Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
File: DkOg3wWaUlGkALWh8TIboA0xINI.mft (raw, json)
Hash identifier: p5diM0gTClc/3qHufY7orG9TKn1qEbDxCSadjY21M0o=
Subject key identifier: 70:1D:92:2B:B0:C9:4F:DB:04:F2:FA:7A:A7:1C:EF:64:78:18:D7:C8
Authority key identifier: 0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
Certificate issuer: /CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Certificate serial: 019FA9E32B6D96973B0109BBA92D3DA76175
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 18:01:05 +0000
Manifest this update: Tue 28 Jul 2026 18:01:05 +0000
Manifest next update: Wed 29 Jul 2026 18:01:05 +0000
Files and hashes: 1: 4dMXi4_OZ1hIYb5lfSEix8dXAV4.roa (hash: pso0l4AjjbTbnTQh+xQFS2oQ9IVZGMVy1LttU/eMjhU=)
2: DkOg3wWaUlGkALWh8TIboA0xINI.crl (hash: 2wiYqYmSsFFEqDxBhzrFYgvlh6PyUZ4+xe63eJRnhT8=)
3: X5rHphgjA2Ovs-Yct52WJKfW_k8.roa (hash: fS9NXooFPX4VLQ4SoiMsokXMu0rmiVlmUkYsHNO+cLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e3:2b:6d:96:97:3b:01:09:bb:a9:2d:3d:a7:61:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e43a0df059a5251a400b5a1f1321ba00d3120d2
Validity
Not Before: Jul 28 18:01:05 2026 GMT
Not After : Jul 29 18:01:05 2026 GMT
Subject: CN=701d922bb0c94fdb04f2fa7aa71cef647818d7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1b:2d:cb:f9:ad:f7:7c:d4:dd:2b:1e:c7:52:
e5:1c:3f:59:63:38:af:8f:55:99:02:25:bc:e0:50:
b4:8b:dc:01:df:94:93:83:30:5a:27:c7:f4:f9:43:
66:a9:f9:6f:0b:d2:e4:9b:f8:ef:0e:f9:f6:d1:6c:
28:fd:4c:66:d4:16:fe:7e:31:55:e6:e6:5c:d1:6d:
3f:86:14:90:e5:63:8e:90:ea:76:dd:6d:79:53:15:
eb:9e:84:ed:69:4e:97:04:98:84:18:eb:4b:ec:23:
dd:b9:04:66:98:d8:88:3d:b7:e4:9e:10:86:de:10:
6f:62:00:06:bc:46:f8:5e:0d:b6:3d:45:2a:7e:3e:
83:bc:56:31:01:ba:3a:bc:e9:87:7c:0b:ad:e5:20:
b9:b7:ea:5e:43:34:a4:17:16:d7:ba:26:7f:3d:fa:
d3:99:f3:16:1e:ec:b4:3e:37:76:a9:04:42:cc:fb:
f8:80:77:d9:a2:6b:12:27:8b:86:b0:fd:5a:05:b5:
c3:f7:2b:4a:4a:14:cc:cb:17:2b:6f:aa:a1:ee:7f:
cc:71:88:3e:8e:57:31:ab:1b:8b:51:f9:0e:4f:b4:
85:c6:b8:d2:49:11:11:f8:a9:d8:db:de:9e:63:f1:
ed:2d:a9:89:71:60:d5:05:6a:8d:dc:08:1b:c4:e4:
5f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1D:92:2B:B0:C9:4F:DB:04:F2:FA:7A:A7:1C:EF:64:78:18:D7:C8
X509v3 Authority Key Identifier:
keyid:0E:43:A0:DF:05:9A:52:51:A4:00:B5:A1:F1:32:1B:A0:0D:31:20:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkOg3wWaUlGkALWh8TIboA0xINI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0bb33b-68f7-4748-84ac-004fe433c7c8/1/DkOg3wWaUlGkALWh8TIboA0xINI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ac:e2:eb:01:da:6b:77:d9:7d:25:57:01:d9:dd:0d:d5:ce:
62:60:67:5d:75:f4:7f:ea:1a:0c:01:8e:0b:ee:c2:25:e2:c7:
5c:f1:8b:b6:4e:d1:3c:bd:e3:0c:47:dc:b4:eb:20:c2:5e:81:
1b:9d:27:65:ed:9b:ee:16:9f:82:63:0a:07:81:6d:cd:a8:35:
56:07:a8:6c:00:ae:f5:71:fd:50:7b:d2:9c:05:6f:68:ac:3f:
27:ba:45:7d:26:39:1b:6b:11:b1:80:ab:17:82:18:96:03:5a:
c8:35:af:9c:10:39:3a:9c:23:75:6d:8b:c2:0d:ce:da:64:4f:
9e:44:1b:58:ed:c9:73:5a:a7:38:60:13:0b:5f:b5:a4:a6:67:
d6:78:72:47:e0:ba:d6:3a:15:4f:30:d6:9a:8f:a2:aa:1c:be:
e9:20:66:e7:03:79:47:3b:cb:60:ad:ea:80:ab:5d:42:96:a9:
c9:dc:a3:4f:74:04:b3:b1:57:b1:d2:2b:bd:6d:7e:eb:74:e4:
f0:03:01:5a:ef:4a:de:c4:f6:8a:d5:fd:20:aa:de:f5:9a:15:
a8:04:18:61:47:79:89:a6:64:66:5f:33:7d:94:a8:96:34:54:
f5:80:12:4c:ad:e4:a8:ff:f9:e5:46:de:e1:c3:12:83:59:bb:
23:a0:a9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:21:23 2026 by rpki-client