Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
File: Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json)
Hash identifier: J5XqUKxUhRTAF8TNGoK0YQNoRhB9pRpQi4THDScpVYE=
Subject key identifier: 45:6B:CC:3B:5E:C8:19:C3:EC:07:6A:28:CD:DA:93:A7:D6:F8:72:6E
Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
Certificate issuer: /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Certificate serial: 019F189E0804922198D235797A6FF526B91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
Manifest number: 1984
Signing time: Tue 30 Jun 2026 13:00:37 +0000
Manifest this update: Tue 30 Jun 2026 13:00:37 +0000
Manifest next update: Wed 01 Jul 2026 13:00:37 +0000
Files and hashes: 1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: oume70Z8EiRvTGCUikp7RaGuxagBa5piAhfOeVKp4Ko=)
2: TZIG1R8-YGmhR0xI5zBvA7V0Dmg.roa (hash: WEHaRsXodnCf7NHMhPdN3H93MUdSSeQQRV5NdrA3eds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 13:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:9e:08:04:92:21:98:d2:35:79:7a:6f:f5:26:b9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Validity
Not Before: Jun 30 13:00:37 2026 GMT
Not After : Jul 1 13:00:37 2026 GMT
Subject: CN=456bcc3b5ec819c3ec076a28cdda93a7d6f8726e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a9:d6:66:01:f6:2a:0e:28:8f:1d:0e:50:b4:
5d:06:65:04:19:42:69:c9:d7:fb:b5:0a:bd:fb:a2:
35:ff:c4:c1:a8:e7:4e:6d:d3:c9:5d:09:e8:8a:5c:
4b:4d:0e:25:e6:55:ae:5f:c1:9c:b9:c1:c2:ed:f7:
11:49:be:24:1b:54:05:14:ab:bd:c9:6c:ad:63:a9:
f0:d7:5a:6a:57:23:66:d7:fd:d3:1e:da:59:fc:cc:
fa:5f:0b:bf:53:0d:b2:de:91:78:4e:18:2d:33:bc:
7c:6b:a1:ae:b5:a8:01:01:1e:d9:dc:d0:2b:30:ee:
8b:b2:44:87:b6:17:f9:41:68:ee:e3:dc:f4:f7:a6:
f9:42:95:98:5f:ae:1a:22:7b:bc:b0:3d:46:c5:e2:
87:c2:bb:ac:89:ba:76:be:99:12:58:e4:22:c3:64:
d0:02:c8:eb:d1:4e:e4:db:f2:45:a6:4c:b0:2e:da:
88:06:1a:56:8c:e9:4b:e0:a5:87:15:a3:50:12:62:
d1:6c:db:71:37:31:95:72:99:b9:3a:57:50:25:e8:
bf:19:46:62:59:ec:55:e3:6d:ef:7f:f5:a0:ca:7f:
15:90:05:4f:db:ba:1c:e4:37:96:4b:ba:55:4f:60:
a8:4b:77:72:d5:97:c3:b9:2d:33:25:65:33:72:ba:
c3:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:6B:CC:3B:5E:C8:19:C3:EC:07:6A:28:CD:DA:93:A7:D6:F8:72:6E
X509v3 Authority Key Identifier:
keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:b3:cf:f6:89:30:06:77:30:29:c4:4d:06:68:7b:8b:39:5b:
49:21:0f:86:4d:5e:ad:ff:ac:c6:ac:7f:1b:ac:de:80:02:8f:
6e:e4:e2:03:95:b4:43:07:82:a4:17:7d:f8:3d:db:83:6d:e3:
32:d9:d8:92:3d:fe:86:a9:39:2c:2e:8a:de:e3:81:ad:03:c0:
13:e0:f6:0d:0e:57:bf:d3:d5:9c:d2:05:b4:fc:cc:b3:17:d4:
5e:42:ca:4b:a1:1b:ba:39:c9:bb:ae:a6:6d:b4:8f:11:65:7a:
8a:fb:c7:af:5b:4f:dd:21:9a:a7:7d:de:db:d4:42:3b:a3:55:
76:f4:8f:aa:0e:95:bb:50:04:fc:02:81:73:7b:ba:af:2e:79:
ca:e2:ce:af:5f:99:e2:ff:42:68:11:cc:2d:90:47:7b:ba:46:
17:ee:b2:ab:14:1d:4d:e4:60:43:7d:6a:59:eb:b2:c8:e1:db:
53:8e:67:89:93:80:30:d8:74:9c:aa:a5:4f:6b:fc:01:ab:20:
bb:b9:26:7c:29:e8:aa:c8:e2:67:5b:b7:ff:af:3c:21:0d:73:
2e:b5:18:7c:08:ee:f3:6b:10:05:8a:fd:15:62:8c:dc:95:21:
ef:65:95:0e:7c:38:ce:0f:a1:3a:21:44:af:8d:23:53:02:e6:
31:a3:db:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:12:22 2026 by rpki-client