Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: d06xW22tJeDCkOq0mfbnsIlB3Q2scqWsAwC1zzF/k3E=
Subject key identifier: 54:DA:DF:5C:92:A2:20:1C:E5:32:DA:C5:18:3D:81:99:31:6F:7B:00
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 01A113734A537272469E4C75A20E2FB8B46D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 1063
Signing time: Tue 06 Oct 2026 23:01:25 +0000
Manifest this update: Tue 06 Oct 2026 23:01:25 +0000
Manifest next update: Wed 07 Oct 2026 23:01:25 +0000
Files and hashes: 1: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: MYLKTr7IDnDSV1JIvhSuaagOS3srSKRzS4H2uQ2oT7U=)
2: Qjk3TKtSPUctHgo4rsqpoAhhjHQ.roa (hash: +v/ml2xcCnK66GfWnq2Rs0P+BnSU40/q3bgPtxOvz4M=)
3: mp8yEMYVdbdzLEoPbRdKbu2ZnSY.roa (hash: gI9M1SdX++yXCyEo0irlvSsH3VM2NKOZJf1C0XjeZPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:73:4a:53:72:72:46:9e:4c:75:a2:0e:2f:b8:b4:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Oct 6 23:01:25 2026 GMT
Not After : Oct 7 23:01:25 2026 GMT
Subject: CN=54dadf5c92a2201ce532dac5183d8199316f7b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:14:0d:96:b1:29:6c:fb:d6:20:1d:8b:ef:
bc:25:0d:e8:7f:ab:03:61:4e:57:e4:b0:f5:ed:25:
34:f8:4e:f1:da:dc:17:79:ea:93:da:a6:55:1b:91:
cb:56:43:34:cf:5f:ca:26:86:3f:6e:5d:5c:28:9c:
39:00:dd:71:02:6b:6e:38:5c:ef:4d:fb:d1:38:07:
db:f8:6a:9c:4b:e7:d3:e9:c3:fa:6d:3f:86:b5:76:
60:c2:7d:af:8c:d3:5e:6b:ee:1c:4f:90:f9:a3:9a:
06:70:7c:b1:c5:d3:b1:98:5e:00:42:90:67:bc:50:
f2:a2:75:ed:22:66:a1:34:a0:ca:ac:5c:9b:91:03:
86:48:ee:ce:7d:ef:85:96:24:3f:23:55:d7:31:06:
0b:7d:85:82:61:da:ec:78:99:46:b6:5b:3a:f0:5e:
0c:e7:d9:a4:b4:46:00:c2:97:8e:d3:c7:82:57:3c:
11:78:53:72:d6:75:36:20:ad:99:e1:be:28:b1:2d:
8a:cc:08:07:23:49:7d:48:53:8a:99:24:cc:08:82:
e8:39:b0:ef:54:9d:de:e6:3a:62:ca:06:98:1c:9d:
e3:7f:c8:1f:d5:29:fb:40:1f:2e:84:f5:41:57:6a:
c2:bf:4b:cb:d8:13:41:e8:e0:f4:32:ce:8f:b2:0b:
c1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DA:DF:5C:92:A2:20:1C:E5:32:DA:C5:18:3D:81:99:31:6F:7B:00
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:5f:66:40:a2:5c:c5:d3:5b:f4:4d:0a:2e:4f:10:78:95:b7:
5a:b5:7e:95:82:fe:f8:e6:3e:ef:99:c1:ea:6a:eb:3d:a8:4a:
21:23:1c:52:30:27:a5:14:cc:06:c9:61:68:53:05:79:97:4e:
c6:13:9f:c5:61:d5:5a:a7:a0:ca:4b:78:0d:0f:33:0f:46:57:
b5:25:ae:73:2f:40:78:1e:ae:82:80:de:33:d4:1b:51:82:e0:
91:35:f7:6d:e1:b6:6f:f2:09:50:82:7d:47:ba:17:c0:e6:14:
03:4e:89:7c:bb:28:ca:33:83:60:f8:cf:ff:8e:a4:1a:e4:8f:
da:00:ef:41:f4:ac:b5:06:95:19:3f:19:ce:0e:b2:2b:66:cb:
e6:e3:eb:18:c2:34:d3:dc:4c:de:3e:48:92:7c:6f:91:76:61:
19:82:47:41:bb:57:b7:eb:4c:3b:9b:fd:f5:f8:c8:eb:b0:7f:
63:29:cf:1c:eb:b8:b7:f5:eb:c9:08:93:0a:94:3d:4c:ea:7c:
20:43:e8:55:c1:b0:5c:21:5d:c4:2a:ee:ee:d7:b8:fc:99:25:
87:f1:e0:bb:92:95:a9:fd:43:50:6d:9e:87:42:fc:1c:ca:cd:
88:41:fa:1f:b6:25:4d:d5:47:10:6a:6f:69:ff:93:3c:35:ed:
0c:95:70:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:52:45 2026 by rpki-client