Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
File: DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft (raw, json)
Hash identifier: lFpvumUDhqw3T+SNJvpshYn7BUgVECUxw2n58DxGMb4=
Subject key identifier: 8D:09:5E:15:DE:8A:2F:62:AB:E1:48:C6:50:7B:85:33:E9:5F:88:D6
Authority key identifier: 0E:42:C2:E7:FB:02:1B:11:1A:71:9F:ED:A9:3C:61:E5:C3:53:7F:A7
Certificate issuer: /CN=0e42c2e7fb021b111a719feda93c61e5c3537fa7
Certificate serial: 01A1133C555B33D87C1510ADCBEF6C4AF169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
Manifest number: 022B
Signing time: Tue 06 Oct 2026 22:01:23 +0000
Manifest this update: Tue 06 Oct 2026 22:01:23 +0000
Manifest next update: Wed 07 Oct 2026 22:01:23 +0000
Files and hashes: 1: DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl (hash: +BQVCIRjkMBrUuQKt/HHOlJrq9jlbXwVZtVbfmqYjZU=)
2: u3zxwv8aiDPFhl4Oxz0_bf9g92U.roa (hash: wBX3vONdNDvp84LOZvpcknzsgcTIkj6k0n194mkJDS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:13:3c:55:5b:33:d8:7c:15:10:ad:cb:ef:6c:4a:f1:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e42c2e7fb021b111a719feda93c61e5c3537fa7
Validity
Not Before: Oct 6 22:01:23 2026 GMT
Not After : Oct 7 22:01:23 2026 GMT
Subject: CN=8d095e15de8a2f62abe148c6507b8533e95f88d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:07:fa:94:93:21:65:4e:29:c6:0f:32:3e:21:
43:83:d9:92:65:1e:e5:d0:0a:55:a7:d9:36:1c:69:
a4:11:ee:4d:e5:35:dc:6b:97:36:ed:1a:05:ec:1e:
65:16:06:83:3d:0d:81:f6:01:29:35:f1:3c:a9:bf:
29:78:9d:ad:ca:f9:ea:21:ff:2b:eb:19:e7:48:20:
1d:47:fa:c4:08:60:53:67:44:ff:65:7f:4f:43:0c:
2d:87:46:1f:d5:62:0d:73:1e:3b:30:ba:6f:83:a9:
92:1f:6d:ab:35:2f:65:97:74:07:e9:2d:cb:20:3c:
2f:99:2a:d1:b7:22:7f:2f:71:95:a1:23:40:12:fe:
db:65:d9:ed:7c:18:92:a6:88:fe:1c:2e:05:51:a0:
fd:9e:91:df:e6:7d:cc:0f:d4:6a:8a:41:82:4c:b9:
be:89:b4:b8:37:2d:26:c3:d2:bf:8b:8c:04:75:85:
20:20:b1:28:a6:7d:bc:db:94:68:27:37:7c:71:5f:
ab:09:bd:eb:d2:c1:4d:7e:39:dc:a6:09:25:14:9a:
9a:45:4a:8a:ba:f6:4e:ae:64:c0:27:c3:de:d8:ed:
65:b1:b5:b5:df:ca:40:b9:48:4c:30:fa:03:08:ec:
10:8d:b8:de:a6:65:f3:b4:6c:b4:bd:07:ec:96:c8:
38:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:09:5E:15:DE:8A:2F:62:AB:E1:48:C6:50:7B:85:33:E9:5F:88:D6
X509v3 Authority Key Identifier:
keyid:0E:42:C2:E7:FB:02:1B:11:1A:71:9F:ED:A9:3C:61:E5:C3:53:7F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1e:19:6f:1f:3c:23:88:ea:bd:d5:38:94:e4:fd:c0:6b:08:
aa:66:e3:da:29:42:00:e0:82:e4:8c:bb:84:d7:c0:04:2f:8f:
74:63:eb:24:90:54:dd:80:ed:86:0f:5a:f0:1c:e5:d1:2a:c5:
0f:24:90:11:17:89:02:08:b2:88:28:9f:84:a1:8a:71:80:d1:
f8:af:8d:de:60:c6:0a:14:22:20:a4:26:c4:94:24:61:a7:13:
41:cc:cd:17:84:49:5f:51:ce:62:32:48:be:f2:22:0c:5e:71:
48:e3:34:07:e4:13:c4:6d:eb:95:02:29:9b:65:cb:dc:42:41:
db:bd:de:cb:ea:df:09:31:9f:cb:f5:9c:89:d2:de:b8:e0:07:
3d:98:e7:e9:42:10:89:2a:fd:d7:cd:7a:86:ce:63:2e:ec:f6:
92:d9:29:3a:ad:08:48:19:5f:53:f6:8d:1d:b9:de:59:4b:fa:
69:6b:a6:c1:9f:2f:c8:b7:42:0e:65:4e:be:9e:09:9b:ac:b3:
0e:af:08:96:6e:3c:52:5e:79:23:ce:2f:f4:77:d1:8b:52:99:
c0:18:73:0f:44:6e:bd:b9:a4:ee:bf:64:96:57:f3:ab:e9:5b:
12:30:cf:09:43:5d:17:d8:43:36:54:32:f0:b4:97:c6:82:e3:
a4:6f:3b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 06:38:33 2026 by rpki-client