Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
File: dcqtndM2-CAZCTaTYHy57S-ZDXE.mft (raw, json)
Hash identifier: f8ZxU0sjMuEFQIQWoCHuzeVmaRxAimo80ArSc5MJC/Q=
Subject key identifier: F4:96:48:CF:E5:D6:DA:74:49:A7:22:11:58:25:46:9C:2E:66:29:9B
Authority key identifier: 75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71
Certificate issuer: /CN=75caad9dd336f82019093693607cb9ed2f990d71
Certificate serial: 019FAC7699D757327776D07CC25CF062DD5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:21 +0000
Manifest this update: Wed 29 Jul 2026 06:01:21 +0000
Manifest next update: Thu 30 Jul 2026 06:01:21 +0000
Files and hashes: 1: dcqtndM2-CAZCTaTYHy57S-ZDXE.crl (hash: X7labp1B2xbUchwmWaIVShP8qjqq6RHMFUbazav+niQ=)
2: wDVVsACpsiR5l1cTOi-d9O7OwNM.roa (hash: brl42J6QrRGQ7zMiwW/xpTyzUuzmwf2YtA561oH5iPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:99:d7:57:32:77:76:d0:7c:c2:5c:f0:62:dd:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caad9dd336f82019093693607cb9ed2f990d71
Validity
Not Before: Jul 29 06:01:21 2026 GMT
Not After : Jul 30 06:01:21 2026 GMT
Subject: CN=f49648cfe5d6da7449a722115825469c2e66299b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:05:95:0a:75:b6:8c:58:55:59:43:d0:cc:
48:9c:e5:e8:ca:14:a2:df:bb:0c:7f:a0:2d:dc:42:
9f:33:92:24:49:d2:c7:5f:9b:53:1d:d6:4c:dd:f9:
55:79:0d:34:ba:70:4d:14:41:f7:e1:6d:43:b0:80:
06:09:0a:7b:04:97:08:fa:4d:71:34:ac:2d:ea:0c:
b0:54:c1:69:42:0e:1b:d3:e1:3a:a8:59:7a:99:b7:
2a:42:6c:e2:54:02:1b:c5:4c:79:3f:79:bd:c5:e5:
b7:80:66:d7:cf:ec:4c:4b:6e:1b:84:41:4d:fc:db:
59:27:5b:18:d2:b5:d4:d6:7c:86:bc:97:26:af:dd:
39:e5:9a:62:ce:f3:54:82:45:89:e2:20:ae:7e:90:
19:ee:c2:70:da:12:ab:0f:1b:f5:57:bc:8f:d5:34:
89:6e:e8:fc:11:b6:6d:6e:92:f8:b7:45:f2:a7:d1:
52:cb:72:f1:8c:d8:9e:c1:d1:f0:9b:b9:54:06:93:
78:f6:ca:df:ac:30:5a:ec:42:dd:43:3c:e2:d6:50:
3b:8d:cc:60:1e:7f:85:75:b6:a7:f7:cf:cf:b4:d6:
6e:e4:d6:c0:4f:4e:3b:8b:36:1b:a0:d4:7f:ed:99:
4b:8e:d0:4a:3b:ea:81:9a:b9:f6:f6:45:0e:57:27:
2a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:96:48:CF:E5:D6:DA:74:49:A7:22:11:58:25:46:9C:2E:66:29:9B
X509v3 Authority Key Identifier:
keyid:75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:1b:70:12:04:bf:27:62:91:60:6d:00:7c:7c:d5:7b:8b:2d:
7f:52:45:56:63:4e:4c:42:f6:07:89:7d:9a:12:cd:70:04:e1:
e0:47:dc:ec:59:b6:24:6c:af:9e:29:85:e2:ba:b7:bf:4c:f9:
58:18:ba:c4:f0:e2:e7:e5:4b:04:18:38:fa:12:14:d3:e8:43:
d8:a2:49:fa:f4:ec:c0:7c:cb:d3:1b:f9:2f:b4:46:35:42:40:
be:fb:50:cd:af:3a:08:0e:06:e5:4d:0f:c4:8e:43:00:58:bc:
27:8b:14:0d:ff:1b:d5:4c:b2:46:8b:5d:1d:d1:bd:89:a2:bd:
e4:3e:97:fc:1a:b8:ae:70:71:e2:e0:73:52:5b:53:1b:5d:70:
35:e1:23:ec:4f:83:a8:04:66:3a:e9:81:52:a9:97:2a:3d:f8:
9c:4c:a5:bb:db:f4:b1:cb:3d:4c:00:c0:cd:66:32:6d:62:d5:
3b:d7:d3:33:99:d4:5d:9d:ae:22:a3:16:9f:59:51:b3:45:80:
c0:2b:50:96:eb:a0:45:11:ac:a5:fa:20:9b:df:31:bc:30:54:
82:11:78:37:dc:ba:e8:c7:e9:e8:fa:c2:0f:b8:32:aa:b3:5f:
0b:4a:77:a0:4d:19:26:6d:cf:44:5f:45:75:21:ac:58:08:aa:
45:7f:e3:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:05:10 2026 by rpki-client