Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
File: dkcGam8eUnJLJzFHdNk2k8FV8Og.mft (raw, json)
Hash identifier: 7lmw/aduvKn9OL9rTTW6vYeSoOyO6LLVkXEkk9PUGUk=
Subject key identifier: 1F:57:3F:A9:02:A4:95:94:5A:1C:7B:09:61:86:CA:F2:93:91:BE:B4
Authority key identifier: 76:47:06:6A:6F:1E:52:72:4B:27:31:47:74:D9:36:93:C1:55:F0:E8
Certificate issuer: /CN=7647066a6f1e52724b27314774d93693c155f0e8
Certificate serial: 01A18977C38565495F7E034D5779CA6634AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
Manifest number: 0145
Signing time: Thu 29 Oct 2026 21:01:29 +0000
Manifest this update: Thu 29 Oct 2026 21:01:29 +0000
Manifest next update: Fri 30 Oct 2026 21:01:29 +0000
Files and hashes: 1: dkcGam8eUnJLJzFHdNk2k8FV8Og.crl (hash: 5aCR/f8eIleRRvVTr4b2pfxSW7dobTFZlVOvhLVfT44=)
2: i9Nq0--gwc6aMhEBRcW9umVjIDg.asa (hash: +TjLueIMBfVDAHW/6ohVxjiAuWPC/TrJyQ1e+Bkvo8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 14:12:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:89:77:c3:85:65:49:5f:7e:03:4d:57:79:ca:66:34:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7647066a6f1e52724b27314774d93693c155f0e8
Validity
Not Before: Oct 29 21:01:29 2026 GMT
Not After : Oct 30 21:01:29 2026 GMT
Subject: CN=1f573fa902a495945a1c7b096186caf29391beb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:25:9c:b6:e7:c7:b4:14:35:be:a1:29:ea:68:
89:be:b8:9d:7b:40:18:f1:9a:3f:b4:69:67:d9:87:
92:82:39:52:84:d1:0a:09:8d:f2:4e:3b:d3:9f:90:
bd:ba:05:4f:19:a4:93:31:7f:74:72:c1:6a:08:f0:
45:75:13:b3:cb:99:78:96:d6:22:eb:d0:00:a4:7a:
9d:8f:cf:f5:67:fa:58:01:15:16:eb:d9:13:a1:2c:
f1:db:32:9b:ed:19:f9:b3:55:7e:d9:26:23:39:a5:
2f:b3:f7:f9:e3:41:39:c7:65:cb:b9:45:5f:fa:09:
9f:32:b6:a7:b5:19:13:44:fe:1b:f6:75:24:eb:8c:
cd:34:65:fe:2a:f2:77:2e:6b:bd:c1:0b:3e:c6:7a:
b5:b5:cb:e3:83:32:4e:1d:eb:13:ad:02:58:dd:15:
a7:0f:4e:95:4c:26:69:7b:d0:cf:47:fb:24:c4:71:
bf:d7:fa:62:dd:aa:11:ad:1c:37:f9:cb:17:8d:43:
26:ab:86:b8:19:34:e5:4a:56:b4:16:ba:27:ac:a3:
96:2f:11:3a:50:85:81:5b:8e:23:7b:77:8d:9f:81:
3a:bb:6f:f9:67:fc:c1:c7:e3:9a:af:15:90:9b:48:
90:6a:86:80:17:02:06:90:5a:3b:b4:b4:3e:9f:f4:
7e:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:57:3F:A9:02:A4:95:94:5A:1C:7B:09:61:86:CA:F2:93:91:BE:B4
X509v3 Authority Key Identifier:
keyid:76:47:06:6A:6F:1E:52:72:4B:27:31:47:74:D9:36:93:C1:55:F0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:83:b5:51:58:23:33:9e:fa:53:7c:35:92:ea:1a:37:3f:a6:
93:bb:b4:3a:73:2e:09:a3:db:7b:e8:52:f5:0d:11:cf:46:61:
6b:62:93:17:ff:e6:85:ac:10:5f:90:c6:34:c0:0a:4d:bf:95:
88:cd:5f:12:48:64:98:78:23:e2:17:c7:7d:d1:6b:12:0d:7a:
d8:1c:36:d1:6d:27:4c:6c:e1:8d:2f:27:d2:8f:6d:80:eb:a7:
d9:71:e7:d9:52:16:13:1f:19:de:34:df:0e:c9:2b:f8:4a:1b:
b3:b9:35:07:ad:56:9e:a3:f3:5a:a5:51:02:bd:29:43:eb:23:
c3:46:c4:7d:c4:0c:cd:90:71:63:e6:d7:08:ec:e4:08:00:9d:
bf:80:6c:f7:90:7c:03:23:4a:ec:de:89:4b:87:e2:34:42:c8:
f5:26:52:fb:96:c1:e6:ba:30:eb:54:ff:a0:b8:78:f4:cd:72:
a9:22:b1:ee:d5:30:5d:4d:45:e2:a6:f7:65:b3:82:34:66:9b:
f0:17:ae:5b:8e:ba:77:1c:ba:6b:7e:f1:81:a1:eb:62:38:bc:
7a:e5:3c:20:c4:38:e1:81:d7:43:b4:63:40:d9:f7:0c:e3:66:
0f:62:1d:f6:cc:36:b0:5c:e8:49:68:9e:b7:df:36:70:24:2c:
bd:cc:cd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 23:53:24 2026 by rpki-client