Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier: f1mx7dQGEKz2xMAKpnbuMbdTbnczhq4kF2dJSKGYWss=
Subject key identifier: 69:0E:FD:A6:21:DB:8A:55:17:29:FD:7E:15:F1:24:B2:A5:97:35:66
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial: 019E2FCD9DBAFD9E2C1D5EB54D69791F073C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number: 1910
Signing time: Sat 16 May 2026 08:01:04 +0000
Manifest this update: Sat 16 May 2026 08:01:04 +0000
Manifest next update: Sun 17 May 2026 08:01:04 +0000
Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: diUh8rt/QqozWsuI4RzeqzmZ/DbpePHqRIkZES1smBE=)
2: WMPWbERH9P2n3niPjWrFvgxXnog.roa (hash: wqaHkXlpMy/p6v+U45zXhhU2rWewv6uSFHA6UjESriQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:cd:9d:ba:fd:9e:2c:1d:5e:b5:4d:69:79:1f:07:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Validity
Not Before: May 16 08:01:04 2026 GMT
Not After : May 17 08:01:04 2026 GMT
Subject: CN=690efda621db8a551729fd7e15f124b2a5973566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c6:83:1a:14:d5:70:b1:ba:56:dc:4f:91:48:
61:bc:d4:98:da:61:b2:79:30:a6:64:07:1d:f1:9c:
29:17:59:f6:a2:71:b0:d1:e2:ef:ae:a4:b9:ce:9e:
ce:43:ba:a5:c8:30:c4:a1:46:27:06:4f:9d:92:73:
60:09:0e:c1:b0:7b:08:67:c4:c3:1c:8c:80:55:30:
34:34:c5:28:37:91:6f:0b:4d:37:ff:2d:63:48:68:
c5:52:ee:ad:3d:44:86:42:40:4e:74:8c:5f:49:38:
9f:f3:a5:01:3c:67:40:e8:10:48:54:1b:80:bd:b6:
47:8a:b3:7c:84:2e:6c:89:fb:dd:96:2d:2a:7b:f6:
43:a4:b1:50:a7:6a:71:fa:8c:8e:82:25:87:e5:20:
2f:10:9a:9d:78:86:0f:87:b3:c8:69:32:09:11:5e:
31:0b:bd:c2:02:73:8d:55:f0:d2:16:6f:46:2c:06:
95:fe:5c:38:df:a6:80:fd:0b:7f:33:ff:ea:ca:41:
7a:4b:51:4c:cf:45:7e:72:7b:ac:79:67:e3:73:06:
d0:c1:d0:fe:d4:1b:41:60:e8:72:3e:e9:02:eb:c0:
83:3c:0d:be:7b:41:d3:0e:c3:0e:26:c2:ec:3d:40:
b0:36:e3:69:3b:d9:d2:01:b8:0d:83:80:a9:5a:6a:
f0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0E:FD:A6:21:DB:8A:55:17:29:FD:7E:15:F1:24:B2:A5:97:35:66
X509v3 Authority Key Identifier:
keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:ec:5a:7e:f2:d4:9c:3a:a3:62:17:d3:28:5a:cf:0b:b2:0f:
db:81:05:75:49:78:4c:aa:dc:fe:ab:1c:0f:4c:1d:e5:08:1c:
a4:e1:a4:a8:c5:8b:e6:ff:31:20:2f:9b:8e:4b:19:bc:f9:13:
cf:f4:dd:b5:3d:30:b1:81:11:b4:0e:82:95:69:a4:d9:db:6d:
f1:f9:8c:d6:bc:29:f5:69:1b:07:b5:9a:3b:74:09:e7:5c:29:
91:4e:25:95:0c:60:1c:c8:5a:a8:33:0f:f4:5e:81:51:1b:74:
2e:06:91:bb:46:f5:23:22:67:3a:7f:4b:9c:b3:f0:d7:e7:94:
d5:da:00:11:3a:27:63:7f:f1:fb:3f:31:ab:ff:f4:27:99:d4:
05:64:27:bd:7d:fb:b4:27:da:ef:5f:b3:77:83:55:d7:96:54:
1b:8a:3c:4d:1f:45:6d:b2:ac:aa:fd:70:af:3f:93:ae:a3:d7:
33:c5:c9:3a:54:a9:d4:61:46:5d:55:de:1a:b4:a3:65:1b:b4:
9c:70:d5:1f:47:4c:8b:0f:7d:e7:bb:0e:6e:1b:18:2a:21:59:
8e:3f:86:c5:cf:76:ae:df:ce:2f:0d:8e:9e:5e:56:b9:2d:9a:
cd:18:dd:83:c6:cf:7c:10:65:d6:2e:d3:c1:97:81:81:ee:ba:
79:eb:45:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 15:38:48 2026 by rpki-client