Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier: +mprBOcCTD4ndCIjnec4xxMdCN1tyGaVK90QBJ6NLyc=
Subject key identifier: 47:AC:00:3E:F2:24:17:1D:58:00:2A:F5:09:5A:06:30:52:C7:B0:22
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial: 019D389BFC6659DC62B913F148CB5AC53ED5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:00:39 +0000
Manifest this update: Sun 29 Mar 2026 08:00:39 +0000
Manifest next update: Mon 30 Mar 2026 08:00:39 +0000
Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: 84LVhnBA4OTVdm1+fzqzt3oM+2qJQL6fYS+ZBZlx3ME=)
2: WMPWbERH9P2n3niPjWrFvgxXnog.roa (hash: wqaHkXlpMy/p6v+U45zXhhU2rWewv6uSFHA6UjESriQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:fc:66:59:dc:62:b9:13:f1:48:cb:5a:c5:3e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Validity
Not Before: Mar 29 08:00:39 2026 GMT
Not After : Mar 30 08:00:39 2026 GMT
Subject: CN=47ac003ef224171d58002af5095a063052c7b022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:28:02:f2:f3:dc:75:81:35:16:53:a5:97:16:
16:e7:d1:ac:9a:70:7a:99:fa:d4:e2:06:ab:bf:5a:
c1:5a:91:64:28:13:5d:ee:da:59:97:61:42:03:6b:
c9:d6:e3:8d:70:04:30:cd:7e:1c:97:2f:7f:73:d9:
a8:42:d4:83:79:c0:d6:b2:36:52:ce:e0:c5:32:f2:
17:22:09:c1:74:d8:d8:5d:fc:87:19:34:b0:9d:9b:
78:92:24:ad:95:f0:ac:aa:0f:47:54:a0:07:bc:f1:
e6:b2:69:8a:86:7d:a7:99:39:d2:85:6c:79:0b:64:
00:2e:f1:eb:1b:0d:8c:a4:fa:c3:fb:de:7d:74:c1:
c9:71:3c:37:e1:31:1d:da:e4:d1:43:25:50:79:77:
5b:bb:36:19:63:b7:ce:9c:65:3c:c7:28:3d:9d:db:
49:c3:7f:12:f8:ea:76:12:11:c0:5f:9a:31:c8:d8:
9d:81:27:7b:a9:95:f3:ba:a2:0d:3a:c7:c1:98:e4:
8c:fa:23:c1:ae:67:f2:ce:49:19:ee:03:43:2b:07:
9f:2d:18:fb:0b:f7:dc:91:fc:d3:92:a4:84:fe:50:
ff:be:1d:61:f7:87:ff:7d:3c:dd:48:30:89:26:2c:
8e:ea:74:05:38:c4:c4:b0:7e:27:87:94:1c:6b:00:
0c:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:AC:00:3E:F2:24:17:1D:58:00:2A:F5:09:5A:06:30:52:C7:B0:22
X509v3 Authority Key Identifier:
keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:37:da:12:d0:89:be:82:58:3a:75:82:93:d9:49:46:c3:58:
ba:e0:f9:8f:0d:d4:53:a4:ba:6f:32:6d:cb:85:29:37:69:5d:
63:0d:16:c1:03:30:3f:94:85:f3:fb:51:dc:7b:84:a3:be:08:
44:57:a3:11:a5:21:33:dc:24:3d:68:9a:14:60:48:73:31:30:
57:22:90:ac:ad:6d:28:33:ea:58:42:c8:5b:73:ea:eb:b7:b9:
7f:fe:cc:e8:7b:15:1c:45:c7:ae:8d:43:8e:87:d3:31:f7:dc:
90:cb:c6:50:df:53:3b:67:bc:45:2a:60:d6:dd:ab:34:b8:6f:
1c:a9:fb:49:2c:e2:bf:a7:b8:ea:ee:a0:aa:1c:95:07:6c:39:
0c:34:91:a6:26:be:6e:29:5d:64:0c:72:3f:77:b9:41:b3:47:
fd:db:ca:e9:b1:41:6b:de:22:f6:3f:e3:90:82:e1:b8:be:73:
21:ce:12:b1:58:e6:8f:4e:e0:2f:22:8b:01:22:f6:75:35:9e:
af:a4:96:4a:af:3e:7c:5b:1c:01:f5:d9:db:b9:20:ac:d5:86:
69:1d:75:de:47:34:6a:05:8b:9e:1e:f5:33:89:45:3e:06:15:
fa:d1:ff:cf:f1:e0:46:e1:2e:64:e2:24:82:bb:14:96:1f:b3:
c3:2f:16:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:31 2026 by rpki-client