Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: 5drdFhIG7REd75LFucRnIL/hSgKBsNaKSwgTnvGLP6Q=
Subject key identifier: 1F:15:FD:8F:4E:10:1A:84:3C:5C:C6:7D:2F:84:2A:52:3C:59:57:48
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 01A1174F6CA80CC08E6C7CC5DA2B89FA41B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 1065
Signing time: Wed 07 Oct 2026 17:00:43 +0000
Manifest this update: Wed 07 Oct 2026 17:00:43 +0000
Manifest next update: Thu 08 Oct 2026 17:00:43 +0000
Files and hashes: 1: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: 5utWDfK1rQd9x/05BQ6i/e5uIwvd0F1a6vm6LciVO6g=)
2: Qjk3TKtSPUctHgo4rsqpoAhhjHQ.roa (hash: +v/ml2xcCnK66GfWnq2Rs0P+BnSU40/q3bgPtxOvz4M=)
3: mp8yEMYVdbdzLEoPbRdKbu2ZnSY.roa (hash: gI9M1SdX++yXCyEo0irlvSsH3VM2NKOZJf1C0XjeZPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:4f:6c:a8:0c:c0:8e:6c:7c:c5:da:2b:89:fa:41:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Oct 7 17:00:43 2026 GMT
Not After : Oct 8 17:00:43 2026 GMT
Subject: CN=1f15fd8f4e101a843c5cc67d2f842a523c595748
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:57:44:1b:3b:f5:29:32:19:98:28:04:9b:
db:c8:22:df:93:5f:83:0f:1f:7f:54:ba:b0:af:a9:
1a:e3:3f:10:e3:01:28:76:2b:df:0f:d2:d1:52:c0:
c0:78:d8:50:14:7c:c7:d4:54:b6:67:b8:06:b2:11:
32:16:19:31:c1:ba:81:eb:f6:b6:86:75:9f:3e:f5:
4f:d0:ee:1f:b9:d2:6d:09:6f:09:73:c5:d0:b6:41:
b6:02:8c:9e:38:c6:d9:86:2c:eb:68:99:f2:ff:41:
d3:56:37:62:46:a2:f2:3c:c0:dd:bc:74:0d:c2:a7:
4f:bd:76:05:28:f7:53:20:60:b6:66:0a:29:47:10:
65:bc:38:e0:4b:60:86:91:7e:85:5e:73:ac:70:ca:
8a:60:86:aa:69:a6:d5:06:f0:46:55:ae:eb:c7:63:
76:02:38:fd:db:4a:2e:01:85:f3:2c:c0:ef:a1:8e:
f8:f8:59:9d:14:d8:3f:6b:fe:12:c3:f0:3a:92:d0:
d4:1d:17:38:68:0f:6f:1f:33:90:70:c1:4f:23:29:
b6:c6:29:64:5c:7b:3e:10:af:a0:ec:ba:28:65:ad:
8d:cf:13:98:fe:92:45:88:dd:2d:ca:6e:4c:73:da:
6d:11:89:0d:33:c9:1e:3c:20:ba:f0:b9:1e:18:29:
72:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:15:FD:8F:4E:10:1A:84:3C:5C:C6:7D:2F:84:2A:52:3C:59:57:48
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:e5:bb:2e:6b:6a:cc:cb:04:7e:77:2f:94:13:3f:4e:62:2a:
29:8b:d6:cd:0e:39:9a:03:8c:ba:20:83:50:31:63:c5:93:f6:
cd:e7:83:68:e5:0f:19:42:ba:85:1c:be:27:8d:9a:9c:ad:02:
92:2f:55:79:e9:3f:50:4c:ad:9c:75:eb:12:6b:36:66:89:62:
77:d1:77:33:cb:9a:09:64:2d:ba:4f:c6:90:02:61:83:07:1d:
e8:32:f7:16:27:a3:d0:b8:d1:28:e7:cd:8d:d8:a3:97:bb:f1:
2e:2b:5e:dc:6d:5b:80:05:81:52:cf:ca:a1:e0:01:b5:78:c5:
b1:30:e2:07:86:f7:bc:1c:bc:d9:ea:ee:09:22:fe:12:fd:bb:
77:10:5e:41:cf:32:c3:29:fa:82:8e:91:53:dd:be:4a:06:cf:
bf:b4:a5:47:a0:7d:25:b0:c4:a4:cd:ac:52:73:4f:82:b1:91:
5a:24:12:b7:f5:1a:f0:4f:5c:89:03:4b:3a:a5:2e:32:eb:c4:
2f:83:a8:e5:f0:0a:3a:ec:d3:f7:59:cc:0d:17:b6:d5:19:3f:
62:36:91:10:3e:c3:22:4d:10:8d:26:70:7d:62:0d:56:e5:72:
90:58:da:db:9e:7f:12:9f:ee:d0:d5:ab:cc:38:bb:55:d9:c2:
a9:4b:34:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 21:38:26 2026 by rpki-client