Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
File: dkkoqXvpVTdwE9OCxilA6VDdISs.mft (raw, json)
Hash identifier: fQ1lptKQZinoC8CRsnE5G8mULv83yIMcl/qpr0jIGtU=
Subject key identifier: 4D:A0:4F:E8:BE:28:4C:2E:8D:C4:C4:3C:5C:4C:4F:6C:38:B7:59:E1
Authority key identifier: 76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
Certificate issuer: /CN=764928a97be955377013d382c62940e950dd212b
Certificate serial: 019DDC8C234F7E17D0F22697A69EC1DE11D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
Manifest number: 13C0
Signing time: Thu 30 Apr 2026 04:01:04 +0000
Manifest this update: Thu 30 Apr 2026 04:01:04 +0000
Manifest next update: Fri 01 May 2026 04:01:04 +0000
Files and hashes: 1: B7aCk0b-K5XgdvEjGdk5wXSAkDc.roa (hash: nyiUF3Zt9sMp6+mzeEZ8PMtjO/iACI+KfmNy9BotXDk=)
2: D9aUpKX2PTU1wmWHLRRqPaZtLBI.roa (hash: dH6am4VhkjdQhWRQqbXQ4D/HbErjXar5HVgXeANi9W0=)
3: Lp0vHH3sV5CmRox_CW0AyUEO49A.roa (hash: HnRMr5r2HkpjEYviPbeXFZfwzUunRvvI+wgZvCnFlCc=)
4: c6nKpma73pYWxvMGKppaadDfEFw.roa (hash: vhO0PPLdQXMMpfgBSaG37tdr8r6MbA4mP7J/LJzhZao=)
5: dkkoqXvpVTdwE9OCxilA6VDdISs.crl (hash: 18JdkGSv186SqpQ16p6S1DocPNM8T3nxS2IlFClhuik=)
6: jGSNHMpFNbQkO_PxgFvC_4Gf8QE.roa (hash: K41n6g6IzXx6vx3vFplymreUJX4uIZoX2K6TNqcNUyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dc:8c:23:4f:7e:17:d0:f2:26:97:a6:9e:c1:de:11:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764928a97be955377013d382c62940e950dd212b
Validity
Not Before: Apr 30 04:01:04 2026 GMT
Not After : May 1 04:01:04 2026 GMT
Subject: CN=4da04fe8be284c2e8dc4c43c5c4c4f6c38b759e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:77:3f:5a:84:bb:39:42:69:a6:dd:cc:d1:
79:bc:a8:41:b5:ce:81:5d:91:a6:f6:18:20:a0:46:
3d:be:f0:40:4e:e2:dd:f7:0c:7d:77:ac:3f:f4:e4:
bf:34:28:19:f3:83:01:b0:8a:30:bf:bd:6a:d4:bf:
be:11:44:33:b4:6c:3d:b6:3e:ea:ba:91:e4:c4:97:
41:45:ce:75:9e:f1:cf:27:4c:e8:65:b9:d4:e9:d0:
e2:cb:02:1d:21:13:b3:4d:06:f1:ab:0b:91:ff:5a:
d0:8a:ca:c4:f2:99:53:6d:6f:cc:81:f4:0a:39:6e:
9a:9c:0f:9a:7f:2c:f5:63:68:4f:0a:cc:5e:7b:49:
22:51:2e:bd:6a:d6:b7:60:60:6f:89:0d:6d:98:c4:
a0:d6:7f:70:09:7b:50:33:eb:e9:a6:c1:91:b3:5d:
88:a4:d2:7e:53:73:30:16:09:78:e0:a3:27:09:6b:
f5:64:92:c4:d1:9c:48:b1:8b:cc:74:ad:99:c2:f7:
3f:65:1d:a4:c6:49:36:13:19:14:9d:b5:0b:09:cb:
65:3d:59:aa:00:f2:b9:d7:57:7f:6a:42:84:d5:1c:
44:b0:3a:75:65:c6:44:0d:ef:28:ca:8d:ab:a2:7f:
fe:81:b9:b9:3f:32:b7:96:cf:c1:ca:55:3a:02:76:
8f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A0:4F:E8:BE:28:4C:2E:8D:C4:C4:3C:5C:4C:4F:6C:38:B7:59:E1
X509v3 Authority Key Identifier:
keyid:76:49:28:A9:7B:E9:55:37:70:13:D3:82:C6:29:40:E9:50:DD:21:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkkoqXvpVTdwE9OCxilA6VDdISs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9536f5-f566-4c80-a7d9-bc1522789d3b/1/dkkoqXvpVTdwE9OCxilA6VDdISs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:5d:96:84:2c:fc:fa:54:0d:b8:22:10:63:da:cb:3b:14:ae:
b0:7c:51:f2:22:0e:cf:ce:ee:0b:fa:67:d9:ab:86:ee:ed:ea:
33:96:c2:95:c2:79:90:93:82:a7:6f:13:a5:a5:de:33:dc:94:
42:4f:0f:96:15:38:5e:19:f7:3a:91:17:3a:7c:72:a4:2d:f5:
82:03:d5:de:e5:54:77:74:85:6c:e1:2f:67:36:07:6f:ce:e9:
38:ed:76:6f:59:ef:c2:fc:87:dc:7a:f0:cb:c7:8b:b6:3d:e8:
50:8f:a2:92:e7:2f:f7:73:b9:0b:19:2f:f9:0f:cd:10:7e:0c:
60:08:c3:84:ef:94:31:a0:5b:cb:fa:84:78:6d:26:aa:12:22:
e5:e1:24:8d:04:2e:d6:92:f4:6d:72:91:9f:10:c1:69:9e:d2:
a9:d7:5f:cf:cf:76:66:7d:b3:62:49:f3:ee:31:c5:3b:fb:61:
a8:83:79:dd:3c:01:61:fe:a8:a0:15:8e:fa:bc:4e:34:4e:4c:
aa:e9:1a:cd:71:d4:a7:1e:e8:55:fe:8f:f3:16:21:a9:2d:41:
41:b9:80:dc:64:48:5b:d4:ff:7c:1a:cf:a0:fb:a1:25:52:5e:
98:36:93:93:35:07:44:a1:b8:53:23:84:94:8c:61:62:c3:d6:
84:1d:c4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:48:23 2026 by rpki-client