Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: b9J4FAGujDE517hc/KAOBhi5jYvXa8752miDat0zrN0=
Subject key identifier: F6:95:EA:35:9E:F4:19:4E:B9:3F:9D:66:FA:52:D1:59:B4:FC:2C:6B
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 019D0477AEA385ECAC9DD27FD557B3A67DD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 0E49
Signing time: Thu 19 Mar 2026 05:00:45 +0000
Manifest this update: Thu 19 Mar 2026 05:00:45 +0000
Manifest next update: Fri 20 Mar 2026 05:00:45 +0000
Files and hashes: 1: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: qIHrt0OXBeJUUOSf6StBceU5YBySpXV9NZkKz2eW1WQ=)
2: Qjk3TKtSPUctHgo4rsqpoAhhjHQ.roa (hash: +v/ml2xcCnK66GfWnq2Rs0P+BnSU40/q3bgPtxOvz4M=)
3: mp8yEMYVdbdzLEoPbRdKbu2ZnSY.roa (hash: gI9M1SdX++yXCyEo0irlvSsH3VM2NKOZJf1C0XjeZPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 05:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:77:ae:a3:85:ec:ac:9d:d2:7f:d5:57:b3:a6:7d:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Mar 19 05:00:45 2026 GMT
Not After : Mar 20 05:00:45 2026 GMT
Subject: CN=f695ea359ef4194eb93f9d66fa52d159b4fc2c6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ee:b8:f4:b3:ad:90:93:85:9c:eb:33:02:d2:
8f:ea:56:e5:0c:fb:34:47:f1:0d:0a:31:4a:6d:c0:
8c:ab:9b:a8:67:67:e6:30:23:9a:f1:14:86:13:9f:
9b:4c:14:18:f3:10:c7:5f:cf:2e:5f:46:17:c4:0a:
59:1f:41:26:27:5a:07:48:f3:60:c6:5b:cc:a7:df:
20:95:65:8f:71:fa:67:f5:74:b3:a0:02:30:6c:ca:
6e:6d:ad:20:45:b7:40:a4:a5:69:df:2c:9a:c7:f8:
f9:07:b5:24:33:62:1c:e1:b0:6a:2a:9b:87:d2:f9:
c5:a5:c9:78:d2:c8:85:6d:b1:ab:cf:f6:7f:d1:1a:
32:88:1f:97:e4:e7:d5:01:e3:0e:02:6b:3f:57:52:
61:27:48:92:00:98:92:26:2f:c6:cf:8a:6e:01:e3:
ed:15:00:05:da:0e:01:5b:d3:cd:b4:f5:70:0c:1c:
c5:43:8f:80:60:c5:49:66:e9:39:8a:19:ce:c4:2c:
76:a7:e5:d9:e9:f2:f9:5b:bd:2e:0a:02:94:02:b5:
56:cb:f8:ea:fb:d3:e2:9c:30:25:ac:4d:73:20:2c:
87:12:a3:37:4a:28:91:79:17:54:67:04:bc:6c:60:
4b:6b:b4:8d:ea:0a:b3:3f:56:a2:76:50:a8:23:27:
ce:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:95:EA:35:9E:F4:19:4E:B9:3F:9D:66:FA:52:D1:59:B4:FC:2C:6B
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:d1:ed:1b:b4:46:f3:ff:88:22:27:5f:84:79:d2:97:91:8a:
b8:08:95:ab:14:70:80:45:ef:bd:4b:6c:1a:1c:c0:8a:b8:f3:
9e:10:c4:9d:b8:52:c4:db:5a:81:f7:ac:92:99:2d:e2:5a:91:
01:8b:54:0b:7e:3a:2a:76:27:5e:e7:00:f2:63:f2:bc:61:30:
7a:7d:5f:f7:ee:93:85:1a:84:b2:bd:3b:f2:d7:77:2c:dd:df:
83:71:61:70:2c:ac:16:27:4a:0e:e8:de:bc:65:a4:8b:d1:ca:
ed:89:4a:97:5f:d1:65:35:5d:09:3a:93:ad:1f:19:8c:14:8f:
4b:ef:8f:0b:67:6c:4b:57:01:ff:0f:37:ca:8e:9c:5f:33:24:
90:85:51:d2:0c:15:76:be:c7:34:92:24:f7:6c:8d:73:b1:e8:
e0:22:09:f3:3f:cc:45:35:8f:73:ab:7f:10:57:9d:96:01:9d:
c5:10:aa:86:91:2f:8f:bd:a8:69:af:c3:90:65:f1:b0:9f:b9:
a8:2b:4e:24:32:92:93:4e:92:c4:21:87:7c:a7:d0:11:8c:3b:
ed:53:1e:8a:b0:16:2d:93:b7:6e:e0:6b:c5:7e:24:6f:43:dd:
53:4b:c8:a1:4c:6d:1e:29:a7:b6:3a:8e:0b:95:29:79:6f:0e:
b5:bd:6a:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 13:51:52 2026 by rpki-client