Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: yZpmOlK28VsihFPTmkFIgbG01s4a4a90/Q4yhoHLYBY=
Subject key identifier: DD:E1:D9:7B:9E:2C:2C:C2:ED:FA:33:37:EA:BC:AE:93:3B:4E:67:24
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 01A00138305732BBDC4523079E1899F9A011
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 0FD5
Signing time: Fri 14 Aug 2026 17:00:54 +0000
Manifest this update: Fri 14 Aug 2026 17:00:54 +0000
Manifest next update: Sat 15 Aug 2026 17:00:54 +0000
Files and hashes: 1: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: tvWiTp3orbRixQGJg0i7YEHzU2B5PN/OUehXT9uuCqQ=)
2: Qjk3TKtSPUctHgo4rsqpoAhhjHQ.roa (hash: +v/ml2xcCnK66GfWnq2Rs0P+BnSU40/q3bgPtxOvz4M=)
3: mp8yEMYVdbdzLEoPbRdKbu2ZnSY.roa (hash: gI9M1SdX++yXCyEo0irlvSsH3VM2NKOZJf1C0XjeZPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:30:57:32:bb:dc:45:23:07:9e:18:99:f9:a0:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Aug 14 17:00:54 2026 GMT
Not After : Aug 15 17:00:54 2026 GMT
Subject: CN=dde1d97b9e2c2cc2edfa3337eabcae933b4e6724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4e:cf:37:71:47:4e:48:70:19:fb:21:a7:7f:
71:f1:8f:4d:7d:fe:8b:9c:75:ed:e2:52:e5:58:29:
79:26:f5:6c:e1:d5:65:80:ab:b0:2c:10:b5:a0:4c:
45:92:35:35:9b:4e:7f:b2:ed:09:1c:79:57:50:e6:
e1:58:e3:58:d8:d6:97:06:71:e6:71:cb:c4:45:fe:
87:88:3c:97:f3:76:9e:b8:16:3c:9d:31:a3:d7:0f:
e9:3d:ac:1b:9d:c8:76:ee:39:0a:a1:2a:81:74:90:
d7:8a:ff:2c:35:8f:c0:e9:49:71:f4:a9:5c:bc:3a:
10:57:b6:d6:87:99:cb:7f:08:13:e2:6b:a6:96:f6:
26:4c:ec:e8:4a:1e:a9:76:4d:29:15:a7:0c:96:88:
c3:a9:09:7b:73:09:85:ec:4a:e4:fe:19:e2:28:15:
17:4b:16:2d:1b:96:ea:a5:76:02:73:19:ce:40:84:
30:0a:b1:4f:fc:5c:f8:ca:ef:96:42:ef:f0:77:37:
d3:cf:40:b0:f3:af:ae:b7:c7:e0:1b:eb:2c:35:10:
fe:aa:33:ff:5c:67:65:de:43:8b:25:d8:f1:40:89:
04:fd:09:05:b6:f4:4c:15:ca:d1:13:ec:dc:07:66:
90:f8:54:6c:de:c3:ee:c8:21:7e:9e:80:06:60:6e:
79:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E1:D9:7B:9E:2C:2C:C2:ED:FA:33:37:EA:BC:AE:93:3B:4E:67:24
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:3a:4b:be:a8:a5:66:d5:c4:c1:ab:77:26:93:21:bd:0d:3f:
59:a9:22:2a:02:07:1f:94:27:65:3d:11:7d:37:1a:a1:53:29:
e0:90:c4:e5:ba:b5:64:c4:c5:c5:bc:b5:50:9b:89:1e:0b:7b:
a1:b9:14:1a:7d:e6:65:52:59:d2:ad:15:2c:20:e0:cc:7f:eb:
4f:f5:78:2d:76:50:da:d0:3b:b1:f9:16:9b:97:f6:39:34:02:
c4:59:12:bc:7f:3a:82:d4:03:30:bd:c2:45:78:17:e8:fd:43:
04:3a:72:0c:2a:77:12:aa:d6:41:b1:2b:1c:ce:a2:6c:c0:41:
b6:c0:88:ae:84:fb:ab:90:5b:c7:31:5e:4c:75:2b:b9:84:3d:
22:69:8b:63:07:d1:ad:6d:11:09:bc:13:15:ca:26:49:c8:69:
2d:3c:eb:78:d7:93:00:87:dc:b7:4a:8e:6c:5b:3d:2d:54:65:
9c:23:df:1f:44:f5:d8:be:4c:dd:60:06:99:ab:fa:45:6b:ea:
23:97:01:57:fc:aa:fa:99:11:48:33:61:36:1d:df:7d:77:b6:
2e:31:90:9e:c9:19:88:ff:b0:30:44:e6:0d:6a:bd:29:c8:f7:
b1:86:09:74:07:88:06:cb:15:4a:ea:ca:bc:67:28:ac:15:c5:
e1:b4:48:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:24:57 2026 by rpki-client