Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
File: DkOg3wWaUlGkALWh8TIboA0xINI.mft (raw, json)
Hash identifier: BjNMWq/Rbe690LMDhQ4c4U6GyDqHv4/ET7Ayovd28BA=
Subject key identifier: 03:76:19:BE:9E:D8:54:22:DB:D9:CA:BA:63:F0:F2:E1:27:03:E2:7F
Authority key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
Certificate issuer: /CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Certificate serial: 01A000CA9B590546982986325DDEFAF3F585
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
Manifest number: 1A02
Signing time: Fri 14 Aug 2026 15:01:12 +0000
Manifest this update: Fri 14 Aug 2026 15:01:12 +0000
Manifest next update: Sat 15 Aug 2026 15:01:12 +0000
Files and hashes: 1: 4dMXi4_OZ1hIYb5lfSEix8dXAV4.roa (hash: pso0l4AjjbTbnTQh+xQFS2oQ9IVZGMVy1LttU/eMjhU=)
2: DkOg3wWaUlGkALWh8TIboA0xINI.crl (hash: E696455HLWIBUl7BOwVhmvgD97jDORD2ihnr0Y30TBw=)
3: X5rHphgjA2Ovs-Yct52WJKfW_k8.roa (hash: fS9NXooFPX4VLQ4SoiMsokXMu0rmiVlmUkYsHNO+cLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:9b:59:05:46:98:29:86:32:5d:de:fa:f3:f5:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Validity
Not Before: Aug 14 15:01:12 2026 GMT
Not After : Aug 15 15:01:12 2026 GMT
Subject: CN=037619be9ed85422dbd9caba63f0f2e12703e27f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:05:8c:d4:81:8d:dd:03:d6:3b:68:c5:ca:d6:
8a:2b:53:d6:75:b1:5f:21:22:ba:16:e1:88:1f:5c:
11:17:61:c4:e1:da:0f:64:a5:63:2d:6e:50:c1:51:
1e:60:20:70:70:bd:e9:99:db:55:ae:34:ef:55:45:
7d:cb:36:a5:66:16:17:b9:e0:72:6e:e4:84:86:a4:
b3:41:a0:c2:98:69:4a:56:05:5f:fa:23:51:dd:4a:
ad:10:07:65:37:ce:ec:dc:0d:18:78:a7:33:6f:0e:
3b:55:eb:15:4e:c4:39:63:1d:a2:cc:38:a1:52:8d:
14:87:7f:3d:54:2d:46:b0:d7:ee:9c:81:1d:80:62:
13:b1:5c:b0:3f:ec:9c:27:f6:1a:b2:ee:4d:05:99:
44:b4:83:cf:2b:90:46:db:c3:50:11:31:ca:fc:24:
e3:0c:34:76:f1:39:a1:9b:63:0d:08:ab:c7:9c:54:
dc:06:f1:78:2f:f2:9b:95:d8:0c:2a:bb:93:eb:55:
e4:b5:1b:20:70:86:8d:c1:8e:38:e1:27:17:75:bf:
50:85:76:e0:89:2f:18:0e:b1:0c:86:bd:a5:09:9d:
c2:23:13:4d:e1:8a:d4:f1:20:2f:d1:f3:2c:91:7c:
cf:71:67:f9:98:2b:6f:d4:96:ce:8b:47:07:c9:21:
93:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:76:19:BE:9E:D8:54:22:DB:D9:CA:BA:63:F0:F2:E1:27:03:E2:7F
X509v3 Authority Key Identifier:
keyid:0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:a1:4a:3e:e7:ee:e0:cb:38:51:de:9f:be:98:a8:21:24:d0:
1c:8f:8b:a3:4d:92:54:37:f0:40:51:7a:54:b4:a9:8f:22:7e:
65:f5:5d:c9:82:49:0b:01:c8:7a:d2:ae:fc:3b:a8:19:34:d5:
d2:41:57:5a:e4:f4:b4:b5:66:87:bb:eb:29:1f:ea:ef:c9:44:
22:16:de:33:f3:1a:22:90:e8:fc:f2:f9:5e:48:dd:7a:7b:53:
9b:85:cc:0a:95:53:0b:78:74:6f:70:e0:5f:d3:08:d3:0a:d6:
b4:47:e9:a4:f3:1b:de:67:0f:48:cd:74:2c:a7:c7:3e:02:93:
7b:30:9c:a4:15:b3:19:4e:c2:4c:88:4d:d4:67:7c:ee:2d:f3:
0d:ce:50:d4:ef:64:02:d5:aa:28:e2:17:1b:2e:d0:78:2f:ea:
bb:18:28:09:0e:22:f3:33:77:2d:e6:97:96:75:8d:9c:ee:af:
a6:0b:75:5e:82:8f:c4:f8:bf:d4:46:e5:d0:e4:e5:c2:9d:88:
7e:10:fc:96:6f:30:1b:f6:84:2d:11:0e:8d:ca:ac:b7:a6:9c:
7a:5c:be:b3:fb:de:1f:c6:2b:7f:34:8a:f1:e0:c2:c4:af:b8:
42:bf:2d:01:2f:5a:80:7e:6c:22:cf:89:37:a1:57:1b:39:c8:
0a:6e:07:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:39:36 2026 by rpki-client