Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
File: DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft (raw, json)
Hash identifier: fAohAlc7dxxm3v5rHNKR3XvRbv6bLNORn4/gsAaBvvU=
Subject key identifier: 68:4B:E6:50:5D:19:6D:83:FD:A6:56:6C:82:26:E4:64:95:81:80:C1
Authority key identifier: 0E:42:C2:E7:FB:02:1B:11:1A:71:9F:ED:A9:3C:61:E5:C3:53:7F:A7
Certificate issuer: /CN=0e42c2e7fb021b111a719feda93c61e5c3537fa7
Certificate serial: 019D9AE31AE1BDD0F60AFAAB427786AF9767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
Manifest number: 5F
Signing time: Fri 17 Apr 2026 10:01:07 +0000
Manifest this update: Fri 17 Apr 2026 10:01:07 +0000
Manifest next update: Sat 18 Apr 2026 10:01:07 +0000
Files and hashes: 1: DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl (hash: WUdFOKilzWSl9f74CUKgFMRs5iIuJCSHeHPNhpVDCns=)
2: u3zxwv8aiDPFhl4Oxz0_bf9g92U.roa (hash: wBX3vONdNDvp84LOZvpcknzsgcTIkj6k0n194mkJDS8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:1a:e1:bd:d0:f6:0a:fa:ab:42:77:86:af:97:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e42c2e7fb021b111a719feda93c61e5c3537fa7
Validity
Not Before: Apr 17 10:01:07 2026 GMT
Not After : Apr 18 10:01:07 2026 GMT
Subject: CN=684be6505d196d83fda6566c8226e464958180c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a7:8e:4b:91:19:d4:70:8c:2e:ba:a5:e8:ac:
ed:cf:e6:17:d6:60:04:06:df:64:98:b7:0a:b5:12:
1e:71:85:69:72:3a:a4:a0:b0:f5:68:6a:77:75:d4:
22:cc:0e:3a:28:ed:fe:5c:fa:66:f4:c9:a7:86:5f:
3f:9e:fa:1a:bf:7a:04:24:15:b7:9e:40:e7:36:45:
f7:13:98:55:2b:51:a0:d3:c3:b4:4d:90:29:93:b5:
4b:78:f9:95:3d:e8:ce:72:71:a7:68:c5:e8:7f:9d:
5c:d5:9c:88:dc:e4:73:9f:2a:da:85:70:58:d3:71:
e5:78:4e:61:cb:1e:b1:6d:a7:e9:be:37:88:fe:4c:
71:03:51:ff:83:e4:b1:bf:81:16:02:63:74:b7:97:
4e:88:bf:02:70:56:4d:08:68:0f:d9:39:18:71:70:
90:bf:b4:3a:e6:be:13:5c:60:ba:94:78:5d:fd:89:
4c:f7:ca:2d:fa:a1:8e:79:c9:94:4d:db:30:54:9e:
48:c9:2c:b0:4b:89:3d:88:6b:9e:ed:a7:73:fa:00:
c6:29:f6:db:d3:bd:ec:24:8b:d4:fc:18:64:74:8e:
4b:0b:ff:1c:e1:17:c9:06:54:12:48:98:e2:83:d7:
6a:08:e4:49:7e:94:55:8e:c3:20:cf:da:ac:c4:11:
6d:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4B:E6:50:5D:19:6D:83:FD:A6:56:6C:82:26:E4:64:95:81:80:C1
X509v3 Authority Key Identifier:
keyid:0E:42:C2:E7:FB:02:1B:11:1A:71:9F:ED:A9:3C:61:E5:C3:53:7F:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkLC5_sCGxEacZ_tqTxh5cNTf6c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/14337c-174e-4e0a-893a-b9898f4ef77e/1/DkLC5_sCGxEacZ_tqTxh5cNTf6c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:07:3a:33:97:f3:4f:a4:01:00:43:d7:82:3a:22:6f:27:08:
ff:01:9d:89:24:0c:f1:cf:74:b2:be:a6:dc:3f:67:76:3e:0e:
75:aa:8f:c3:8b:0e:e8:55:90:34:e9:6d:1e:fd:72:92:e2:bb:
75:3e:96:67:d5:de:2e:4d:a4:7a:22:96:0f:32:39:1f:76:8b:
13:c6:ae:1d:2f:a8:bf:d9:31:86:61:b9:17:bc:be:d8:6f:be:
5a:d9:db:7c:ca:c1:d3:b9:e5:11:b3:42:b1:f4:32:fa:d2:6c:
ae:1f:df:b8:80:54:77:33:eb:a8:56:bd:7a:92:c6:90:37:65:
28:5c:89:a7:b5:a2:d6:d8:38:5c:fe:08:6b:7b:93:a1:d9:e1:
4a:26:0b:f8:fd:d5:0b:c7:27:c5:cd:ba:b0:63:13:24:e8:60:
92:b6:79:5b:a4:d0:df:4b:9f:0e:f9:ac:f5:d7:64:46:a5:d9:
34:c5:2d:78:e5:95:9b:33:9d:8d:bb:be:31:56:89:a0:b3:6e:
42:61:b8:66:09:a7:85:cb:57:5a:15:e5:9c:95:7e:7a:39:19:
f1:a5:ab:82:f5:d6:9b:00:4e:f5:38:ed:37:68:15:90:69:d2:
f7:c2:b0:c6:0e:34:8d:09:f9:0f:a1:1c:15:89:6f:40:4d:ad:
82:7e:90:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:49:22 2026 by rpki-client