Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: HCYgCRuSnBzJZuU4/ogU2krusExSelBjcMPDPS6d2I8=
Subject key identifier: 32:4D:AF:2C:62:DF:3E:CB:C0:E2:B0:EE:B4:D3:67:7C:8B:CC:7A:06
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 019CA9B39196BF91DEA430EE2313AABD8ACF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 0E1A
Signing time: Sun 01 Mar 2026 14:00:43 +0000
Manifest this update: Sun 01 Mar 2026 14:00:43 +0000
Manifest next update: Mon 02 Mar 2026 14:00:43 +0000
Files and hashes: 1: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: BEIgJMMqgic5J5HMG4tT/kV63H05T/9RP9PLqTJyt1c=)
2: Qjk3TKtSPUctHgo4rsqpoAhhjHQ.roa (hash: +v/ml2xcCnK66GfWnq2Rs0P+BnSU40/q3bgPtxOvz4M=)
3: mp8yEMYVdbdzLEoPbRdKbu2ZnSY.roa (hash: gI9M1SdX++yXCyEo0irlvSsH3VM2NKOZJf1C0XjeZPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:91:96:bf:91:de:a4:30:ee:23:13:aa:bd:8a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Mar 1 14:00:43 2026 GMT
Not After : Mar 2 14:00:43 2026 GMT
Subject: CN=324daf2c62df3ecbc0e2b0eeb4d3677c8bcc7a06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1b:9f:36:d7:24:13:54:f4:be:3a:ce:f4:ac:
d2:51:6a:36:bd:9d:41:0f:7b:61:0d:90:48:d8:2e:
7e:54:71:db:67:c0:c8:e1:4f:77:f3:d4:23:81:69:
22:ce:a9:fa:dd:ba:16:bf:80:1b:7f:f2:b7:c8:55:
e9:ad:f8:d1:5a:4a:ba:32:30:f6:60:88:33:b1:3b:
a9:c6:6a:98:9e:6e:c3:43:dc:53:93:71:e8:5f:31:
dc:7b:46:62:01:0a:91:42:d6:03:db:b0:45:10:6a:
45:af:e0:8f:41:1a:33:cc:3c:f8:40:0a:76:2e:75:
b8:80:71:65:26:a9:b1:84:b3:ce:9c:d7:30:0c:9c:
f4:76:34:6f:0a:00:1a:fc:ea:fb:f4:1e:59:e7:78:
92:d4:f3:90:9c:c9:45:1a:0e:ab:84:93:89:e4:13:
50:0f:ae:9c:4e:ab:c9:34:d1:8a:ab:84:53:a7:aa:
76:51:05:1f:3d:64:70:ad:6e:fc:ea:c6:82:80:26:
7f:52:4d:2e:1e:a0:4e:54:61:05:89:0b:06:fc:96:
47:8b:7c:40:55:90:ac:e4:19:da:6c:02:78:18:df:
2d:66:18:fb:3b:1c:40:2d:95:33:74:78:d0:5a:84:
78:17:5d:22:4d:f6:2c:64:68:ce:aa:21:ab:95:f7:
52:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4D:AF:2C:62:DF:3E:CB:C0:E2:B0:EE:B4:D3:67:7C:8B:CC:7A:06
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:c7:3f:f9:d8:83:70:03:f7:42:e4:c5:c0:7b:81:a9:5a:c9:
2f:61:3f:49:c9:24:5b:8a:14:46:9d:c9:4c:99:8f:01:61:d3:
61:d4:85:4b:0a:38:87:aa:25:a2:60:8f:a1:05:83:3f:a3:50:
8a:84:33:af:d9:bf:f2:bd:cb:24:34:6b:71:79:9d:73:c6:76:
c9:c3:a9:30:75:b7:a8:d2:d6:44:21:78:59:8b:33:4f:23:05:
7e:96:40:46:58:64:b6:11:e9:79:78:ab:7b:d9:00:d6:3f:cd:
58:b4:22:e4:56:01:af:60:aa:49:bd:d5:ea:11:bb:55:59:de:
34:e5:2c:9c:21:57:4e:fd:ef:8b:f8:9c:e0:02:6f:f5:95:12:
49:c8:93:1b:84:82:2e:d4:6e:21:21:9b:85:38:8c:c8:88:23:
df:ca:9d:42:d5:7a:17:24:07:4d:bb:3a:3b:03:85:c8:d3:4c:
91:47:aa:ff:32:34:42:ff:3c:ee:a4:29:f4:98:4a:0e:a4:51:
76:95:d1:1b:f2:2b:09:8a:35:1e:d7:46:a6:7a:b4:a1:e0:ec:
25:51:a1:0e:b9:01:63:2e:aa:ac:d2:7f:b5:3a:97:e0:f8:e9:
d7:19:45:f7:5d:73:dd:31:dc:4a:8d:86:08:85:b1:88:72:c8:
ac:91:61:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:23:33 2026 by rpki-client