Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
File: DkTxM_OHWTqvor6rOIhJBPrJvRk.mft (raw, json)
Hash identifier: HWWfV+G6kl++/JCiu44qmeJUPDxruLpPu//ya4aeGwI=
Subject key identifier: 32:08:03:BB:F0:7B:2B:62:18:F3:E0:DC:0D:78:EA:64:D9:AE:44:8E
Authority key identifier: 0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
Certificate issuer: /CN=0e44f133f387593aafa2beab38884904fac9bd19
Certificate serial: 01A00093E8F49EE471EE1FE5D886F13A3BB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
Manifest number: 068C
Signing time: Fri 14 Aug 2026 14:01:28 +0000
Manifest this update: Fri 14 Aug 2026 14:01:28 +0000
Manifest next update: Sat 15 Aug 2026 14:01:28 +0000
Files and hashes: 1: DkTxM_OHWTqvor6rOIhJBPrJvRk.crl (hash: b+wVx+VoTBqh4yKeLSr0CdJ0rQeJDa+CtrNyabkEDGE=)
2: Zu63Ow6HIL-cM_My8KJ_oXolMPU.roa (hash: wpqllHKhhs+9B3WcGLDKMWL4IN9CvMn3Xo3gy5XniVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 14:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:93:e8:f4:9e:e4:71:ee:1f:e5:d8:86:f1:3a:3b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e44f133f387593aafa2beab38884904fac9bd19
Validity
Not Before: Aug 14 14:01:28 2026 GMT
Not After : Aug 15 14:01:28 2026 GMT
Subject: CN=320803bbf07b2b6218f3e0dc0d78ea64d9ae448e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e0:48:2b:81:ed:7b:8b:2f:f2:41:40:be:b2:
2f:fd:8a:7d:e3:ec:9e:d3:0a:4d:bd:dc:6b:48:11:
2d:88:3f:71:e5:d9:c6:8f:30:b6:91:de:64:1d:c3:
3b:6a:53:8e:7b:76:5b:4e:26:67:ee:f3:ee:40:1e:
3f:d7:cb:b6:ee:b1:16:b1:6b:b9:1c:30:f2:32:5b:
9e:67:7e:21:ed:9d:4b:29:81:21:bb:57:cf:18:d6:
22:82:e8:9c:8f:7a:93:b3:42:e3:9e:dd:3e:f0:91:
b7:47:b9:01:29:d4:3f:fb:5e:f9:0e:46:dc:73:52:
c9:e6:2f:6e:0c:b4:43:68:e2:73:70:2f:4e:2e:60:
87:40:8a:cc:38:b7:39:d3:73:52:5e:3d:7e:c3:83:
11:82:b7:38:3a:4c:c8:83:d3:b0:ce:06:e2:ca:d7:
e7:0a:b8:30:d2:58:c9:7e:77:84:3e:42:04:14:5a:
dc:0b:95:35:89:43:5c:e1:24:84:6b:56:e3:a0:b7:
85:5a:43:92:b7:a4:54:da:03:68:bf:73:b4:59:c7:
4e:c8:94:ca:4c:64:58:d9:df:d1:a9:2e:ab:be:15:
6b:18:c3:a5:21:41:0a:45:86:15:c9:22:c7:44:02:
ba:9a:c0:11:49:3b:53:e6:fb:5d:06:4b:c3:bd:04:
f6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:08:03:BB:F0:7B:2B:62:18:F3:E0:DC:0D:78:EA:64:D9:AE:44:8E
X509v3 Authority Key Identifier:
keyid:0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:c8:7f:e8:2c:56:36:b3:c7:f7:26:1a:91:0a:71:00:26:df:
9e:39:85:5c:4a:c6:7d:03:98:8c:a3:3d:a6:c6:a4:f2:33:ba:
be:8b:f7:31:b0:cf:db:98:64:b7:f7:11:2b:3d:ff:50:49:d8:
de:80:32:48:02:dd:81:ef:c3:fa:de:c8:02:60:74:4f:65:20:
0d:09:25:6b:05:eb:28:19:a3:89:86:f0:7c:ee:a9:8b:80:ce:
a3:0f:cb:e2:e0:ad:13:77:2b:7c:aa:f5:7b:d0:dc:d1:23:ed:
8b:6b:2e:75:26:e0:7b:e3:ea:ca:8a:fe:6c:fb:c9:d3:90:94:
1a:22:ac:9e:64:7b:57:7a:0a:8b:8c:8a:5c:52:48:a4:15:d3:
b8:79:e4:78:3c:4a:51:12:83:66:c7:8a:87:8f:ef:99:cf:a4:
1f:28:e7:03:48:79:84:4b:09:98:c9:5b:65:a5:0f:76:bf:1f:
d3:ff:f5:fc:16:c4:b6:96:82:5a:4c:11:eb:16:bb:ca:8c:03:
90:a4:e2:c3:4e:a4:a1:a8:df:15:1e:a7:9a:c8:ff:5b:37:c2:
1b:0a:ff:db:7f:16:30:ed:ee:fe:9f:5e:fd:fa:9e:06:a4:02:
4a:23:7e:10:93:d5:65:42:bd:23:23:b6:f0:32:22:c6:31:19:
e3:3f:5d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:32:21 2026 by rpki-client