Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: yHmFaIapdPzNRUyd71pCrt29ba3xa2vfZxbpHy76LnY=
Subject key identifier: 4B:77:C1:AA:23:C3:AA:8C:F3:AE:8B:0A:78:A0:CC:32:01:E9:70:5B
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 019FA86240B42C922EEA31A766CB0BF8E506
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 0FA7
Signing time: Tue 28 Jul 2026 11:00:39 +0000
Manifest this update: Tue 28 Jul 2026 11:00:39 +0000
Manifest next update: Wed 29 Jul 2026 11:00:39 +0000
Files and hashes: 1: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: PaDc4g6V7Pq5mhizEX0CNhykvU04N4RRu485rTcS+ts=)
2: Qjk3TKtSPUctHgo4rsqpoAhhjHQ.roa (hash: +v/ml2xcCnK66GfWnq2Rs0P+BnSU40/q3bgPtxOvz4M=)
3: mp8yEMYVdbdzLEoPbRdKbu2ZnSY.roa (hash: gI9M1SdX++yXCyEo0irlvSsH3VM2NKOZJf1C0XjeZPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:40:b4:2c:92:2e:ea:31:a7:66:cb:0b:f8:e5:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Jul 28 11:00:39 2026 GMT
Not After : Jul 29 11:00:39 2026 GMT
Subject: CN=4b77c1aa23c3aa8cf3ae8b0a78a0cc3201e9705b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:77:ef:2c:d7:a3:a8:d4:fe:9a:90:bd:e3:c4:
7f:4e:05:b9:37:15:9c:7b:b2:6a:de:c3:4a:29:cd:
af:bc:e1:3e:b6:7d:98:be:7e:6d:b8:0e:66:29:87:
aa:be:40:63:80:0f:02:bb:94:5d:29:f1:ca:1a:89:
56:63:ea:88:6c:c8:b9:21:fd:80:8b:14:0d:20:9b:
5c:41:0e:0f:64:da:92:b2:c0:d4:ca:cf:e8:a9:1d:
72:4b:fe:57:1f:7d:fe:dd:a7:2d:ce:7a:2e:62:71:
ce:1b:7d:ab:cf:ae:38:ef:7f:81:cc:85:34:9e:93:
6d:6c:9e:27:8b:4a:e8:cc:6b:0e:c1:c6:e2:2b:8d:
a9:96:43:cc:14:8a:3d:46:1d:2e:94:c2:35:0d:e7:
45:bf:2d:cc:81:4e:09:12:d1:36:c4:79:33:22:d8:
ec:dd:5c:33:82:86:01:4f:d1:33:b4:87:a6:d0:45:
90:d2:f9:8f:80:9c:af:2a:2a:7a:4f:fd:83:6d:9a:
56:88:15:53:30:1b:3b:4a:9b:68:32:e9:d8:97:c5:
b2:fb:3e:ed:ac:65:63:b0:08:8a:e1:1d:45:fd:87:
76:b1:d1:17:e6:a9:3f:7f:bd:97:df:84:7b:99:03:
21:c7:ee:85:8f:bd:1e:6a:af:01:59:3b:49:7b:98:
27:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:77:C1:AA:23:C3:AA:8C:F3:AE:8B:0A:78:A0:CC:32:01:E9:70:5B
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:a9:eb:5a:3a:41:86:06:e3:6b:f6:dc:05:1d:e3:64:bb:a5:
41:c0:f2:00:70:a2:2f:cd:e6:b2:93:c7:07:cf:da:55:8e:6a:
e9:33:1e:b5:31:b0:9c:fc:03:39:87:5b:2d:73:54:98:1e:54:
3c:85:55:ee:82:ab:4a:ae:cd:bd:25:ea:cc:f2:e3:a5:74:01:
00:0c:bb:62:93:9a:b8:c3:a8:03:45:9f:4d:04:2d:af:82:b8:
52:bc:7f:f5:b0:c8:a0:a9:2b:89:64:fd:1b:54:e0:b2:53:53:
d2:58:ed:9d:76:83:ca:cd:d9:be:92:2c:9e:fb:76:41:52:ee:
f1:84:62:5d:df:ac:65:82:4c:db:09:35:b4:3c:e2:ef:94:ee:
2f:c2:b1:7e:cc:5f:7b:b3:f4:0e:52:3a:f7:ed:60:8a:a2:65:
9f:47:f5:e0:de:40:f8:ea:3a:a5:3a:ad:05:82:a6:bb:4e:7f:
44:25:d0:aa:f2:d8:d4:91:90:28:82:64:fa:97:82:df:c9:11:
84:94:92:d4:d0:0a:a5:a4:fc:e7:2b:99:b2:ae:91:6f:ab:97:
7f:82:96:b4:d7:69:f2:e2:1e:b9:7b:0d:e7:38:86:0c:d4:37:
8e:b1:f7:8a:bb:d6:7c:99:db:c5:a4:f9:f6:50:ac:f7:3b:e5:
11:36:29:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:01 2026 by rpki-client