Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
File: DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft (raw, json)
Hash identifier: 5pWxJ5BJ/ihhwHL4siws7CVwkdB1LQnCup4Ke+0oRQk=
Subject key identifier: 3F:D6:30:C3:B5:44:C9:68:A1:C4:28:B6:92:18:61:84:26:8D:D5:B5
Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Certificate serial: 01A0C88F4ED6E3DAF36BE2B22FC6F90E4826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
Manifest number: 02E7
Signing time: Tue 22 Sep 2026 10:00:29 +0000
Manifest this update: Tue 22 Sep 2026 10:00:29 +0000
Manifest next update: Wed 23 Sep 2026 10:00:29 +0000
Files and hashes: 1: DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl (hash: 7GxJXan40/y5Zw8HaCgU5sOc0kwJ/3LX2NX152BdLv0=)
2: GlhmPCyy1FDf_YTiqeYgVfiC97w.roa (hash: aM5XCtKjHw7PII1T2KGsCatDptMXLc32zqDWbo5CqIM=)
3: qqcaq47Akg1rjPpdSSbGkwyrvpk.asa (hash: cwFdQdAV6zODkwY2szZRrvlvnRzifxMX56MS8xtw3IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:8f:4e:d6:e3:da:f3:6b:e2:b2:2f:c6:f9:0e:48:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Validity
Not Before: Sep 22 10:00:29 2026 GMT
Not After : Sep 23 10:00:29 2026 GMT
Subject: CN=3fd630c3b544c968a1c428b692186184268dd5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:18:32:aa:f6:ea:07:a6:e8:70:aa:af:a3:39:
9e:7e:33:64:f0:a1:09:3d:ac:17:0a:fe:c6:ed:99:
4a:5c:86:c3:48:74:46:c8:96:40:17:1d:dc:bf:45:
c7:2b:cd:1f:95:0b:c5:99:b0:34:00:91:b7:07:14:
52:46:10:83:53:ab:f5:fc:37:30:2a:b4:fd:63:86:
a9:d4:10:91:8d:9c:79:ef:7d:6b:9f:8e:29:23:57:
a9:4b:cd:fe:0d:73:fa:11:23:61:93:55:b0:0b:98:
7a:0c:ed:37:d7:38:d8:b3:3d:86:59:57:be:9a:f9:
37:89:45:f0:de:52:92:32:72:a9:4f:81:17:7b:06:
c0:5b:be:b3:80:ed:9e:50:bb:a8:b6:d9:a0:79:4c:
9d:97:a0:04:98:07:d9:43:1d:de:b3:97:c8:a0:38:
c0:84:b7:ce:2c:dc:46:46:27:f1:2f:88:03:ed:42:
79:1a:08:b5:5f:12:a1:7d:9f:66:c2:ab:f0:c1:bb:
08:24:af:9b:44:de:f2:fe:78:97:fd:33:b2:4c:d4:
c7:d5:c5:99:65:f3:68:df:c9:f9:71:1d:6b:14:c8:
eb:2c:ee:a3:e0:0f:fb:f4:d1:dd:8d:a0:34:39:59:
a1:1f:95:cb:cb:4e:3b:7a:ce:11:91:3b:37:f0:7a:
72:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D6:30:C3:B5:44:C9:68:A1:C4:28:B6:92:18:61:84:26:8D:D5:B5
X509v3 Authority Key Identifier:
keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:28:36:eb:8f:28:d6:9a:a7:8b:62:3b:89:07:ff:9c:b7:6c:
a0:bf:5d:c4:47:38:2e:ed:18:f4:46:7f:c3:c4:b7:a4:9c:05:
cf:69:5f:0d:a8:6a:99:2f:1c:6e:f0:7e:ad:24:fb:f6:77:c5:
e0:a1:ec:48:d1:fc:db:9f:48:ed:3f:cf:6b:6c:b2:71:53:8b:
22:2a:03:c9:ea:98:11:6f:78:e7:32:e3:05:38:b1:a0:53:23:
78:ea:ae:35:d6:d5:0a:2a:a4:9c:23:1b:1e:2b:5a:0f:b4:e4:
1d:a4:57:31:0b:dc:e9:0b:fa:c3:aa:59:3a:9c:3d:ba:ab:3b:
08:12:89:f7:ef:70:67:0b:e5:49:ca:64:b7:fa:bd:e6:c3:19:
01:ba:e9:24:1a:49:27:65:fa:52:63:ee:b4:f4:fa:60:b8:2a:
ea:1c:dd:0c:f3:68:99:be:5a:64:af:16:b4:a3:a4:37:d3:2e:
47:d0:4a:de:6d:3b:67:ec:70:07:06:ae:af:88:db:6f:07:12:
90:23:8a:c1:02:9b:63:5a:c3:85:74:91:77:7d:fa:0a:4f:72:
f9:58:40:f8:2f:eb:7f:9a:70:6e:16:73:52:c7:d3:95:95:9a:
5a:9c:85:4f:4a:61:07:df:28:04:37:f6:6f:c5:1a:d0:81:76:
21:c5:ee:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 13:08:47 2026 by rpki-client