Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
File: DKqIQOU7uWW-UZLIW3QDReegZSw.mft (raw, json)
Hash identifier: CyeF1akLbvY64/Ivn17ElVQOuRMkuru+hzgtXfyA2gw=
Subject key identifier: 69:0E:58:E6:F8:96:5E:B7:50:EE:D9:64:89:32:3A:21:8D:C8:08:4D
Authority key identifier: 0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
Certificate issuer: /CN=0caa8840e53bb965be5192c85b740345e7a0652c
Certificate serial: 019D992B6083CDB5F88826D0F3493A296221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
Manifest number: 0E96
Signing time: Fri 17 Apr 2026 02:00:49 +0000
Manifest this update: Fri 17 Apr 2026 02:00:49 +0000
Manifest next update: Sat 18 Apr 2026 02:00:49 +0000
Files and hashes: 1: DKqIQOU7uWW-UZLIW3QDReegZSw.crl (hash: mUl9Ko7FMae8EJYz2DqxoCx4Kqy0JfbRfEiCdEWakQc=)
2: Qjk3TKtSPUctHgo4rsqpoAhhjHQ.roa (hash: +v/ml2xcCnK66GfWnq2Rs0P+BnSU40/q3bgPtxOvz4M=)
3: mp8yEMYVdbdzLEoPbRdKbu2ZnSY.roa (hash: gI9M1SdX++yXCyEo0irlvSsH3VM2NKOZJf1C0XjeZPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:60:83:cd:b5:f8:88:26:d0:f3:49:3a:29:62:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0caa8840e53bb965be5192c85b740345e7a0652c
Validity
Not Before: Apr 17 02:00:49 2026 GMT
Not After : Apr 18 02:00:49 2026 GMT
Subject: CN=690e58e6f8965eb750eed96489323a218dc8084d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:1b:82:dc:23:4b:e6:f5:42:11:34:8f:b9:
29:de:90:94:a1:cf:d2:db:01:4a:9f:11:58:74:6b:
31:81:7d:e3:83:ba:85:a4:4c:f9:3e:bb:83:1a:b1:
bf:a6:3c:86:7b:b9:d7:07:68:e2:f1:cf:ce:87:e6:
68:a6:65:87:1a:38:f9:42:a5:54:8c:2a:a9:b8:ee:
80:3b:3f:76:41:f9:70:9e:fa:72:1c:98:f4:0f:bc:
93:54:a8:f1:8f:5e:24:0f:f9:36:23:4a:8f:52:63:
ca:98:6f:65:20:28:a0:fd:66:9a:23:b1:31:d7:90:
47:b1:7b:cc:04:39:26:42:5e:3a:ef:7e:9b:3e:78:
fc:dc:f1:59:a5:84:84:91:1a:0d:1f:2c:45:ff:16:
74:8d:84:93:fa:f5:2a:f2:a4:49:3a:af:87:be:94:
d2:ec:8a:44:d5:72:f0:4e:9c:69:73:cf:37:64:03:
e7:2f:bb:3c:c6:9c:8b:33:4b:4f:f7:48:00:51:c6:
f5:77:3f:10:2c:fb:8c:de:ef:44:24:ae:da:84:ce:
9a:6f:7c:10:eb:f5:1d:9e:a7:61:42:49:5c:5b:70:
d3:c5:0f:b1:48:14:32:00:ac:04:6b:48:94:58:9e:
eb:db:b0:50:2f:bb:95:d9:8f:18:a0:7c:72:53:33:
3f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:0E:58:E6:F8:96:5E:B7:50:EE:D9:64:89:32:3A:21:8D:C8:08:4D
X509v3 Authority Key Identifier:
keyid:0C:AA:88:40:E5:3B:B9:65:BE:51:92:C8:5B:74:03:45:E7:A0:65:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKqIQOU7uWW-UZLIW3QDReegZSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/c67c3e-45c6-4c81-9738-c44ddffa69ab/1/DKqIQOU7uWW-UZLIW3QDReegZSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:bd:f7:cb:3e:6b:97:79:dd:5b:44:f7:97:85:8d:82:c1:68:
a3:fb:9b:4b:11:69:9d:3e:4a:c2:fc:2f:90:50:1a:6b:cf:22:
aa:25:ba:10:d6:99:8f:4f:d2:83:ee:2d:36:c0:37:11:4b:61:
25:ca:6f:84:05:b5:69:ea:07:87:e4:d6:8d:1c:c8:99:2a:8b:
9b:24:9e:b5:b1:ff:4c:c8:b9:c3:46:21:1a:9e:28:ab:a8:d5:
2b:10:00:68:89:29:7b:0c:55:3f:8f:5d:23:75:ad:eb:e5:7e:
e7:ad:f2:ce:45:70:13:56:1f:6d:8d:c2:c2:f6:53:07:34:d7:
02:37:5e:37:08:4a:76:61:b2:6a:db:07:4c:ab:4c:50:63:5e:
78:2f:f5:93:44:9c:2d:12:6d:f7:39:06:88:08:39:4f:54:4e:
15:37:06:06:91:fe:9b:02:63:ff:2c:92:f0:b1:57:98:98:77:
4f:30:13:b5:16:5c:b1:b1:ba:a8:2c:99:70:3c:0e:96:fd:fe:
11:dc:34:02:2d:8b:49:e1:b6:1a:60:91:c2:38:75:de:24:8f:
e0:7d:ed:6a:1a:20:aa:0f:76:3d:d4:ec:89:2d:d6:2e:18:25:
53:eb:1d:5b:2d:c7:6a:91:69:d5:ed:b4:2a:79:f4:2a:a6:e7:
de:ae:88:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:36 2026 by rpki-client