Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
File: dcqtndM2-CAZCTaTYHy57S-ZDXE.mft (raw, json)
Hash identifier: IQeTPdO9OuCNL4/XVXKLvybEuCCsnpP79JM1YvfOZ8g=
Subject key identifier: C5:62:EE:83:5D:88:1C:82:E4:55:9B:5B:1C:CF:37:65:47:EF:2A:AD
Authority key identifier: 75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71
Certificate issuer: /CN=75caad9dd336f82019093693607cb9ed2f990d71
Certificate serial: 01A0C47BD37259DF85EA7D1E7826F5933812
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
Manifest number: DF
Signing time: Mon 21 Sep 2026 15:00:44 +0000
Manifest this update: Mon 21 Sep 2026 15:00:44 +0000
Manifest next update: Tue 22 Sep 2026 15:00:44 +0000
Files and hashes: 1: dcqtndM2-CAZCTaTYHy57S-ZDXE.crl (hash: gUqIKTvAexAuJnq9JT3xioBskVMwBUzGQTB6ZMkoxuE=)
2: wDVVsACpsiR5l1cTOi-d9O7OwNM.roa (hash: brl42J6QrRGQ7zMiwW/xpTyzUuzmwf2YtA561oH5iPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 15:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:d3:72:59:df:85:ea:7d:1e:78:26:f5:93:38:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caad9dd336f82019093693607cb9ed2f990d71
Validity
Not Before: Sep 21 15:00:44 2026 GMT
Not After : Sep 22 15:00:44 2026 GMT
Subject: CN=c562ee835d881c82e4559b5b1ccf376547ef2aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:04:11:a1:39:95:f8:49:bc:a7:48:ab:6d:6a:
26:97:56:fb:51:e3:18:4a:26:bd:87:48:99:76:8d:
92:3c:a0:e8:bb:87:67:88:9c:bf:c8:2e:7e:62:62:
43:38:5f:21:95:0e:a1:59:cf:1a:c0:57:02:c0:b5:
61:85:45:a9:39:f7:41:7c:d3:56:f3:8a:51:7d:49:
b4:de:8a:35:84:f8:92:14:80:0c:97:95:61:aa:7b:
ee:a2:c8:b7:22:74:bb:51:f3:88:91:b6:e9:da:06:
02:a5:46:6f:a9:ed:3d:50:da:07:d4:3f:76:ee:a3:
06:f5:b7:f8:82:69:f5:3f:90:73:b5:9b:87:d6:80:
ff:bd:4f:1d:37:26:a9:6d:14:32:7c:f0:f4:03:a6:
cd:97:4c:eb:d1:86:4a:85:9e:5e:a0:74:38:42:47:
6d:5d:3d:f1:5d:ab:c1:1c:b9:fd:96:44:61:c1:84:
e1:9d:61:90:7e:e7:99:42:cf:f7:ab:11:f9:1c:cb:
bb:fd:89:82:0c:4f:54:78:c3:1a:fa:2c:8a:9d:d7:
4a:0f:95:24:a3:6b:74:93:a8:1e:18:6e:bd:c6:20:
56:9a:71:33:06:6a:72:fd:1f:d6:74:01:80:0c:7f:
66:bc:45:ac:9d:17:9f:8e:83:fb:9b:e6:70:75:79:
a9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:62:EE:83:5D:88:1C:82:E4:55:9B:5B:1C:CF:37:65:47:EF:2A:AD
X509v3 Authority Key Identifier:
keyid:75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:7c:3b:aa:bf:85:e1:31:72:56:ce:e2:18:18:35:35:aa:35:
d1:2a:4c:4d:cd:f9:3e:1a:52:95:3c:4f:ff:25:ee:17:11:e4:
95:fb:5f:08:6e:94:aa:d8:c8:a6:a7:1e:d4:35:e0:e6:26:68:
db:87:82:df:67:14:1e:cc:50:d8:e4:99:e9:2f:89:1d:ca:3b:
03:9f:f7:b1:2d:40:36:3b:e2:b9:10:8b:d8:fe:b8:c9:1d:36:
c9:a2:d3:58:16:76:ba:ab:ea:b3:bc:3f:a4:4f:8d:f7:21:94:
b8:b8:69:24:c4:86:20:d9:d7:58:aa:07:db:49:51:a2:79:a9:
e5:47:0d:b9:83:88:09:d5:54:45:3d:08:56:01:84:99:c7:9f:
72:05:b4:44:1e:8f:40:60:12:27:b5:c6:ed:fe:7a:92:2f:e5:
40:95:2d:43:0c:bc:9e:1d:80:34:f4:d2:c9:e7:ab:72:fb:0c:
4f:a3:a6:79:62:86:15:4e:18:5a:1d:01:a2:14:a1:98:5d:72:
28:be:93:ee:9f:c0:d4:9c:10:16:db:0b:1f:05:ac:62:ba:fc:
fe:2e:c2:36:ce:0a:49:1e:37:6d:8a:eb:f0:0f:87:5f:43:50:
20:22:12:14:43:45:42:63:60:c0:74:0a:e9:b6:77:93:41:08:
9c:3d:fa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:19:06 2026 by rpki-client