Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
File: Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json)
Hash identifier: 8H1wDfi+k+Bjg0F3BDhqlgL+SaC5tYbuNe/nq4/Hdfo=
Subject key identifier: F0:51:7B:00:B7:CB:85:05:67:84:AB:57:AE:7E:3A:2B:F8:71:61:AB
Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
Certificate issuer: /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Certificate serial: 019D3865EBB6003447D4C98672BEC5880D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 07:01:36 +0000
Manifest this update: Sun 29 Mar 2026 07:01:36 +0000
Manifest next update: Mon 30 Mar 2026 07:01:36 +0000
Files and hashes: 1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: broSQE7QU9pYPmrWmlRxg8alC3iIXKnQAuSp1smn1FY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:eb:b6:00:34:47:d4:c9:86:72:be:c5:88:0d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Validity
Not Before: Mar 29 07:01:36 2026 GMT
Not After : Mar 30 07:01:36 2026 GMT
Subject: CN=f0517b00b7cb85056784ab57ae7e3a2bf87161ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:95:ba:3f:70:20:ff:f8:db:2c:c5:49:b8:ab:
ae:6d:99:57:0a:9f:6a:39:b4:7b:34:0b:8f:35:27:
82:fd:dc:9d:63:62:60:40:78:e4:9d:20:80:65:8b:
34:54:9a:0b:c1:4d:08:9d:44:d2:93:13:b2:57:64:
51:98:ff:65:4d:5e:a7:01:74:66:e2:eb:11:35:6d:
d6:a7:7c:6c:9d:41:a0:b3:13:47:1b:a0:c0:c1:36:
ac:66:02:21:12:0c:73:bc:88:41:b9:75:ac:71:96:
b4:12:c9:06:38:0b:ed:fd:f0:a2:39:ad:75:cb:41:
b2:c3:78:2a:fb:41:f4:21:81:85:d4:63:40:3b:e4:
b1:66:b0:f8:ad:78:69:dc:a3:15:2e:3f:43:68:af:
3d:bb:0f:93:cd:c7:4e:45:c5:55:64:da:5b:e6:8b:
7c:7e:1d:d5:ed:06:c1:34:25:b5:a3:5a:68:d9:b0:
35:f6:46:a2:eb:b8:b8:d3:63:b0:5f:78:70:44:2f:
f4:14:33:f8:1a:04:17:a5:73:e1:9d:97:8e:4f:0e:
20:f8:d4:78:23:07:5d:9e:b1:49:ad:78:04:ef:1f:
84:08:76:52:2e:33:46:dd:dc:ab:3c:f2:ea:16:a2:
50:d1:ce:f8:ef:05:ac:2d:da:18:ce:1a:e7:fa:7e:
d3:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:51:7B:00:B7:CB:85:05:67:84:AB:57:AE:7E:3A:2B:F8:71:61:AB
X509v3 Authority Key Identifier:
keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:91:94:61:fb:88:69:92:67:79:56:d8:a8:b4:4d:95:28:0a:
ec:2b:50:94:57:31:dd:9a:01:c6:dd:4d:39:a1:89:fe:f3:a9:
d9:18:af:70:8a:75:86:0c:dd:1e:1e:ea:de:81:ba:3f:c8:e7:
5c:77:cd:c1:69:c3:76:76:93:2b:ce:5f:6e:25:80:52:75:c8:
3b:ca:60:1b:8a:46:ba:e3:7b:31:41:29:f2:d4:2c:ea:c7:4d:
7c:85:85:c7:5e:c1:b7:9a:c1:19:16:93:f9:a6:f5:5b:58:e3:
fa:a6:8a:17:b4:41:96:e4:00:98:58:64:f5:4e:d7:91:75:f6:
03:91:6a:87:7e:c5:7a:a6:24:00:86:50:ad:bd:7c:c5:c2:55:
66:f0:65:98:47:49:8d:ff:e8:11:44:bd:0b:84:de:a5:1c:66:
47:9f:b3:13:d9:ac:5f:44:e2:c0:69:f9:9e:1b:05:31:dd:6d:
43:7e:9e:76:2f:8f:61:cc:f8:1c:35:e7:48:8f:af:46:bf:85:
84:a0:c2:fd:23:73:79:ab:5a:13:4c:49:86:5b:f6:45:b0:f4:
57:da:5b:7f:3f:8c:7b:35:0d:1f:78:e5:ec:39:52:5a:72:2c:
81:a3:58:9a:58:e2:84:95:e2:a5:22:f7:8b:05:05:55:41:da:
a4:6a:9e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:57:33 2026 by rpki-client