Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: QDpcnoRPHvwDvRiw3fjDO2hBsIE47JgQw/+ywIUlbt0=
Subject key identifier: 97:08:22:31:C9:EC:51:6D:9D:9D:B4:4E:65:4C:59:32:88:59:E5:46
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 019EFA940F414AF18615F2512E16256B04E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 0F4D
Signing time: Wed 24 Jun 2026 17:01:07 +0000
Manifest this update: Wed 24 Jun 2026 17:01:07 +0000
Manifest next update: Thu 25 Jun 2026 17:01:07 +0000
Files and hashes: 1: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: +9CaMkMbhPzi9oQLm5JpQLEk9bwXWi7hMSH2CfXjRxw=)
2: Qjk3TKtSPUctHgo4rsqpoAhhjHQ.roa (hash: +v/ml2xcCnK66GfWnq2Rs0P+BnSU40/q3bgPtxOvz4M=)
3: mp8yEMYVdbdzLEoPbRdKbu2ZnSY.roa (hash: gI9M1SdX++yXCyEo0irlvSsH3VM2NKOZJf1C0XjeZPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:94:0f:41:4a:f1:86:15:f2:51:2e:16:25:6b:04:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Jun 24 17:01:07 2026 GMT
Not After : Jun 25 17:01:07 2026 GMT
Subject: CN=97082231c9ec516d9d9db44e654c59328859e546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c3:e2:89:4b:02:c7:83:41:7c:19:c8:2b:65:
84:79:d8:a3:68:0e:9e:84:39:5f:d9:40:c1:0e:67:
93:c0:51:7d:57:0c:15:14:40:a0:c8:ec:ad:ef:c2:
e1:e8:d0:6f:bf:32:cc:02:d9:6a:ad:e2:fa:f5:f4:
5e:a2:0c:c6:f6:8b:e6:5c:ed:33:e0:01:c9:ef:3e:
8a:2b:15:ed:82:af:4d:73:d9:6a:a2:3f:bc:06:2f:
28:c7:c2:0d:3c:7c:96:62:76:92:2e:3d:b7:e6:bb:
f0:58:52:9d:b8:e1:7f:9a:16:eb:d6:f5:40:86:45:
b7:f0:ca:69:cb:68:37:4c:44:a7:99:4e:e3:81:cc:
75:29:67:74:5c:21:0a:24:49:19:b6:54:19:3a:e3:
72:3e:45:30:f0:31:18:e3:3d:05:d5:cd:a7:e4:22:
dc:b1:ae:aa:9a:b9:39:74:d4:12:d2:69:60:a3:68:
71:58:45:13:ec:fc:b9:63:7e:85:21:6a:6d:0b:da:
11:cb:7b:49:a0:40:d9:40:ed:3b:a9:32:d6:9f:2a:
44:da:e0:dd:a8:5a:3e:ed:3b:7e:01:b1:81:05:8f:
e5:ec:07:f5:9b:75:e9:68:66:e4:d8:ff:42:64:9f:
c5:bc:f0:3d:f4:20:a1:64:72:d6:d8:74:7d:69:15:
14:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:08:22:31:C9:EC:51:6D:9D:9D:B4:4E:65:4C:59:32:88:59:E5:46
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b2:4b:e6:65:d1:77:a5:56:6a:08:51:48:1f:99:a1:c5:3b:
f8:5a:44:77:a8:16:1c:5e:39:5e:67:42:eb:80:c1:b5:a0:80:
34:60:16:76:ea:9c:c3:a2:af:6d:04:a6:d4:f6:3d:d3:fb:8f:
7c:80:3a:3a:64:b0:7a:7a:07:b8:a0:44:c0:7d:b4:d1:43:e9:
58:b6:21:0a:e7:96:5a:62:58:13:d4:e8:9c:7d:fc:a6:8b:8f:
91:45:4c:03:4b:aa:ac:21:1a:20:e7:05:c3:2d:db:01:5d:97:
05:88:29:86:48:1f:30:5d:11:bd:43:6d:93:2b:1b:f7:85:90:
87:5f:b6:ab:e0:91:71:3d:70:ef:10:ad:84:73:70:5d:4b:80:
ef:9e:bf:2e:1d:52:fc:d4:36:8c:63:4f:e8:8b:25:cc:8e:41:
fe:52:a6:07:30:eb:b1:22:d9:4d:12:eb:a6:4f:50:7b:bd:96:
02:b9:83:e5:53:7a:33:c7:72:41:6b:e7:7e:15:c9:2c:98:59:
c2:85:5d:bc:26:ec:3e:f1:28:a1:e9:0d:0a:e1:f3:b5:54:89:
6c:0a:68:46:e9:31:67:ea:d3:4e:ea:6f:73:c5:5d:75:ea:fa:
55:0d:43:24:a9:b8:c5:9c:28:7a:b9:48:23:51:8a:0a:a4:e1:
9a:f3:85:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ76lA9BSvGGFfJRLhYlawTnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjYWE4ODQwZTUzYmI5NjViZTUxOTJjODViNzQwMzQ1ZTdh
MDY1MmMwHhcNMjYwNjI0MTcwMTA3WhcNMjYwNjI1MTcwMTA3WjAzMTEwLwYDVQQD
Eyg5NzA4MjIzMWM5ZWM1MTZkOWQ5ZGI0NGU2NTRjNTkzMjg4NTllNTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMPiiUsCx4NBfBnIK2WEedijaA6e
hDlf2UDBDmeTwFF9VwwVFECgyOyt78Lh6NBvvzLMAtlqreL69fReogzG9ovmXO0z
4AHJ7z6KKxXtgq9Nc9lqoj+8Bi8ox8INPHyWYnaSLj235rvwWFKduOF/mhbr1vVA
hkW38Mppy2g3TESnmU7jgcx1KWd0XCEKJEkZtlQZOuNyPkUw8DEY4z0F1c2n5CLc
sa6qmrk5dNQS0mlgo2hxWEUT7Py5Y36FIWptC9oRy3tJoEDZQO07qTLWnypE2uDd
qFo+7Tt+AbGBBY/l7Af1m3XpaGbk2P9CZJ/FvPA99CChZHLW2HR9aRUUnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJcIIjHJ7FFtnZ20TmVMWTKIWeVGMB8GA1UdIwQY
MBaAFAyqiEDlO7llvlGSyFt0A0XnoGUsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3Mzgt
YzQ0ZGRmZmE2OWFiLzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9jNjdjM2UtNDVjNi00YzgxLTk3MzgtYzQ0ZGRmZmE2OWFi
LzEvREtxSVFPVTd1V1ctVVpMSVczUURSZWVnWlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7JL5mXR
d6VWaghRSB+ZocU7+FpEd6gWHF45XmdC64DBtaCANGAWduqcw6KvbQSm1PY90/uP
fIA6OmSwenoHuKBEwH200UPpWLYhCueWWmJYE9TonH38pouPkUVMA0uqrCEaIOcF
wy3bAV2XBYgphkgfMF0RvUNtkysb94WQh1+2q+CRcT1w7xCthHNwXUuA756/Lh1S
/NQ2jGNP6IslzI5B/lKmBzDrsSLZTRLrpk9Qe72WArmD5VN6M8dyQWvnfhXJLJhZ
woVdvCbsPvEooekNCuHztVSJbApoRukxZ+rTTupvc8Vdder6VQ1DJKm4xZwoerlI
I1GKCqThmvOFlA==
-----END CERTIFICATE-----
Generated at Wed Jun 24 22:19:36 2026 by rpki-client