Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
File: dcqtndM2-CAZCTaTYHy57S-ZDXE.mft (raw, json)
Hash identifier: /klatM06Q/JwQf4f+NadwTBK4XQD+xzNLs1ymrGYTdo=
Subject key identifier: CB:F5:72:4F:55:1A:CC:32:DE:9C:AC:8E:21:00:3F:2D:9B:6A:69:87
Authority key identifier: 75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71
Certificate issuer: /CN=75caad9dd336f82019093693607cb9ed2f990d71
Certificate serial: 019F38984755F7E0F0C2B0366DCED8E8AEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
Manifest number: 12
Signing time: Mon 06 Jul 2026 18:02:11 +0000
Manifest this update: Mon 06 Jul 2026 18:02:11 +0000
Manifest next update: Tue 07 Jul 2026 18:02:11 +0000
Files and hashes: 1: dcqtndM2-CAZCTaTYHy57S-ZDXE.crl (hash: Khg1rqbp5gNKnKjE1mnuMxolUhnSVmqk8N6vsdOkWQc=)
2: wDVVsACpsiR5l1cTOi-d9O7OwNM.roa (hash: brl42J6QrRGQ7zMiwW/xpTyzUuzmwf2YtA561oH5iPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:98:47:55:f7:e0:f0:c2:b0:36:6d:ce:d8:e8:ae:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caad9dd336f82019093693607cb9ed2f990d71
Validity
Not Before: Jul 6 18:02:11 2026 GMT
Not After : Jul 7 18:02:11 2026 GMT
Subject: CN=cbf5724f551acc32de9cac8e21003f2d9b6a6987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:64:b2:70:aa:81:53:da:dc:d5:f9:ad:2b:
68:bc:c2:67:cf:be:c2:80:5b:21:0f:a8:75:b9:b6:
59:19:fe:68:d0:99:cd:98:63:81:32:f7:92:9c:2c:
43:3a:f3:9d:20:21:1f:49:0b:58:3c:23:27:73:c0:
55:f6:f0:e2:a6:2e:8d:28:1e:12:90:d0:fe:50:4b:
46:8f:89:14:19:3f:55:4f:82:0d:99:28:2d:c2:c1:
3a:19:5f:4f:48:62:f9:ab:e0:eb:b2:d8:cb:ff:49:
db:ef:48:86:d5:e0:c3:08:a8:16:b6:c9:ab:51:7e:
3a:2e:33:8c:1c:ed:97:5d:04:7c:e4:47:a6:35:52:
a3:06:88:2c:4e:0d:b1:fc:af:fe:3e:da:f6:d5:b4:
d9:70:64:83:ba:28:57:6c:be:02:78:18:da:1b:2c:
0d:35:f2:0a:4e:f2:b1:26:44:d7:12:17:dc:9c:d9:
47:fc:21:94:8d:54:6d:bc:b1:c2:7a:fd:ef:61:4a:
49:01:ef:55:e9:55:2d:57:17:af:51:d2:d6:13:16:
0e:9d:20:b6:db:fe:b3:01:96:fa:2e:fc:5d:8e:1e:
42:fa:24:a9:f5:95:2c:32:54:26:1b:3c:af:3e:7c:
5e:6b:be:dc:66:c3:2c:f1:f8:04:88:70:61:82:2e:
c0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F5:72:4F:55:1A:CC:32:DE:9C:AC:8E:21:00:3F:2D:9B:6A:69:87
X509v3 Authority Key Identifier:
keyid:75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:05:78:e6:b3:46:66:dc:3d:0c:2d:2c:d4:2b:37:ad:20:6c:
3f:e5:38:d1:ba:73:b0:3d:f3:61:e7:f0:95:f2:38:6e:e7:40:
1f:4a:4c:48:de:ad:d8:51:f3:3e:69:fd:73:3a:f1:6b:a7:ed:
f3:13:5f:3d:d3:31:f7:ed:84:cd:50:16:c9:ff:2c:72:83:17:
fc:b8:a2:c7:13:29:bb:b3:36:f6:08:6b:c9:f0:a7:a2:0e:e6:
68:82:d8:2a:fd:2a:57:f8:e5:e9:8b:f0:d3:b3:85:cd:9a:f0:
ac:ad:59:c0:01:30:68:7e:70:0a:3a:a3:15:64:ec:96:19:bf:
50:2d:31:9d:88:ed:66:7a:13:42:e1:70:b6:97:21:65:52:dd:
78:3b:03:1c:8a:c0:6f:02:5e:05:b4:91:09:be:11:f0:82:98:
97:05:32:32:b8:d1:42:22:0a:1e:f0:8b:dd:57:9d:bf:f6:8b:
d9:7d:70:bb:71:6a:7f:91:a0:41:df:86:b5:4c:7a:68:cb:15:
4d:89:4b:18:58:36:27:f7:2b:2f:23:0f:15:f4:3f:2b:20:bb:
f5:c8:c9:1c:39:b1:d5:21:f5:50:3d:fb:9e:92:6e:55:ff:98:
ac:a3:52:7d:c3:b2:60:67:aa:3d:23:a4:ea:cd:2f:f1:b4:69:
fe:1f:87:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 23:17:28 2026 by rpki-client