Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
File: DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft (raw, json)
Hash identifier: OP9DL5WXf1qtM6m2WLFxDJtj70HlStLUL/IBy2KuTUU=
Subject key identifier: B0:D4:BF:74:4F:18:A8:1F:0A:66:24:42:C0:A9:A6:23:C8:C8:3E:09
Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Certificate serial: 019D9D75F107B4432CD5E60DA289EAD9391D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
Manifest number: 0143
Signing time: Fri 17 Apr 2026 22:00:45 +0000
Manifest this update: Fri 17 Apr 2026 22:00:45 +0000
Manifest next update: Sat 18 Apr 2026 22:00:45 +0000
Files and hashes: 1: DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl (hash: s3mBiFeE4BUgw45jSUH4Kl1qopO2uNiz3fibm+V9Ptc=)
2: GlhmPCyy1FDf_YTiqeYgVfiC97w.roa (hash: aM5XCtKjHw7PII1T2KGsCatDptMXLc32zqDWbo5CqIM=)
3: qqcaq47Akg1rjPpdSSbGkwyrvpk.asa (hash: cwFdQdAV6zODkwY2szZRrvlvnRzifxMX56MS8xtw3IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:f1:07:b4:43:2c:d5:e6:0d:a2:89:ea:d9:39:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Validity
Not Before: Apr 17 22:00:45 2026 GMT
Not After : Apr 18 22:00:45 2026 GMT
Subject: CN=b0d4bf744f18a81f0a662442c0a9a623c8c83e09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d1:7b:c5:ae:c6:f3:35:c4:e9:51:72:61:4d:
a5:b1:2f:89:d0:a7:1d:0b:c1:47:83:ad:86:78:a4:
1c:06:d1:df:28:2f:10:a7:cd:5e:a5:a7:03:73:0f:
44:58:5e:5f:00:59:c0:5f:cb:ee:f1:1d:e0:c2:f2:
24:77:fb:48:bf:9b:ce:fe:86:66:29:4b:f0:bd:1a:
a3:79:44:5a:fb:fa:f6:12:e5:db:00:d6:b8:87:bd:
9c:de:e8:48:81:db:a4:60:b5:94:2d:46:0b:ef:f2:
dd:a8:d9:97:ad:fd:5b:18:7c:ed:67:18:c2:48:f7:
6a:a4:12:e7:15:25:e4:5d:4b:8e:1f:85:78:89:2c:
ce:e2:fb:47:37:95:dd:a0:14:bc:9c:8e:c8:e6:51:
12:71:ed:c8:9d:18:24:f2:ed:ad:36:c8:ac:4b:da:
95:cc:df:7a:ed:33:16:5f:fd:6b:a2:c3:70:f3:7b:
04:10:0a:d4:96:21:44:91:6f:07:3d:33:e1:0e:52:
c8:3a:5a:c7:93:08:f7:94:8c:20:f6:0c:fd:f2:1f:
f2:c0:03:8c:01:7b:8d:5c:ff:19:a4:ba:ed:5b:a6:
a5:e0:ed:63:21:7f:cc:7d:6e:e9:6a:0a:9b:4b:80:
34:fc:a4:b8:58:83:9f:b3:f6:9e:f5:c5:ba:a9:c2:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D4:BF:74:4F:18:A8:1F:0A:66:24:42:C0:A9:A6:23:C8:C8:3E:09
X509v3 Authority Key Identifier:
keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:fc:de:d8:69:25:e3:89:08:86:3b:23:f5:b6:fc:bb:72:84:
d7:27:70:c8:4d:b8:72:ab:1f:0d:fe:8d:07:5d:12:c0:f3:aa:
3e:d0:64:0a:85:82:ac:b6:b4:a2:90:9f:8b:35:4f:a0:7c:a2:
f4:ef:12:4b:9b:c8:7a:5e:40:b2:5f:29:c2:61:eb:85:82:b7:
a3:c2:5f:5a:41:5f:f2:24:f9:ea:d7:1f:a9:9c:af:43:32:f2:
18:3b:3f:b5:11:89:8b:10:15:65:39:95:f4:e1:17:00:44:a5:
15:8f:07:39:79:17:8a:8e:fd:88:eb:0c:84:a2:d8:be:d5:73:
32:e5:97:fc:23:ca:98:44:a5:e0:82:93:1e:8f:28:ec:a9:83:
e6:81:2c:1e:bf:40:15:e5:bb:ba:0c:fc:ca:92:55:13:b9:83:
14:6e:6f:c8:8d:81:36:9f:50:8c:92:3f:c2:64:93:b7:73:b3:
e5:bb:59:a7:67:a2:db:dd:6e:8c:dd:77:54:07:6a:97:c1:42:
22:57:81:dd:39:f1:43:5d:58:cc:be:66:b2:9f:ef:e2:c1:91:
68:a4:69:1d:6c:de:51:90:c9:be:85:7e:2b:65:a6:79:7e:d4:
e8:7c:20:d4:eb:bd:0b:c6:04:f2:a3:88:6c:17:73:32:ec:38:
25:64:53:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:39:42 2026 by rpki-client