Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
File: DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft (raw, json)
Hash identifier: XxMSgnnfamzOmz87vakQjLo8w3QLyxuklxZetcZfnLw=
Subject key identifier: 43:DF:B9:5A:A8:AE:6C:C4:58:18:68:76:95:DE:09:C7:F2:75:E2:E3
Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Certificate serial: 019CAA2191EC6F9DD9A1275C946C6DEA775D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
Manifest number: C5
Signing time: Sun 01 Mar 2026 16:00:52 +0000
Manifest this update: Sun 01 Mar 2026 16:00:52 +0000
Manifest next update: Mon 02 Mar 2026 16:00:52 +0000
Files and hashes: 1: DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl (hash: jLY25rkH/CDrij6Cf0nDA0v9WDFx7n/peoW/NPy+9MY=)
2: GlhmPCyy1FDf_YTiqeYgVfiC97w.roa (hash: aM5XCtKjHw7PII1T2KGsCatDptMXLc32zqDWbo5CqIM=)
3: qqcaq47Akg1rjPpdSSbGkwyrvpk.asa (hash: cwFdQdAV6zODkwY2szZRrvlvnRzifxMX56MS8xtw3IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:91:ec:6f:9d:d9:a1:27:5c:94:6c:6d:ea:77:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Validity
Not Before: Mar 1 16:00:52 2026 GMT
Not After : Mar 2 16:00:52 2026 GMT
Subject: CN=43dfb95aa8ae6cc45818687695de09c7f275e2e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:9a:a0:44:60:28:11:6b:5a:3f:0b:f9:b6:
6a:e4:7f:20:b4:2c:c5:7b:fd:6e:a3:21:77:83:df:
15:78:75:50:4a:b4:66:7d:75:b1:92:8b:57:81:3e:
05:ec:da:80:b1:26:ff:67:eb:5a:53:6e:53:8e:22:
7e:bd:3c:d9:2e:e0:85:ca:1e:99:10:d5:1a:41:1c:
56:5b:e6:c2:7a:56:47:70:59:14:3e:55:90:62:11:
29:a9:82:cc:8c:fc:a6:cf:50:30:01:a1:ab:9b:4b:
33:57:e3:e9:70:af:39:91:fb:e1:f7:42:04:47:39:
a7:96:25:42:da:da:93:6d:a5:7f:8b:aa:94:3a:95:
2e:9f:bd:88:38:93:ad:74:ad:6c:92:00:f6:d8:2c:
06:57:6e:39:8e:c2:e7:3a:00:fe:f1:a3:b6:3b:d4:
de:b1:35:e8:75:9d:27:b0:9a:83:81:05:73:9a:a0:
0d:2a:97:2d:28:30:2c:f0:4d:5d:a2:8b:6b:8c:39:
7d:1b:07:c9:cd:b0:77:02:df:91:e8:91:c5:1b:4c:
5a:d4:df:bc:79:2f:7a:41:90:bd:93:57:dd:60:65:
0f:23:06:33:b4:f0:18:76:a1:02:16:38:41:2b:f4:
2a:f9:18:c3:51:e0:aa:b6:9d:9e:d1:e2:ab:b3:e2:
3b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DF:B9:5A:A8:AE:6C:C4:58:18:68:76:95:DE:09:C7:F2:75:E2:E3
X509v3 Authority Key Identifier:
keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:70:a2:81:ed:f5:cc:44:39:79:da:26:ba:33:36:3d:4d:1f:
60:59:33:a4:75:49:b8:88:a3:38:c5:bd:51:ab:2a:bd:cf:8c:
61:c7:6c:f5:8a:88:23:04:bd:74:d7:56:0d:37:08:2f:0b:8a:
3d:9d:46:2e:40:3c:95:66:ec:27:7b:48:41:7b:74:86:00:fb:
4f:37:5d:cb:a3:23:27:06:85:19:74:5a:49:b7:f1:d6:94:15:
2d:0f:d8:6e:71:af:4f:00:39:b9:c4:9d:85:58:96:12:77:94:
ff:ad:04:6f:fa:79:91:8b:00:46:bd:2c:95:eb:a6:f7:5d:0a:
3b:01:89:54:9c:22:ef:61:84:27:86:3a:41:ba:b7:c9:23:0d:
6d:48:07:d3:e3:24:7d:eb:89:53:23:b3:1b:12:af:03:1d:50:
7f:c5:d9:8d:b8:3b:a0:9d:ba:d9:a4:25:dd:42:39:b4:80:78:
0f:67:00:02:33:38:5d:db:e7:17:d8:6a:f3:6e:c0:ca:03:44:
fd:29:85:ef:ed:de:8b:18:97:9e:e1:f2:ee:40:c7:e1:f3:ae:
f5:66:21:63:d4:cc:d9:a4:fe:e8:7d:5a:76:71:75:57:97:cd:
ad:dd:4d:98:79:41:59:0a:4a:19:8d:87:e3:37:cc:2e:9a:73:
6c:67:61:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:26:22 2026 by rpki-client