Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
File: DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft (raw, json)
Hash identifier: 2N1229gFRHG5++EA/BB6qtXiPh+Y3TGP4d4tpH724gA=
Subject key identifier: D6:23:38:F5:68:FA:A3:4B:D0:D8:AB:C2:35:59:2B:2D:07:FE:C3:1F
Authority key identifier: 0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
Certificate issuer: /CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Certificate serial: 019EE39F1D848FF1ADDD0EFD7ED64E07FDF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
Manifest number: 0167
Signing time: Sat 20 Jun 2026 06:01:56 +0000
Manifest this update: Sat 20 Jun 2026 06:01:56 +0000
Manifest next update: Sun 21 Jun 2026 06:01:56 +0000
Files and hashes: 1: Atp7ou_dWLqF9yrUFBSaGu8i1NQ.roa (hash: iX6v9+WjPW25JV4dSQdrR9Ylqr6/LIAKembF0Rx+4SM=)
2: DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl (hash: G7N/2ljNtUuiG6Lzhz1zF3vRZK1Uz75ECoNsxHQwDjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 23:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e3:9f:1d:84:8f:f1:ad:dd:0e:fd:7e:d6:4e:07:fd:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43fb425bc1c352577e0a9ade5bff59c0b4c582
Validity
Not Before: Jun 20 06:01:56 2026 GMT
Not After : Jun 21 06:01:56 2026 GMT
Subject: CN=d62338f568faa34bd0d8abc235592b2d07fec31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f3:89:bc:64:0e:a5:de:f6:62:e3:59:5d:a9:
59:2c:6b:54:b2:5e:c4:d3:9e:b6:35:2d:b6:5f:b9:
49:cb:f5:6a:8a:8e:ea:e4:f9:f9:c9:3e:93:a9:a2:
88:5f:00:0c:c7:6a:ab:16:e1:da:4c:76:bc:f7:06:
93:9a:17:dd:46:8c:cb:a3:a2:5c:1b:9a:0a:e9:d1:
d6:f0:7c:6f:7c:af:ab:50:4d:61:b9:68:2a:a7:4a:
f6:7a:af:84:56:0c:ca:27:8f:f1:63:58:e8:48:b2:
56:6d:dc:f0:82:a7:d9:cf:df:c5:94:f3:47:db:3c:
3a:3c:36:1e:cb:e9:3c:f5:1e:4f:7d:5b:cd:a5:77:
99:f9:82:3f:fa:c7:27:c2:41:6e:ed:38:4c:f7:67:
db:e9:8a:df:97:d8:8d:2b:58:7a:01:35:00:54:d5:
d7:d0:15:27:7d:9e:e9:c5:b8:93:cf:3e:32:f0:ba:
25:30:d8:02:cf:1a:7b:54:cf:84:6b:29:de:91:4b:
f2:c2:ea:1e:38:19:98:58:93:56:29:96:02:c1:df:
8e:17:05:37:15:09:06:ec:88:76:bc:dc:27:73:14:
e5:99:7c:e1:6f:20:aa:69:5f:23:e0:bd:8b:59:1a:
78:0f:c3:a4:d9:be:6d:bd:ad:ef:8f:6d:1a:9f:fd:
cf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:23:38:F5:68:FA:A3:4B:D0:D8:AB:C2:35:59:2B:2D:07:FE:C3:1F
X509v3 Authority Key Identifier:
keyid:0E:43:FB:42:5B:C1:C3:52:57:7E:0A:9A:DE:5B:FF:59:C0:B4:C5:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkP7QlvBw1JXfgqa3lv_WcC0xYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/fd1a45-3118-411d-8e1b-911f1dddd66b/1/DkP7QlvBw1JXfgqa3lv_WcC0xYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:1e:15:17:1d:89:93:09:b8:f8:58:7c:ee:07:f1:a3:ca:6e:
12:15:b5:dd:47:b9:f7:c1:fd:7d:3a:8a:02:0a:c2:d2:02:f6:
70:62:34:47:5d:34:40:43:d5:44:79:3b:46:ce:ac:18:e9:70:
88:71:62:a4:64:a8:3b:21:f7:9a:19:5f:b8:d5:c2:90:73:37:
6c:a2:04:5f:fe:f2:bc:bc:08:de:cd:5c:da:28:f4:b2:7c:ac:
b1:5f:68:87:d9:70:ec:1f:35:3f:1d:4e:7c:e7:1c:01:c5:ff:
fe:41:87:ad:b1:f7:7b:4b:75:57:bb:f5:8b:29:06:54:1a:af:
c6:f1:68:ea:e3:00:8d:bb:11:91:f6:ab:e4:e6:86:df:42:a3:
61:66:ce:34:d6:13:cc:67:fc:16:9a:d7:60:4a:7b:fe:d9:e2:
3e:c1:01:e1:56:df:e0:f6:63:cd:02:a0:11:56:f3:8b:61:11:
f7:89:e7:7e:86:7d:e8:03:ff:c3:eb:df:5e:c0:f9:77:2d:62:
55:27:f5:55:2c:3c:65:07:1b:94:99:09:69:15:76:23:88:c9:
1d:c7:0e:bf:36:9c:7d:1d:cb:13:c3:2a:ba:67:f4:21:93:29:
67:61:d2:b8:6b:ee:e7:21:42:71:4b:69:45:ec:e4:4c:30:37:
86:0b:05:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 20 08:05:48 2026 by rpki-client