Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: AWBMTCqHIpeXpXOHG9phCAoT/u2MFswIpvI98RGlmJc=
Subject key identifier: 16:1B:61:16:97:27:F5:4E:E8:72:FC:09:5C:D4:94:79:FE:04:2F:E5
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 01A0C256A87868363753BFE73B9EDF93CC4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 1039
Signing time: Mon 21 Sep 2026 05:00:54 +0000
Manifest this update: Mon 21 Sep 2026 05:00:54 +0000
Manifest next update: Tue 22 Sep 2026 05:00:54 +0000
Files and hashes: 1: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: AdAbHmw4b+Adw2SiOeoiF0Gnz2ITIjKujiaddaAYiCg=)
2: Qjk3TKtSPUctHgo4rsqpoAhhjHQ.roa (hash: +v/ml2xcCnK66GfWnq2Rs0P+BnSU40/q3bgPtxOvz4M=)
3: mp8yEMYVdbdzLEoPbRdKbu2ZnSY.roa (hash: gI9M1SdX++yXCyEo0irlvSsH3VM2NKOZJf1C0XjeZPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:a8:78:68:36:37:53:bf:e7:3b:9e:df:93:cc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Sep 21 05:00:54 2026 GMT
Not After : Sep 22 05:00:54 2026 GMT
Subject: CN=161b61169727f54ee872fc095cd49479fe042fe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:db:0b:b9:af:da:c9:f4:65:68:25:15:f4:fd:
6a:52:90:94:fc:55:64:79:80:e1:f8:64:d5:8f:3a:
7a:fd:8d:91:0b:3f:50:4d:1c:f4:1b:03:10:74:b7:
44:2c:4d:f7:68:2a:7b:0a:99:b6:98:c6:0e:83:e9:
b6:d7:31:46:35:e5:10:9a:4b:a1:e4:f6:3d:6b:d4:
f3:e6:57:24:0c:0e:8c:ef:e0:c3:63:8b:db:3a:e1:
85:0e:40:3d:35:76:e2:01:d4:06:c0:46:ae:51:f1:
c2:d0:1f:da:c8:b0:2b:3a:ce:eb:7f:1a:4f:f3:3b:
2c:ee:6e:8a:97:0d:54:e4:f0:bc:f9:34:4c:36:15:
99:7f:5f:7e:40:93:bf:e0:47:69:ff:0b:09:e2:96:
3f:88:5b:3c:eb:e5:ea:58:e1:d6:45:72:f5:c9:22:
51:47:27:4e:84:49:bb:58:51:f7:18:49:30:34:76:
bc:86:a8:9e:d3:39:51:7c:6f:33:87:59:95:21:ac:
b8:31:7b:d7:e6:3f:de:65:43:55:ed:a0:d3:47:49:
bb:59:37:ae:63:a7:fe:5e:b3:75:cd:3e:e5:08:10:
56:46:b1:3f:e9:66:66:e5:2e:96:28:39:81:43:00:
fb:2e:60:b6:1f:73:61:96:81:f0:b8:70:17:8e:b8:
28:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:1B:61:16:97:27:F5:4E:E8:72:FC:09:5C:D4:94:79:FE:04:2F:E5
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6b:15:9a:2c:59:a0:dd:5a:b9:78:34:7d:35:ea:c5:0f:17:
35:04:eb:55:70:c9:39:36:28:01:d6:b6:7f:85:ed:4a:41:6c:
5e:a5:5c:b3:ee:d2:17:67:1e:e4:53:dd:6b:f7:dd:60:94:25:
07:9c:70:6e:7c:12:24:9e:60:41:ca:ce:96:e6:84:06:a7:f2:
fe:4d:68:3c:df:8f:aa:b2:e5:cf:d7:4d:35:71:a3:aa:64:1a:
7a:06:42:9a:d9:7b:b0:55:bd:87:22:7e:96:2c:00:66:90:c9:
53:ac:3c:84:20:e8:cf:71:d3:1d:69:bc:af:6a:d0:2b:cf:bf:
be:cf:23:7c:c9:04:55:d2:da:f1:60:4a:1a:36:d8:de:43:3e:
37:e0:3a:44:6c:83:ec:ee:89:12:c5:e0:13:91:07:73:e6:22:
50:5d:61:22:d3:96:46:e8:8c:b3:67:0b:c2:d9:eb:4b:fe:22:
fa:3c:6c:72:74:4c:4c:2e:38:ff:d1:ff:c9:8d:12:5a:58:4d:
76:12:22:83:12:b3:82:c7:03:6a:45:d5:27:52:61:91:32:4a:
73:8c:1b:4f:23:10:58:34:f8:46:11:e6:12:b5:0c:ad:65:fc:
2e:06:47:a5:ed:75:ca:40:9a:fc:90:0b:85:02:28:90:9d:fb:
f1:b6:70:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:09:23 2026 by rpki-client