b:b7:12:89:ee:fd:1d:07:59:f6:
03:61:f7:4b:ef:dd:d5:cd:9a:6b:73:af:ef:dd:e3:
3e:44:6b:ac:f7:f0:2e:1d:1f:f4:9e:9d:63:04:a2:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2F:E5:3E:3E:EF:3E:A4:60:74:8B:3A:5D:8C:7A:F6:B5:AB:85:6A
X509v3 Authority Key Identifier:
keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:a0:52:04:79:f9:94:ad:3b:6a:49:df:7d:7d:96:ee:3a:e9:
28:f0:20:7d:ed:54:81:9f:41:93:2d:aa:ec:fe:8b:b7:90:e2:
bc:ce:3a:03:05:73:a6:38:7b:5c:61:bc:0c:28:02:c1:f5:e3:
09:8d:55:88:ad:b4:03:4a:c4:88:2b:b3:72:e3:42:61:8a:05:
c3:93:b9:dd:db:d6:ab:76:69:ba:b2:80:25:fb:b0:80:1d:5c:
06:cb:59:38:65:d8:48:4f:f2:c9:5b:eb:0c:42:30:4f:7e:c0:
86:82:b4:b9:da:ca:99:47:2b:b7:aa:e0:83:2e:aa:ca:79:2d:
1b:e6:d3:0e:73:bd:f9:10:82:e2:ad:27:4a:3b:37:a8:6e:11:
62:5f:22:5d:ee:fe:58:e6:bc:a2:ab:96:9d:49:b8:ee:af:53:
91:9d:d4:17:1b:3e:c9:67:8d:bb:cf:31:4d:ba:7c:f9:e6:22:
df:47:b9:fe:84:ca:3e:78:e4:c1:50:35:40:e7:46:3d:67:ae:
0b:08:e7:59:bf:c1:63:c9:6b:aa:b0:f6:2b:a3:df:fe:09:e8:
15:9e:cb:5f:89:40:6a:ae:51:e2:be:0f:e3:65:b3:a2:ec:a2:
87:78:c8:a7:b5:9d:57:30:47:b8:a5:0b:ea:0f:a5:7f:5d:75:
72:fd:b4:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:02:31 2026 by rpki-client