Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
File: DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft (raw, json)
Hash identifier: f2Pv7dLyX8j59BPmyuMMwgKpD2Avm2wqpw+CBQrw0EA=
Subject key identifier: 09:8A:EF:85:BA:92:8F:61:8A:FE:2A:F6:36:3D:89:AE:DE:AB:63:72
Authority key identifier: 0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
Certificate issuer: /CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Certificate serial: 019F1830C2CC70D0E3A657AD4E68053068EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
Manifest number: 106D
Signing time: Tue 30 Jun 2026 11:01:16 +0000
Manifest this update: Tue 30 Jun 2026 11:01:16 +0000
Manifest next update: Wed 01 Jul 2026 11:01:16 +0000
Files and hashes: 1: DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl (hash: u+ZB1PmvQABxkEqrO3j/+tXRNGys/PlcPFwfXe91O6g=)
2: pEi1sXolFr3_KzzGy9GgxCb35YI.roa (hash: 0hWxK4UVYjDavdDARBqtyWujMUcunhSXg8YFegPVy8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:c2:cc:70:d0:e3:a6:57:ad:4e:68:05:30:68:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cfe1058a31e3c1894bcf064c7e8370bba6cf8e4
Validity
Not Before: Jun 30 11:01:16 2026 GMT
Not After : Jul 1 11:01:16 2026 GMT
Subject: CN=098aef85ba928f618afe2af6363d89aedeab6372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:98:2f:41:9f:83:dd:ee:76:e7:53:d8:3a:44:
32:08:86:00:bc:f8:a6:f3:25:cf:f0:a2:94:cd:ff:
28:82:22:42:9a:16:16:e6:61:eb:f9:55:b4:ef:fc:
ba:f5:b5:9d:c7:47:be:49:28:ef:53:a5:ff:37:0f:
d0:aa:14:3c:5b:57:29:3d:36:01:b4:2c:02:66:61:
93:6e:fb:a3:0b:ad:55:ba:57:ec:4f:12:74:04:8d:
9a:11:76:8d:d1:7b:eb:b6:de:9c:ec:0e:82:2a:ed:
df:58:49:6d:ed:83:61:74:a7:3c:2f:4d:c0:f3:29:
15:d1:5b:01:5f:e8:97:40:76:eb:a2:d3:81:a8:5e:
19:b2:c8:8e:61:5a:65:c5:36:f4:9b:6f:14:80:91:
5f:e9:9d:fb:7b:16:b6:d7:91:dc:4b:bc:8f:a9:b7:
36:e7:64:1b:63:fc:b0:e9:1c:51:83:73:17:a6:66:
75:1e:f9:d9:cb:b4:69:c9:44:0f:bf:50:93:c7:a4:
73:fc:a7:66:b4:47:58:56:b1:e8:f9:2b:f0:0c:62:
cc:d7:13:6d:19:cc:04:ec:7b:10:7e:ae:25:f2:16:
de:c0:ae:0c:d0:d8:74:20:18:f7:ff:5f:c6:f6:46:
f4:e2:72:94:a6:ba:8f:e4:b6:bb:dd:2b:39:bc:f8:
63:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:8A:EF:85:BA:92:8F:61:8A:FE:2A:F6:36:3D:89:AE:DE:AB:63:72
X509v3 Authority Key Identifier:
keyid:0C:FE:10:58:A3:1E:3C:18:94:BC:F0:64:C7:E8:37:0B:BA:6C:F8:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DP4QWKMePBiUvPBkx-g3C7ps-OQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/921df1-fa7d-4307-b9c3-7ce8c9704cf0/1/DP4QWKMePBiUvPBkx-g3C7ps-OQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:9f:d0:5c:1e:5e:fd:32:9e:43:b4:70:4d:31:82:6c:e3:e1:
9a:17:d3:c6:3d:d0:98:ff:90:1e:e0:92:d2:c6:0b:34:2e:f1:
0e:38:88:02:3c:6e:71:9b:e4:80:9d:e1:c6:a0:94:5a:a7:96:
c4:61:8b:0b:38:d9:a5:2e:f0:e0:23:d1:35:d1:49:11:bd:59:
c7:39:a0:be:aa:7a:ee:35:42:2a:68:51:21:9f:ce:2c:0e:7f:
93:e3:8b:5a:c3:6b:f5:52:8b:19:c9:fe:10:85:de:83:3e:07:
1b:9c:87:e3:5c:92:54:bd:16:56:f3:cc:4e:4d:ee:b5:c6:37:
9e:24:5e:19:db:ef:07:8f:80:40:64:cd:29:ee:d4:ee:50:2d:
ef:48:d4:54:85:fd:91:d7:5e:07:37:bd:4d:11:3f:90:2d:ab:
b4:56:57:f2:53:08:03:55:a2:42:25:19:c1:1f:f6:53:65:21:
54:70:47:31:0c:8e:70:33:cb:09:e7:ef:cc:68:de:31:c8:15:
5d:df:74:4f:fa:37:a1:4c:ae:00:3f:82:fc:55:56:21:91:ad:
8a:33:8f:36:31:a1:d6:48:41:40:eb:f1:14:fb:75:66:28:bd:
a3:20:9d:07:f7:3f:64:f4:b0:b1:f6:ff:cd:bf:26:df:9a:67:
33:55:70:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:17:50 2026 by rpki-client