Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier: EZ0lXir4lZ6lVuquukKIBomCTWh1syBVft0GIoa/Sn0=
Subject key identifier: E7:13:AF:21:93:1C:27:05:FF:47:1B:74:F2:BA:98:34:62:0B:DD:8D
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial: 01A0013866296EBDFD87E247F4CABCBCEE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number: 1A01
Signing time: Fri 14 Aug 2026 17:01:08 +0000
Manifest this update: Fri 14 Aug 2026 17:01:08 +0000
Manifest next update: Sat 15 Aug 2026 17:01:08 +0000
Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: MyzIdGKi4wrr8lsb6BWtxw/O2YhL5dhIZGbPcwi0k1o=)
2: WMPWbERH9P2n3niPjWrFvgxXnog.roa (hash: wqaHkXlpMy/p6v+U45zXhhU2rWewv6uSFHA6UjESriQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:66:29:6e:bd:fd:87:e2:47:f4:ca:bc:bc:ee:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Validity
Not Before: Aug 14 17:01:08 2026 GMT
Not After : Aug 15 17:01:08 2026 GMT
Subject: CN=e713af21931c2705ff471b74f2ba9834620bdd8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ee:91:63:65:32:ea:08:41:01:a9:d6:b6:76:
8c:cd:35:e5:37:28:9d:09:20:e5:c4:8d:56:90:b5:
75:3e:67:16:0e:a0:7a:f6:ac:95:65:3b:2b:ae:7c:
00:61:72:54:eb:f5:53:ef:b7:73:36:ff:6c:f2:1a:
39:23:e9:0a:ca:1a:3e:32:9d:d1:c3:a2:25:d7:58:
1a:71:02:35:16:0f:3f:a4:4f:91:a1:b2:6c:89:2c:
42:d8:4a:5a:78:41:4a:95:85:09:91:29:95:13:19:
5e:f9:09:80:08:9a:38:8c:fc:36:2c:87:22:e1:41:
3a:c4:19:3f:62:87:ed:a4:b4:9b:45:52:c7:95:f2:
16:d1:5a:91:3c:22:23:4c:17:ef:cb:57:81:7e:cd:
e0:53:9a:b2:76:6c:e2:ba:e4:74:11:af:9a:88:04:
5c:00:11:1e:d0:0b:99:98:de:42:cc:86:81:5f:ee:
2b:40:d4:b0:f8:5c:94:4f:ca:3a:f8:09:7b:89:e4:
4c:0c:d1:fa:dd:97:3a:b1:1b:f2:f7:c4:c9:b0:dc:
89:b6:a6:36:65:dd:c1:e3:3d:9b:59:7b:d3:82:f6:
28:4e:4c:84:8f:78:55:a9:fe:f3:5c:b8:a9:97:8b:
52:5a:70:de:e3:05:e8:e8:d2:9e:9d:01:95:97:37:
7d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:13:AF:21:93:1C:27:05:FF:47:1B:74:F2:BA:98:34:62:0B:DD:8D
X509v3 Authority Key Identifier:
keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:75:09:04:9d:e9:16:2a:c7:e5:13:6c:78:a4:b9:fc:da:03:
b4:6f:4e:2a:6e:7d:87:49:82:da:23:5e:29:af:eb:7b:c0:3d:
7c:b0:03:73:71:73:e3:de:7e:0f:6f:f9:15:39:ab:96:9a:ea:
83:87:f2:27:23:1b:2b:fc:16:d4:95:a5:61:90:7b:09:28:15:
43:66:21:d6:f6:4e:d2:e7:0b:01:72:50:69:46:29:4a:1f:a7:
42:70:ee:49:5a:2f:71:d5:3b:da:85:dd:4a:91:e0:50:ed:7a:
4b:7d:35:0d:22:e3:8e:4c:df:d0:f3:1f:2e:cb:16:96:c0:0a:
b1:d7:e2:08:f2:7b:11:e0:78:7f:1a:45:ee:a3:0c:32:91:b0:
1c:a9:e3:60:38:2a:e4:72:e6:c1:16:27:44:b7:cd:a4:24:47:
6a:12:8c:8b:fd:a0:cd:be:d6:7a:e8:2d:62:98:1f:43:ec:9e:
84:c2:86:a0:01:21:ca:8d:a2:82:d9:ca:94:06:96:d1:72:2e:
1e:ee:90:1c:f9:03:b6:82:3b:07:50:78:d1:49:4b:75:fb:7a:
3e:19:fd:4c:84:15:ee:ec:ce:59:4b:c6:ae:e3:56:c3:34:59:
ed:0a:b0:22:8e:ae:e5:37:9f:8e:df:d9:59:02:c0:af:cc:15:
53:11:b7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:44 2026 by rpki-client