Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json)
Hash identifier: DG9AqD9YMraMKff+xqkKCaywhKyhVTIV1ID7aC9MP1M=
Subject key identifier: 04:91:E9:59:D2:B0:07:FE:DC:CA:C3:56:42:FC:50:08:7C:6F:FC:9D
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial: 01A13DEECDB87AFCCD1DC7DBD23A728B59C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 05:00:22 +0000
Manifest this update: Thu 15 Oct 2026 05:00:22 +0000
Manifest next update: Fri 16 Oct 2026 05:00:22 +0000
Files and hashes: 1: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: YqN2i41v5W+rU2DFJU/aBKQYBbTQl3LPiG2Xd/Oo9a0=)
2: _Myr3fZN1tCVYld8vCIdG7V1e8k.roa (hash: UdvBEvfyvQ6h8H0q4zyZtW4WPV4vjg0onxiSmal+y2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:cd:b8:7a:fc:cd:1d:c7:db:d2:3a:72:8b:59:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Validity
Not Before: Oct 15 05:00:22 2026 GMT
Not After : Oct 16 05:00:22 2026 GMT
Subject: CN=0491e959d2b007fedccac35642fc50087c6ffc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f0:92:7e:d4:66:2c:d9:4b:5e:f9:a9:24:03:
d2:ff:47:25:a2:ec:75:0c:97:21:85:84:dd:34:4d:
59:c5:ad:13:74:c4:a7:cd:fb:ae:9d:dc:7f:03:6a:
87:d9:a2:cb:fb:1a:93:a5:75:dd:ae:a0:c6:58:38:
60:b4:e5:4c:9d:bd:aa:0f:d2:2b:68:d9:18:06:58:
94:eb:ad:76:de:a4:01:45:82:30:3d:0f:3b:dd:77:
a7:0a:b9:f0:eb:de:ef:08:ea:65:d2:0f:fc:94:1e:
28:23:6d:66:4e:55:8b:fb:2a:93:e2:3b:be:77:0d:
b7:b2:63:78:10:60:dc:73:4e:01:51:8b:82:38:7a:
dd:f4:3f:24:e0:ec:d2:aa:e1:2d:c3:d4:18:9d:37:
e5:ae:4a:da:dd:78:91:36:09:5d:b9:4f:46:ac:6e:
f2:86:e0:dc:7f:58:dc:3d:36:f4:c3:dc:8e:c2:e7:
51:68:84:c4:69:9c:46:16:1f:54:39:57:e2:f2:c2:
e7:92:10:33:d4:68:98:ed:2e:3d:7c:a4:fa:40:0d:
5a:ce:26:2d:ec:0d:0c:3e:5d:b5:e6:eb:f3:ad:56:
d4:05:53:a7:26:29:f0:ce:5f:de:50:53:dd:2b:77:
8e:e8:2c:f3:74:fd:79:ff:7a:29:79:93:da:12:7b:
2b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:91:E9:59:D2:B0:07:FE:DC:CA:C3:56:42:FC:50:08:7C:6F:FC:9D
X509v3 Authority Key Identifier:
keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:bf:97:b9:a0:ee:6f:5e:3d:0a:0c:bc:32:bd:19:06:10:d8:
ee:eb:3b:6c:86:95:2e:db:fd:26:c7:3e:60:d4:dc:82:7a:cb:
07:03:a7:3a:9b:72:07:2e:3b:ff:14:9d:ca:c1:c6:45:8c:00:
d4:a1:29:f3:bf:4e:91:40:b5:2c:fe:2f:48:45:90:92:dd:5c:
24:c9:94:1b:3b:0f:e5:b6:d2:96:80:38:fe:2a:0b:0b:8b:f3:
5b:07:b6:65:9b:e8:6d:49:06:92:eb:26:75:ef:2f:47:46:b7:
94:33:53:25:6a:0f:af:8a:96:56:a3:a0:7e:a4:37:28:83:38:
8c:2f:a8:55:74:01:ce:d5:9f:7b:8c:75:96:dc:96:8f:14:11:
a1:c8:1c:75:b6:0b:f7:34:55:ee:1c:b4:28:aa:01:2a:0f:98:
ed:71:d7:ce:cd:d3:35:30:28:ce:56:ef:e1:48:02:21:24:db:
36:92:3e:be:bb:23:8d:4a:f8:f7:64:ac:c0:81:4b:91:a8:11:
1c:91:30:1f:dc:6a:e4:3f:d6:35:94:4e:fc:6d:61:b0:af:d7:
6e:c8:20:fe:14:5d:e1:ef:cf:79:68:08:5d:68:74:ec:8e:eb:
c1:43:31:e6:fa:26:84:21:9e:c1:2f:b5:b0:9b:6f:4d:83:e8:
72:82:73:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:29:05 2026 by rpki-client