Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
File: dkcGam8eUnJLJzFHdNk2k8FV8Og.mft (raw, json)
Hash identifier: COX+0a1O5rLDeS0te4gYUvlQmWOsYmCWAxPX+2kdd8o=
Subject key identifier: 4D:71:64:30:DA:07:ED:70:B1:E8:73:77:42:EC:09:1E:99:E1:59:E6
Authority key identifier: 76:47:06:6A:6F:1E:52:72:4B:27:31:47:74:D9:36:93:C1:55:F0:E8
Certificate issuer: /CN=7647066a6f1e52724b27314774d93693c155f0e8
Certificate serial: 01A0BCC22FF63553C2EAB306F1DBB2E9B233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
Manifest number: DB
Signing time: Sun 20 Sep 2026 03:00:37 +0000
Manifest this update: Sun 20 Sep 2026 03:00:37 +0000
Manifest next update: Mon 21 Sep 2026 03:00:37 +0000
Files and hashes: 1: dkcGam8eUnJLJzFHdNk2k8FV8Og.crl (hash: 1IE5dohPDqFWQs2ODuffx+AUnuegZTl3UPB85cnREps=)
2: i9Nq0--gwc6aMhEBRcW9umVjIDg.asa (hash: +TjLueIMBfVDAHW/6ohVxjiAuWPC/TrJyQ1e+Bkvo8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:c2:2f:f6:35:53:c2:ea:b3:06:f1:db:b2:e9:b2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7647066a6f1e52724b27314774d93693c155f0e8
Validity
Not Before: Sep 20 03:00:37 2026 GMT
Not After : Sep 21 03:00:37 2026 GMT
Subject: CN=4d716430da07ed70b1e8737742ec091e99e159e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:55:8d:d9:b6:48:4e:21:34:63:f2:e9:85:43:
d4:f8:be:83:84:62:59:98:4d:56:6e:d8:5c:f4:28:
e3:b3:96:1a:8a:fe:24:54:36:56:6a:ab:fa:e8:c2:
05:38:ed:af:78:8b:fe:9c:f0:42:48:3e:e9:f7:70:
86:9b:a3:19:da:48:e3:fc:f3:e8:96:04:cd:d3:00:
5a:61:de:50:cb:fa:f9:e5:e2:e3:3c:09:ae:29:5b:
49:06:31:eb:46:92:86:f6:c3:06:83:9a:09:c9:65:
d9:42:29:3e:33:ad:4c:15:74:68:1f:a9:cd:20:86:
b5:6f:e3:69:da:7e:fa:de:70:13:ff:53:33:0a:4a:
3c:b9:0d:36:a1:4a:8b:c9:84:99:a8:af:1c:ce:27:
28:02:e6:53:f8:69:25:bc:9c:4a:2e:6c:5a:de:63:
1a:a5:47:90:fb:a4:be:1f:78:a8:9b:9f:6a:0e:e3:
66:1c:ff:5e:4d:1f:99:76:9b:f1:75:8b:d0:d2:86:
23:e7:f9:93:83:fd:97:3d:1d:55:68:4a:b3:99:ae:
85:4e:dd:1d:de:7c:6e:ab:a5:7d:1b:6d:4f:c8:54:
35:ce:04:23:3a:3b:9e:f4:c6:ac:11:ca:dd:cd:dc:
a7:2f:a0:13:92:1b:58:07:6a:da:67:07:66:7b:a8:
36:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:71:64:30:DA:07:ED:70:B1:E8:73:77:42:EC:09:1E:99:E1:59:E6
X509v3 Authority Key Identifier:
keyid:76:47:06:6A:6F:1E:52:72:4B:27:31:47:74:D9:36:93:C1:55:F0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:dd:1f:78:f4:a3:86:f4:e9:d7:ee:a5:a0:84:6b:56:a6:e4:
8b:59:ed:d1:dd:fc:2d:9f:4b:58:82:f1:d8:c1:4f:55:5a:f4:
c6:6e:d8:8d:e7:7a:4f:71:46:de:82:63:a4:95:7a:3d:39:e7:
ce:83:7d:99:bd:64:e8:11:64:1d:1c:5a:92:67:61:47:2e:33:
36:ce:35:ac:90:17:49:ff:e8:9b:5d:f2:5f:48:bf:c7:b3:26:
86:18:57:5f:97:0d:f8:c2:db:15:8e:4d:ec:35:e5:d4:03:22:
71:c9:43:9c:44:1d:60:dc:ce:5c:86:5f:4a:17:d9:24:8e:ad:
2c:99:c3:83:bf:df:02:d2:2e:63:81:cc:fe:d0:5a:46:7d:45:
c6:47:71:38:5d:e1:35:68:20:5c:d9:c6:96:58:95:95:04:ae:
d4:67:21:a6:77:61:6d:30:41:70:5e:46:fa:10:60:3d:ba:f4:
68:e8:18:5a:46:37:5a:67:7e:9b:dc:47:29:c9:ea:0b:ce:c8:
d5:e6:95:4d:8f:dc:38:6f:40:98:08:ef:87:ad:c6:5c:15:e5:
27:a9:ea:93:6f:09:6c:44:29:18:70:95:45:b7:09:ce:04:11:
ed:70:bf:90:78:81:0b:00:33:d8:bc:f0:0a:5d:dc:cb:73:77:
28:ba:bf:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 12:44:38 2026 by rpki-client