Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
File: DkGjlotidBs200i-DSyRxdSxM6I.mft (raw, json)
Hash identifier: jILWh3WgyxWDSFCqbXGw9vkru8IVU5M4RYf+NOyzpNE=
Subject key identifier: 3F:E6:E8:2F:89:AB:6C:49:D1:D9:0A:F5:A7:71:70:3B:50:AB:D4:B2
Authority key identifier: 0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
Certificate issuer: /CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Certificate serial: 01A13AEDAEC3DA4B44BB64DBCB1F6C0B5452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
Manifest number: 1AA4
Signing time: Wed 14 Oct 2026 15:00:17 +0000
Manifest this update: Wed 14 Oct 2026 15:00:17 +0000
Manifest next update: Thu 15 Oct 2026 15:00:17 +0000
Files and hashes: 1: 8zauiXBaFMH5VLxzsSvMEUumaxQ.roa (hash: sJvy2vx8n7/hTOLyUNRFHLLiMRYWbPfkI+7/KsQidiw=)
2: DkGjlotidBs200i-DSyRxdSxM6I.crl (hash: UOHcCK2jvAGkhuPrPoloqt0jfgq5nACV8xodM1DxrRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 14:43:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3a:ed:ae:c3:da:4b:44:bb:64:db:cb:1f:6c:0b:54:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e41a3968b62741b36d348be0d2c91c5d4b133a2
Validity
Not Before: Oct 14 15:00:17 2026 GMT
Not After : Oct 15 15:00:17 2026 GMT
Subject: CN=3fe6e82f89ab6c49d1d90af5a771703b50abd4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1a:0f:d5:34:11:2a:4c:40:4c:68:3e:c1:ad:
3b:3e:a1:de:c4:60:fc:fe:eb:d5:a1:82:ff:ac:af:
82:bb:d6:96:1a:d5:92:3d:e2:97:a5:72:55:98:3b:
fb:23:06:12:8c:d5:83:2d:82:d8:d3:e2:26:68:ab:
d9:2f:bc:3c:bc:2b:7a:d4:10:d2:60:c5:7f:2e:3d:
be:70:a0:07:30:a4:82:23:ab:12:d4:88:13:84:32:
87:62:fb:52:d4:2e:7b:1d:d0:6e:07:3c:b9:46:17:
60:94:f6:a5:af:66:8c:5d:58:9f:e7:cb:ad:cd:c6:
f8:84:dd:1d:fa:72:16:83:e5:8a:19:bf:ac:43:e4:
21:52:cf:ee:e2:16:35:c2:78:89:22:c0:a9:2f:fb:
73:67:8a:68:98:c0:08:cb:31:85:a1:1f:4d:2f:8e:
a0:16:45:64:b6:18:c0:3a:52:89:6d:78:49:ff:e1:
8c:53:c4:6d:50:3d:c4:16:a4:39:ac:fc:67:72:97:
90:05:94:34:3e:8a:18:8e:0f:7a:f6:48:37:6d:1a:
18:2f:52:60:be:0c:43:94:aa:d6:b9:dc:fa:32:46:
f9:63:af:aa:b6:bc:f5:94:3b:66:87:2d:c6:45:76:
fa:4a:22:6c:0f:c8:6f:f2:84:76:86:f2:5f:b9:49:
41:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E6:E8:2F:89:AB:6C:49:D1:D9:0A:F5:A7:71:70:3B:50:AB:D4:B2
X509v3 Authority Key Identifier:
keyid:0E:41:A3:96:8B:62:74:1B:36:D3:48:BE:0D:2C:91:C5:D4:B1:33:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkGjlotidBs200i-DSyRxdSxM6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/05b1f8-4b35-40bb-a034-747523192363/1/DkGjlotidBs200i-DSyRxdSxM6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:78:f5:3e:e1:67:10:7d:e1:32:2f:85:3a:36:f6:8f:f8:8f:
88:50:99:ae:d6:80:ee:c5:48:dc:bc:96:8a:02:b4:00:e7:2b:
bd:9c:86:6b:3f:a4:6d:f6:31:d8:7b:5d:78:cf:63:0c:3f:28:
5a:36:b7:b2:a9:b0:9c:df:c3:1c:4a:5d:2b:04:76:3b:66:3e:
20:da:bf:a2:26:47:43:f5:86:74:fa:d5:f8:09:9a:09:ba:c8:
dc:06:bc:04:6e:04:8b:9d:f9:e6:49:01:5e:32:f0:67:85:17:
d2:e2:c2:65:d9:a3:da:cc:a3:28:77:eb:bb:62:23:48:fd:e1:
de:6b:63:6b:c5:60:1a:16:7e:73:48:95:72:b2:48:46:1b:5c:
c9:1a:75:9c:79:15:4e:3a:15:97:97:ba:0e:4c:ff:96:7b:e3:
85:8a:e5:5a:05:bc:fa:3f:e1:9e:96:c5:44:f8:de:c7:fc:25:
68:63:25:93:17:da:ce:f4:22:43:6d:27:4a:8d:f1:70:2f:bb:
f8:b7:e9:0a:cc:82:70:4d:ad:12:63:a5:e6:34:0c:e5:dc:72:
a7:f4:31:a8:00:26:73:f8:cd:d0:75:6d:97:ec:db:a2:92:ba:
52:4c:4c:f4:0d:a1:3e:fc:35:67:b8:65:3d:27:4f:2c:54:9c:
f4:c9:3b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 21:06:13 2026 by rpki-client