Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: G+OLLJ2O66d+IrYJSeEKLzK093lLH1bkCTUSOJW3moc=
Subject key identifier: 7E:B4:E4:B7:DC:68:A4:ED:3A:E4:83:7A:91:BE:15:57:5D:3D:CF:84
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 01A1E027A1147AF50E555ABAF7A44C42944E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 10CD
Signing time: Sun 15 Nov 2026 17:00:55 +0000
Manifest this update: Sun 15 Nov 2026 17:00:55 +0000
Manifest next update: Mon 16 Nov 2026 17:00:55 +0000
Files and hashes: 1: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: kAfQgytoHf11g/cUQOKCA4uKz768PPezjmzWFOvFMtE=)
2: Qjk3TKtSPUctHgo4rsqpoAhhjHQ.roa (hash: +v/ml2xcCnK66GfWnq2Rs0P+BnSU40/q3bgPtxOvz4M=)
3: mp8yEMYVdbdzLEoPbRdKbu2ZnSY.roa (hash: gI9M1SdX++yXCyEo0irlvSsH3VM2NKOZJf1C0XjeZPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:27:a1:14:7a:f5:0e:55:5a:ba:f7:a4:4c:42:94:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Nov 15 17:00:55 2026 GMT
Not After : Nov 16 17:00:55 2026 GMT
Subject: CN=7eb4e4b7dc68a4ed3ae4837a91be15575d3dcf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:74:46:a7:34:ce:4f:80:6f:2f:89:67:a2:85:
6b:90:68:9e:5f:82:33:88:5a:7d:08:8c:84:4c:a5:
0b:84:d2:2e:4c:e6:ef:ee:e1:31:bc:24:d8:db:95:
e5:22:9a:ab:d4:d7:ea:18:b2:2a:3b:e3:a6:eb:0a:
ec:f6:89:e1:06:e8:98:15:9b:9f:97:68:9e:c4:60:
57:f6:b3:0f:65:88:c8:8d:fe:b6:52:54:b5:1d:6c:
1f:cd:63:41:fc:83:10:9a:45:0a:eb:03:ae:8a:40:
07:a8:9b:5f:71:d7:93:7c:9c:b1:70:e1:41:fc:8f:
da:dd:a1:ae:1d:76:2e:54:00:bf:51:b8:09:66:59:
7d:38:9c:9d:7c:3e:08:6e:02:03:88:66:38:e7:ac:
ba:c7:9e:13:3c:b8:84:94:5c:45:67:0a:94:7b:73:
5a:ef:ad:cb:19:2c:67:df:f9:ba:23:ac:26:64:50:
13:ea:db:e5:90:37:78:c3:85:c9:ba:82:d1:81:28:
3b:d5:c4:b6:4b:c9:80:57:e3:1a:8e:a2:e9:7c:22:
51:a0:91:4e:9d:fb:8d:06:2e:36:d2:c3:40:25:70:
a5:b7:f8:10:e6:21:97:35:db:09:40:49:ac:b5:f4:
3c:27:af:35:ed:17:e4:9a:3d:5a:b0:3f:2a:62:4d:
b6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B4:E4:B7:DC:68:A4:ED:3A:E4:83:7A:91:BE:15:57:5D:3D:CF:84
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:78:4d:52:ca:85:8f:be:22:b7:a9:c4:f9:d1:0c:a4:13:11:
ec:3f:c0:3c:0d:6b:8f:4d:be:65:ff:c1:bb:b9:70:d8:a5:e7:
d3:78:32:d5:1a:1d:22:0f:e0:89:af:ab:42:67:2b:00:7f:39:
70:40:24:6e:54:1b:c9:a5:ed:c1:57:d3:b5:f6:f2:3e:3f:98:
92:f8:57:b4:82:a1:49:fe:9c:fd:e4:6f:83:ed:60:b6:de:60:
fd:da:66:5b:02:77:16:6b:96:28:0d:bb:57:d8:8d:83:c7:45:
b3:de:8e:f8:fc:4f:cf:e5:c0:b1:95:0a:8b:ab:c0:16:73:41:
9a:b0:a1:ff:74:de:69:23:94:95:5c:78:9e:6c:51:b4:07:75:
d8:69:68:a4:36:56:65:e7:4c:35:e9:e1:c1:c1:43:c7:91:42:
a6:93:a3:4a:84:57:c5:08:41:ec:2a:f1:4e:31:8f:c6:dc:c1:
4f:1d:14:01:ff:7b:57:3c:0a:ea:2e:4a:03:73:e2:fc:5d:28:
06:39:fd:09:d3:52:7b:60:9d:ec:1f:5a:be:05:eb:5c:86:25:
b8:35:ef:34:c7:50:aa:18:d2:6d:c7:44:01:76:8f:96:6a:b0:
20:f2:cb:b8:a9:f7:4c:54:21:c7:64:ee:6b:05:a0:a1:82:02:
36:3d:a8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:56:43 2026 by rpki-client