Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
File: dkcGam8eUnJLJzFHdNk2k8FV8Og.mft (raw, json)
Hash identifier: sgG1gmyqoQHwcKnh384MlR6wpVNHOkrGL2AdwK/Hg84=
Subject key identifier: A0:7F:74:39:C4:05:7B:94:26:E1:13:3E:82:C2:D3:10:8F:B6:CA:C7
Authority key identifier: 76:47:06:6A:6F:1E:52:72:4B:27:31:47:74:D9:36:93:C1:55:F0:E8
Certificate issuer: /CN=7647066a6f1e52724b27314774d93693c155f0e8
Certificate serial: 01A08A8C93E2A8D74716562BFADABA392D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:01:03 +0000
Manifest this update: Thu 10 Sep 2026 09:01:03 +0000
Manifest next update: Fri 11 Sep 2026 09:01:03 +0000
Files and hashes: 1: dkcGam8eUnJLJzFHdNk2k8FV8Og.crl (hash: Pc5Mu1M/j0pHrmsWneD5mj9j/PIwI+9ZSV/WjIZReMs=)
2: i9Nq0--gwc6aMhEBRcW9umVjIDg.asa (hash: +TjLueIMBfVDAHW/6ohVxjiAuWPC/TrJyQ1e+Bkvo8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:93:e2:a8:d7:47:16:56:2b:fa:da:ba:39:2d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7647066a6f1e52724b27314774d93693c155f0e8
Validity
Not Before: Sep 10 09:01:03 2026 GMT
Not After : Sep 11 09:01:03 2026 GMT
Subject: CN=a07f7439c4057b9426e1133e82c2d3108fb6cac7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:97:36:b4:6b:e5:02:d5:c9:07:57:fc:10:
20:8a:1e:8c:4d:f9:81:02:ec:02:7c:63:58:e2:f4:
45:d8:f5:49:70:cc:26:31:bc:fe:25:55:d6:cb:93:
40:a7:7d:59:e6:54:e0:22:9b:45:cf:ff:c4:82:e4:
72:82:88:0f:65:b4:c3:96:51:65:6d:36:6a:59:66:
ad:d2:d9:d2:30:37:34:24:11:f1:86:0a:3b:2b:50:
0a:22:d1:ab:eb:02:81:c9:96:c5:f5:fa:e3:64:29:
e1:38:b0:3f:d9:83:ba:04:cf:b7:c1:ad:41:d0:50:
00:47:8d:9e:1b:67:aa:5f:47:75:3a:97:2f:72:6d:
ef:a0:f4:de:38:34:6e:64:c9:79:cf:da:ef:79:d8:
4f:28:e9:98:82:af:f7:00:4d:4a:d6:b2:66:0c:71:
86:ba:d6:8b:9c:73:7d:7d:76:18:77:6e:d5:11:74:
2c:a2:53:47:16:2e:11:d7:e1:a9:fe:b6:fc:b9:3b:
12:00:2f:ba:e3:47:4f:25:77:a3:1b:87:c5:93:a5:
bd:0f:69:ea:f1:20:7f:00:03:05:a5:5d:5f:78:52:
71:52:c2:1d:7a:14:4e:8b:c6:5a:fe:8d:c3:41:03:
5e:f5:8b:cc:96:7e:3a:4d:6f:cb:ce:87:df:f6:94:
7a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7F:74:39:C4:05:7B:94:26:E1:13:3E:82:C2:D3:10:8F:B6:CA:C7
X509v3 Authority Key Identifier:
keyid:76:47:06:6A:6F:1E:52:72:4B:27:31:47:74:D9:36:93:C1:55:F0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:9c:36:fb:d9:2f:40:2b:ac:f3:8c:88:fd:ce:ab:8f:81:24:
6d:fe:0a:fa:f7:e7:ad:33:1b:00:d9:f2:b7:c1:35:79:69:41:
5b:d0:23:4b:47:8b:e0:8a:0f:a3:da:be:7b:9f:e1:1c:dd:4f:
bc:a6:f0:6f:38:3a:71:f0:70:44:2b:ad:d9:2b:02:5d:2d:b5:
70:1a:ab:6e:66:8c:ae:ed:d3:1f:2a:c4:24:91:f6:c2:f2:84:
70:4e:2c:44:ec:88:9e:e0:3b:9c:8b:74:38:60:ed:dc:98:d0:
6b:be:58:d9:16:c6:e6:49:04:0c:12:94:16:0f:0a:be:39:d4:
12:48:7a:b6:21:fc:03:bc:4b:e9:a7:75:d8:ad:74:45:07:f1:
f2:80:64:78:ba:85:ea:54:40:ff:85:1f:b4:6c:9f:27:ba:f9:
20:23:8c:16:98:6f:fc:2e:ed:3c:e6:9a:61:39:67:ed:53:f4:
4d:30:80:99:07:9f:cc:67:18:de:84:a5:ed:72:03:1c:78:f8:
e3:aa:ce:4d:3b:2b:c0:32:63:9d:01:5f:4a:89:48:36:97:fc:
f7:e0:6f:7f:ab:ad:0d:fc:0f:e0:b6:90:41:ce:2e:5f:fc:76:
fc:f8:8f:45:4f:2f:b0:6b:db:b6:65:6e:6b:0a:84:08:4c:6a:
dc:0c:53:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:52:15 2026 by rpki-client