Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
File: Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json)
Hash identifier: OmG1b8ZbxMGzzkJH/mS0ewFERUR87RHvUPgaBPuHTm8=
Subject key identifier: 39:F8:75:BD:12:7B:44:58:0E:A5:55:63:0F:D2:42:10:0F:29:C9:1C
Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
Certificate issuer: /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Certificate serial: 01A0005C8951CF43373F24409EA34CFB5CDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
Manifest number: 19FC
Signing time: Fri 14 Aug 2026 13:00:59 +0000
Manifest this update: Fri 14 Aug 2026 13:00:59 +0000
Manifest next update: Sat 15 Aug 2026 13:00:59 +0000
Files and hashes: 1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: x+0lrSdeXP+NYjnrTD1SYdwmYkT0jjJd4rfvv2oN5lw=)
2: TZIG1R8-YGmhR0xI5zBvA7V0Dmg.roa (hash: WEHaRsXodnCf7NHMhPdN3H93MUdSSeQQRV5NdrA3eds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:5c:89:51:cf:43:37:3f:24:40:9e:a3:4c:fb:5c:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Validity
Not Before: Aug 14 13:00:59 2026 GMT
Not After : Aug 15 13:00:59 2026 GMT
Subject: CN=39f875bd127b44580ea555630fd242100f29c91c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:66:80:ce:41:9d:79:4d:61:fa:9d:a0:22:
f5:08:95:87:3d:eb:9f:8d:a3:00:b3:8c:04:61:46:
8d:24:7b:e5:1b:f2:0f:d6:7c:5f:93:c7:47:db:f1:
fe:2d:54:8d:e9:d1:53:01:99:81:64:85:8d:41:f9:
67:b1:b1:1e:48:ab:b9:5c:d9:3e:9e:83:34:84:de:
47:5a:85:af:da:05:f2:c3:40:01:d5:ae:43:fb:ec:
24:8b:03:05:18:8b:5b:52:b8:d0:74:be:8f:1c:b0:
91:b0:ca:af:68:cd:de:87:b8:43:65:a4:aa:47:47:
4a:9e:9a:9c:11:40:e3:aa:81:49:4c:7b:34:65:69:
5b:1c:47:27:3f:7a:cf:52:85:e0:a8:b1:f4:ba:7e:
c9:a8:bc:0b:48:6d:a1:36:d0:c8:74:c6:46:1a:c7:
3a:45:3f:2d:2c:c8:46:5e:50:17:38:73:cf:51:04:
8f:0a:55:95:b6:e6:79:92:c8:a9:df:78:9f:9d:78:
c1:09:15:b0:82:fe:dd:47:b5:36:75:39:1c:2c:a5:
ba:31:eb:db:57:bf:d6:1f:2d:8f:66:a7:29:5b:db:
c0:ea:57:25:3d:da:0e:5f:23:a4:67:a3:d0:88:ea:
f3:1f:d7:7a:96:25:8b:d7:6d:10:a5:23:db:6e:39:
fb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F8:75:BD:12:7B:44:58:0E:A5:55:63:0F:D2:42:10:0F:29:C9:1C
X509v3 Authority Key Identifier:
keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ba:89:37:9b:b3:70:7f:63:62:66:b6:1b:8e:f7:66:5b:21:
ae:91:66:d2:0f:d3:e1:4a:c8:28:5c:07:54:3c:1c:fb:ad:9c:
cb:1b:23:ec:b9:00:b8:63:87:ce:25:3d:a5:0d:eb:43:2a:b9:
99:02:3b:d9:fe:37:11:cd:5c:9a:83:47:ff:f8:06:4c:db:85:
ef:d7:b2:be:aa:b9:3c:8b:ad:50:ba:3b:73:a1:cf:78:88:c3:
fa:92:f2:66:e8:53:91:f7:18:cb:04:3e:0b:4c:08:ce:3d:90:
bf:2f:72:e0:58:53:f6:f0:b0:d8:0b:1f:2c:a7:3b:03:38:1b:
4a:08:c4:98:4d:61:1e:92:35:1c:0c:ff:3f:b7:1b:9e:62:a1:
ba:fb:5c:1c:f6:eb:bf:7d:11:4a:db:ab:7d:c8:9c:fc:e6:9b:
88:73:b0:19:6e:b1:55:03:91:ef:9c:0a:29:30:05:cc:34:f3:
2e:0f:ec:30:24:14:86:3c:61:94:96:82:c8:b8:cf:08:6d:76:
b3:27:33:bd:d0:63:a2:77:4e:ac:96:ad:c0:22:33:52:5f:06:
f3:2d:33:93:1b:6b:3e:bc:61:81:1e:87:ec:a1:90:79:bb:c6:
2e:c5:1d:b6:37:95:4a:91:38:12:ed:3f:8a:16:5d:17:f2:07:
21:60:f7:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:12:33 2026 by rpki-client