Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
File: DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft (raw, json)
Hash identifier: nWArs9eAJEIhord5y6ooM7FUysOyPcn0hbKCbhUjbFc=
Subject key identifier: 3F:20:D0:EA:81:B6:55:0E:1A:D6:D8:95:64:05:C5:F2:8C:6B:0B:E6
Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Certificate serial: 019EC11247D8E042A5AC3DDCE5DA5AC9FD8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
Manifest number: 01DA
Signing time: Sat 13 Jun 2026 13:01:01 +0000
Manifest this update: Sat 13 Jun 2026 13:01:01 +0000
Manifest next update: Sun 14 Jun 2026 13:01:01 +0000
Files and hashes: 1: DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl (hash: oc1RjyH9budC+BiH11V9zr+6AQwypu0FfAVEEn5MGX4=)
2: GlhmPCyy1FDf_YTiqeYgVfiC97w.roa (hash: aM5XCtKjHw7PII1T2KGsCatDptMXLc32zqDWbo5CqIM=)
3: qqcaq47Akg1rjPpdSSbGkwyrvpk.asa (hash: cwFdQdAV6zODkwY2szZRrvlvnRzifxMX56MS8xtw3IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:47:d8:e0:42:a5:ac:3d:dc:e5:da:5a:c9:fd:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Validity
Not Before: Jun 13 13:01:01 2026 GMT
Not After : Jun 14 13:01:01 2026 GMT
Subject: CN=3f20d0ea81b6550e1ad6d8956405c5f28c6b0be6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:2a:7d:fe:84:89:05:c4:5c:4c:36:44:4e:
52:43:6f:34:bd:ba:cd:00:26:ec:5e:00:67:9a:88:
7a:ac:52:cf:c2:6c:8e:59:a2:3b:49:c3:e9:d4:fe:
bb:5f:08:83:72:68:d6:1a:21:64:fb:50:d1:c3:44:
c6:d5:5c:40:65:41:0f:49:1a:30:97:ee:44:98:27:
24:9c:c6:50:d4:c1:73:6f:f4:86:da:25:55:67:9e:
77:14:4c:b5:c5:cb:e3:f9:f3:b5:63:68:8e:3c:dd:
4a:1a:81:9e:4e:55:ae:5c:ca:eb:77:f7:0b:59:94:
8a:15:f1:43:f3:3a:38:97:07:a9:15:9b:50:84:d9:
f2:e8:8e:d2:cb:f4:a1:9d:48:dd:04:a1:de:bf:5e:
db:ce:7b:6e:b4:8b:3a:e6:4d:e8:26:67:7c:fa:cb:
4c:fa:82:08:5a:37:52:db:d9:1e:7f:4c:d4:6b:18:
dc:2e:2c:ba:72:93:d9:a8:bb:17:23:ee:f2:f6:5f:
2e:a6:7e:21:42:e7:47:bc:ed:f3:0f:e7:8b:15:a4:
62:66:d9:95:84:2b:03:7f:d4:a1:75:d9:de:79:55:
ed:eb:3d:d5:3a:76:15:1a:b3:85:58:ab:99:fa:5d:
2b:41:50:56:e9:99:c9:0c:d1:de:b3:47:d0:fe:07:
d9:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:20:D0:EA:81:B6:55:0E:1A:D6:D8:95:64:05:C5:F2:8C:6B:0B:E6
X509v3 Authority Key Identifier:
keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:78:1f:c8:3b:64:a9:77:6f:a1:e8:ba:72:51:f0:3a:dd:4a:
18:bd:ff:56:e8:39:c9:b8:56:4b:56:fa:04:89:fe:1f:57:46:
89:09:a8:2b:2a:3f:51:9d:c0:e8:e7:52:42:49:c9:00:58:3f:
61:a9:6b:2b:39:94:a0:2d:db:de:8f:25:e2:f1:cc:bc:15:6d:
b7:bb:54:b4:b2:0a:a8:4f:37:dd:e9:9b:b6:e4:01:b7:82:bc:
45:ae:22:53:db:6f:0a:6c:7e:40:7b:ef:a0:ee:96:64:4b:f5:
9c:00:38:ec:f9:34:e0:2d:6f:94:f9:f6:e0:85:c1:5c:f2:3a:
21:30:02:e5:3e:56:8f:04:28:54:79:a2:97:61:b2:06:ab:3e:
3c:9d:6d:5c:ff:71:ec:c3:e5:f7:67:a4:29:2e:18:db:ae:d8:
9b:e7:16:2b:ba:aa:46:0a:50:0b:15:37:84:01:d5:85:1b:06:
b7:82:3a:a6:e7:65:40:53:15:e7:da:3b:5f:48:f6:15:0b:e6:
68:80:b2:74:43:d5:75:f5:c7:db:79:02:1a:02:d5:61:4f:47:
79:b7:04:ec:54:b1:d0:4a:56:f0:cc:98:ed:d0:54:fb:35:e7:
97:3c:fb:94:2e:2e:88:8d:5f:61:97:67:f1:9b:5f:b9:8b:bc:
ad:66:10:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:26:29 2026 by rpki-client