Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier: h1RlJefLy/H7k9MWAdMFHaOZKJV6d5jPMISDG8W2KdY=
Subject key identifier: 72:14:11:AE:66:86:B3:E9:93:C4:3E:81:B5:F0:D5:E6:05:66:E9:C0
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial: 019F178C57F878336AB917913B63052FECA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number: 1988
Signing time: Tue 30 Jun 2026 08:01:41 +0000
Manifest this update: Tue 30 Jun 2026 08:01:41 +0000
Manifest next update: Wed 01 Jul 2026 08:01:41 +0000
Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: B59CxDQW92apcXRSiluCuIKlsoXa3nIS3E3wYmm2NQg=)
2: WMPWbERH9P2n3niPjWrFvgxXnog.roa (hash: wqaHkXlpMy/p6v+U45zXhhU2rWewv6uSFHA6UjESriQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 08:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:8c:57:f8:78:33:6a:b9:17:91:3b:63:05:2f:ec:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Validity
Not Before: Jun 30 08:01:41 2026 GMT
Not After : Jul 1 08:01:41 2026 GMT
Subject: CN=721411ae6686b3e993c43e81b5f0d5e60566e9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a7:99:ce:db:aa:d9:df:b6:82:bd:c9:f1:60:
5f:b2:8d:2d:20:85:21:8a:3c:d8:07:b9:c1:d9:e7:
f2:30:72:c0:40:98:a6:90:d6:e8:04:a2:36:7e:27:
b7:55:8b:6c:08:17:a9:b1:45:b8:0a:39:78:ff:47:
af:8c:b9:75:0c:c6:39:63:fd:d7:fa:58:50:92:b5:
8b:b4:7f:9e:e4:68:6b:26:b2:d1:8b:72:4e:43:d6:
23:92:02:12:c3:b9:c3:2b:72:7a:d3:6d:9b:98:34:
93:0b:15:24:81:74:f4:4a:e0:02:92:2b:cf:87:e7:
0c:be:ab:d4:67:44:25:d3:01:ec:5d:64:e1:cd:ad:
3b:ff:83:ee:4f:a1:58:bf:db:9b:c1:49:6d:47:51:
06:06:19:0d:51:81:63:4c:4f:09:40:89:bb:50:a0:
ec:5b:1d:ae:79:67:24:f9:73:30:c8:6d:09:3f:b4:
d6:b8:83:27:90:d3:d4:63:ea:59:b6:f2:41:07:83:
64:61:a0:3c:99:61:bc:07:d2:07:9e:07:b3:c9:3b:
0f:2e:77:53:b7:ac:d8:01:e0:7a:a4:30:fc:ad:e0:
88:c2:90:97:3f:c1:23:e0:e6:d1:83:71:6c:a3:4e:
42:cb:b2:20:a2:c7:ab:25:20:01:83:94:79:5c:46:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:14:11:AE:66:86:B3:E9:93:C4:3E:81:B5:F0:D5:E6:05:66:E9:C0
X509v3 Authority Key Identifier:
keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ed:d3:63:8c:2b:fd:31:8f:47:94:b7:bf:87:4d:b1:cb:b5:4f:
29:e7:34:77:78:2c:1f:c7:d9:57:f9:f7:d5:cf:90:94:48:2c:
d8:33:01:55:93:70:1f:ec:27:c2:59:b5:2b:41:d5:59:86:b1:
5b:ad:a1:66:7c:25:e5:5c:f6:66:71:92:4b:d7:5e:38:52:50:
f3:8a:cb:be:4b:12:44:f3:59:d2:da:52:06:73:83:53:16:2a:
63:1c:bf:50:3d:a2:57:86:1c:88:55:a5:52:39:8f:a9:f6:fb:
de:88:4b:4a:54:c1:20:c5:64:3d:ad:3f:82:57:b1:dc:4b:da:
31:f9:ee:b2:7e:b0:03:e5:b1:2e:7c:76:25:50:e3:e1:4c:63:
3a:f5:d5:2e:ae:b6:ae:bb:83:b6:50:13:5a:f3:6e:86:1b:b1:
92:2f:8c:d0:f3:9c:b7:bf:b3:10:b3:38:67:fe:12:09:f5:f8:
14:5d:f6:4a:76:eb:fd:06:8e:09:87:3e:0c:23:da:37:c3:44:
f5:91:a5:2f:17:85:e4:ab:93:21:9e:2d:04:b4:96:c1:60:81:
0d:9a:e8:5e:94:85:9a:b4:fa:39:4f:2a:5d:32:4d:71:ca:1f:
7b:af:01:de:b8:75:dd:67:18:54:25:78:d4:bc:27:e1:c7:20:
fe:dd:c7:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:37 2026 by rpki-client