Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier: o7tYjHoXxQQmQAPJlLEuCdbzTv6M3ZvF8rfhfBRykME=
Subject key identifier: 46:AA:68:CB:87:AC:F7:72:10:9C:8B:B4:FA:29:C9:88:70:FA:32:D2
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial: 01A13DEEE06D68E741AE5F8CD51FCD8D28A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 05:00:27 +0000
Manifest this update: Thu 15 Oct 2026 05:00:27 +0000
Manifest next update: Fri 16 Oct 2026 05:00:27 +0000
Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: Njpl1epDkQxm2S+K1u0km7lj+2H4XMAUBlUoAEYvHLI=)
2: WMPWbERH9P2n3niPjWrFvgxXnog.roa (hash: wqaHkXlpMy/p6v+U45zXhhU2rWewv6uSFHA6UjESriQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ee:e0:6d:68:e7:41:ae:5f:8c:d5:1f:cd:8d:28:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Validity
Not Before: Oct 15 05:00:27 2026 GMT
Not After : Oct 16 05:00:27 2026 GMT
Subject: CN=46aa68cb87acf772109c8bb4fa29c98870fa32d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:20:6b:bc:e6:cc:3a:d2:25:6e:5e:61:38:78:
9a:f5:02:7f:7b:28:f6:d7:58:2e:5f:51:2d:4e:46:
5f:79:f0:00:65:68:a8:45:7a:f7:98:2c:56:bb:f0:
cf:4d:8e:2f:8a:73:78:84:a8:ae:02:1a:47:3b:9d:
ca:37:46:6e:5c:94:66:63:dc:60:b8:9c:3f:76:6d:
21:d3:66:df:98:a3:d6:4d:80:6c:79:6a:48:df:9c:
12:12:f0:00:f5:06:51:38:4e:b0:0a:59:17:b8:fb:
f1:5e:d1:dc:4b:6a:c3:44:de:4c:4d:90:ed:d3:1e:
c5:f5:60:6d:08:31:d2:6c:34:ca:01:18:2c:57:08:
ca:4e:d6:fb:2b:c3:30:da:ad:5f:94:04:d2:77:2e:
15:65:ad:73:30:15:47:2e:d8:9a:38:6f:7f:4e:7c:
39:45:23:de:ff:bf:2a:61:73:c9:fd:15:62:2d:38:
c9:04:15:5f:db:b1:d9:d3:3c:06:47:c5:1d:48:35:
93:f5:39:55:22:3a:c3:54:36:29:e8:f4:a9:de:7f:
1c:21:74:a8:e3:ba:55:7e:3b:71:d5:4f:06:3b:d5:
e7:9f:87:7f:50:b6:ab:6e:7e:59:92:82:bc:ae:35:
a5:5c:cf:ff:af:50:0e:78:82:66:26:18:18:21:07:
61:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AA:68:CB:87:AC:F7:72:10:9C:8B:B4:FA:29:C9:88:70:FA:32:D2
X509v3 Authority Key Identifier:
keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e6:70:f1:f1:64:5b:f1:2c:16:9a:35:a9:73:14:21:d1:e5:
a7:db:8d:5c:bd:e3:e7:f0:49:ee:bf:db:4d:ad:5a:31:44:2f:
61:4a:24:a7:a1:66:b3:3a:94:25:94:85:a2:f7:2a:20:4a:c9:
96:71:c2:5b:31:5a:0c:2f:9c:fa:12:fa:62:a8:dd:a8:97:31:
05:cc:ed:4c:68:12:71:b6:50:bd:89:e4:27:02:d8:33:b3:dc:
ef:a9:78:40:2a:a0:b4:6c:bd:b0:67:4c:68:23:cf:55:8a:0b:
56:76:b8:80:18:58:ea:c7:0a:57:ae:15:f1:e6:ab:bd:44:5c:
06:d1:9b:6a:11:9c:a2:fe:bb:36:f6:fa:71:72:2d:f9:68:5c:
99:03:a4:74:c4:e5:5b:05:40:dc:31:fc:0d:f6:ac:98:1a:0b:
4f:90:4f:c8:1c:24:e1:66:d6:74:92:c3:a1:ee:c1:85:f6:91:
82:ff:e5:84:6c:ce:8c:81:28:f3:8c:1a:93:f6:0e:3a:b0:6b:
ee:96:7f:6a:86:e2:1c:8e:11:48:5e:32:83:9b:14:df:c6:9a:
85:72:cf:77:8d:69:96:f9:fd:62:d1:82:cc:29:4b:0f:19:2a:
cd:e7:bc:ef:59:55:6d:bc:71:aa:11:84:ac:29:07:76:71:c8:
fd:b3:fc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:57 2026 by rpki-client