Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
File: dkcGam8eUnJLJzFHdNk2k8FV8Og.mft (raw, json)
Hash identifier: Zj0mZlDrBse/urhv29n5sqLfYRUxIDafZg/kqYbV3GU=
Subject key identifier: AB:03:1B:84:86:4A:19:83:42:A5:76:2C:84:11:11:A8:06:3C:6F:15
Authority key identifier: 76:47:06:6A:6F:1E:52:72:4B:27:31:47:74:D9:36:93:C1:55:F0:E8
Certificate issuer: /CN=7647066a6f1e52724b27314774d93693c155f0e8
Certificate serial: 019FA89917150C6241C8D5666787C6F5C274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:00:32 +0000
Manifest this update: Tue 28 Jul 2026 12:00:32 +0000
Manifest next update: Wed 29 Jul 2026 12:00:32 +0000
Files and hashes: 1: dkcGam8eUnJLJzFHdNk2k8FV8Og.crl (hash: f/ZwQbfYQMxA3uSkjSdMwHl6DNGo0rLE7wRes4m+ftg=)
2: i9Nq0--gwc6aMhEBRcW9umVjIDg.asa (hash: +TjLueIMBfVDAHW/6ohVxjiAuWPC/TrJyQ1e+Bkvo8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:17:15:0c:62:41:c8:d5:66:67:87:c6:f5:c2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7647066a6f1e52724b27314774d93693c155f0e8
Validity
Not Before: Jul 28 12:00:32 2026 GMT
Not After : Jul 29 12:00:32 2026 GMT
Subject: CN=ab031b84864a198342a5762c841111a8063c6f15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:53:d8:d8:e9:73:88:07:22:28:74:8d:e8:ac:
97:41:0b:eb:f7:db:a4:66:72:2c:32:15:43:53:da:
d9:da:4a:02:77:20:40:7f:41:dc:a6:6d:88:51:1a:
b9:1c:04:b8:ad:27:09:28:e6:63:19:fb:2f:93:69:
d8:54:4f:58:b4:67:fe:3f:42:85:6a:b6:24:dd:85:
93:b2:b4:68:c6:75:96:cf:5e:c9:dd:49:a6:e9:e5:
29:7f:87:2b:a0:cc:b5:8b:0e:df:77:65:46:7e:26:
07:0b:11:cf:b3:2e:08:23:11:62:b1:da:25:f1:09:
62:37:22:a3:76:f7:12:1a:95:7c:b3:31:14:89:8d:
81:42:d4:44:b3:56:41:d2:7e:2f:22:da:e9:2b:06:
9a:e1:90:20:f5:58:d8:96:40:2c:b3:4c:dd:d4:34:
0b:aa:e0:48:5c:d8:f0:5b:71:cd:6d:11:f9:95:ac:
b4:01:4a:bf:c8:92:56:ba:0c:03:4a:b7:fc:c8:8b:
e5:5c:b8:18:d8:1d:bd:7e:b0:ca:e6:a1:a6:78:75:
91:4a:14:e1:4b:9d:59:57:2b:64:a7:02:de:ea:5c:
f2:6c:f6:cc:0a:9e:1e:16:cd:41:79:ca:c8:6a:ce:
7f:58:db:ed:59:4a:54:e0:70:36:d9:69:70:ce:2e:
e0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:03:1B:84:86:4A:19:83:42:A5:76:2C:84:11:11:A8:06:3C:6F:15
X509v3 Authority Key Identifier:
keyid:76:47:06:6A:6F:1E:52:72:4B:27:31:47:74:D9:36:93:C1:55:F0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:59:4f:f2:33:16:08:1e:7b:08:eb:e8:44:d0:9e:52:5c:b0:
8d:55:9e:0c:f0:06:b2:16:aa:4c:80:03:7b:09:c4:ce:15:ab:
20:8d:d7:bf:b4:95:7b:5a:90:15:00:3e:52:ab:3a:b2:9d:2e:
e7:ec:53:34:78:24:ab:10:0a:fc:ab:ab:48:c1:c9:6e:f4:4a:
08:b5:d5:e6:64:c0:30:e7:c2:05:25:73:6a:12:f1:11:d5:db:
b8:10:6c:ff:a3:94:3d:5a:3d:b4:df:79:8d:9e:1b:de:d5:a1:
b6:09:09:cc:51:e9:a5:10:99:43:09:31:5e:65:c2:6d:ba:34:
de:89:72:a1:1a:91:e3:0e:00:55:c1:5d:36:dc:8b:ac:13:ba:
d6:9e:20:9f:35:e3:cd:4d:34:6f:fa:e0:70:7c:fe:06:9b:96:
a9:9f:18:05:ad:02:0f:2d:21:39:b0:2a:6b:ae:b5:94:9f:ef:
a7:2e:26:b1:9b:f5:1b:ef:f5:7f:e7:b4:e6:73:14:d6:2a:5a:
a8:0e:c3:28:f5:4f:8a:6a:6e:d7:ee:7b:c1:bd:0b:42:38:f1:
69:2e:29:53:64:73:d0:a6:0e:2f:36:f4:a6:18:a7:c3:a5:48:
6f:b1:26:e5:36:52:36:91:f5:c8:9c:3f:79:07:a5:57:f9:ec:
bb:8b:ce:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:53:25 2026 by rpki-client