Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
File: DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft (raw, json)
Hash identifier: Ns/4d/Cyfgcg9eVsuRNUsKjhUWaiq9YyCi45XFjFPi0=
Subject key identifier: 1D:4C:6A:B1:72:EE:9E:5C:7A:BD:6E:DE:4C:5E:46:AD:80:1B:66:86
Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Certificate serial: 01A0E7777EDC6BDB5A0CAA5266B1173ABA8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
Manifest number: 02F7
Signing time: Mon 28 Sep 2026 10:02:43 +0000
Manifest this update: Mon 28 Sep 2026 10:02:43 +0000
Manifest next update: Tue 29 Sep 2026 10:02:43 +0000
Files and hashes: 1: DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl (hash: ceBXXErx5XbL1RnLHkB63+dNMx2DfXkQMqXBFuUDREo=)
2: GlhmPCyy1FDf_YTiqeYgVfiC97w.roa (hash: aM5XCtKjHw7PII1T2KGsCatDptMXLc32zqDWbo5CqIM=)
3: qqcaq47Akg1rjPpdSSbGkwyrvpk.asa (hash: cwFdQdAV6zODkwY2szZRrvlvnRzifxMX56MS8xtw3IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 10:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:77:7e:dc:6b:db:5a:0c:aa:52:66:b1:17:3a:ba:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Validity
Not Before: Sep 28 10:02:43 2026 GMT
Not After : Sep 29 10:02:43 2026 GMT
Subject: CN=1d4c6ab172ee9e5c7abd6ede4c5e46ad801b6686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f3:3f:db:18:fd:cb:d8:00:c7:4d:79:33:96:
14:b1:d7:e3:e7:a6:5d:54:f1:4a:bf:37:ea:93:9e:
a5:ae:a9:bd:48:d0:e9:87:38:5f:d8:9b:56:ee:0f:
47:8a:de:50:df:a5:5b:f5:ed:95:2c:8b:3c:d5:57:
8c:1e:da:30:40:df:29:b4:d2:01:c1:a5:45:fb:9d:
3a:6a:3e:f3:58:85:52:a0:23:82:3c:7e:d4:a7:ed:
8a:1a:61:8d:1d:b8:ab:27:a6:d9:07:24:a4:b1:75:
fc:99:76:89:36:0a:d5:47:06:21:51:ad:00:65:f8:
c0:5d:1a:fe:1e:5e:35:ff:cd:9c:d3:1c:6c:1f:95:
22:39:d2:72:5b:54:0a:35:5e:1b:cf:06:1d:37:af:
98:ef:b3:73:40:05:49:55:4f:f5:6a:b9:89:86:62:
72:b5:3b:8e:39:30:a6:a2:5c:52:00:43:97:e2:9b:
53:f3:7f:7b:1f:cf:36:35:cd:e2:1d:e8:a0:3e:88:
28:ae:ef:de:7a:e3:d2:5d:fb:07:cb:79:d4:d7:90:
7c:70:56:35:20:51:d4:13:a7:94:8b:58:62:ed:de:
16:1b:3a:89:a3:f3:ce:c2:5b:b0:14:41:87:c8:98:
0a:22:0f:40:71:42:a6:a7:fb:6c:d5:3d:6c:fe:03:
d5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4C:6A:B1:72:EE:9E:5C:7A:BD:6E:DE:4C:5E:46:AD:80:1B:66:86
X509v3 Authority Key Identifier:
keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:75:39:91:29:20:f1:6b:e8:1f:c0:5f:59:11:d3:b7:51:8a:
e3:1b:ad:f7:42:9d:d5:bf:d2:a1:9c:d8:fa:38:f5:52:d9:82:
a4:d5:4b:74:30:a0:3b:c5:d7:5c:4e:52:7a:e3:b7:28:3b:49:
85:f5:82:bf:0a:80:43:dd:dc:ca:15:f4:42:55:6e:05:ae:60:
c0:d9:36:de:85:f9:6d:2a:65:2d:ce:73:7f:d2:5a:73:9e:95:
e9:6b:65:21:ef:bb:22:16:5c:2a:c3:e7:7d:46:01:4a:48:ac:
85:5e:3b:f9:92:16:41:3b:46:81:48:9e:21:9d:bf:52:f0:82:
94:d7:19:30:1f:cd:99:b8:cd:4f:be:5b:ed:3f:7c:44:db:c5:
3c:96:99:60:01:f9:2c:9d:79:75:f8:e6:d9:3f:06:6a:d9:e4:
9a:a9:33:8a:25:70:5a:4b:5d:c7:a9:4a:41:1e:ec:63:65:72:
c4:5d:20:9d:df:05:62:b2:b4:ca:c1:1e:0c:8b:e1:f6:bb:b4:
1b:eb:ee:fd:72:41:3b:66:7b:ee:a6:03:91:f2:fc:a7:ef:1f:
73:86:1d:8d:18:23:8e:75:c6:f9:2b:c5:b1:dd:07:73:f9:17:
01:7e:ea:12:ce:08:70:55:e4:c1:cc:27:91:14:4e:f9:a7:42:
cd:8d:d3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 19:33:45 2026 by rpki-client