Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
File: DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft (raw, json)
Hash identifier: 6A7rUTyCb/8EyIEnPo9IAfGOGqM02TauethvupYwflg=
Subject key identifier: F6:6D:4A:53:2A:7A:A1:30:71:3B:B9:69:67:9A:36:69:92:B8:6C:32
Authority key identifier: 0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
Certificate issuer: /CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Certificate serial: 019EC0A3FC8F2A6D25F40F24DA2694217E72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
Manifest number: 0F65
Signing time: Sat 13 Jun 2026 11:00:32 +0000
Manifest this update: Sat 13 Jun 2026 11:00:32 +0000
Manifest next update: Sun 14 Jun 2026 11:00:32 +0000
Files and hashes: 1: BCXtQModd3nAhdeMkRMBuZx_cZc.roa (hash: jtOOBxUO8skySjopVxcruyx6WiDS/7xnyuAQI3lDFqk=)
2: DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl (hash: KoqhKN9t0e36ikiGrVO4bvY+KCCI+SfVAmEhZsXGGak=)
3: L9a6XlmixBDgTngX3OesnHMjCvQ.roa (hash: yfr3OyuPpoSecdibTgJg+ch8pCeShfs+7iwZpZSIKv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:fc:8f:2a:6d:25:f4:0f:24:da:26:94:21:7e:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7a912569b787d92e5355fffaed581fe50a29c0
Validity
Not Before: Jun 13 11:00:32 2026 GMT
Not After : Jun 14 11:00:32 2026 GMT
Subject: CN=f66d4a532a7aa130713bb969679a366992b86c32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:cd:76:46:e1:e1:f6:fd:d4:17:f9:6f:e2:
91:f9:dc:ee:91:53:66:4d:97:e6:4f:c3:bd:1c:62:
43:60:54:41:fa:e6:49:02:4d:05:2f:5f:86:80:36:
26:06:73:ac:7d:53:30:86:9b:c1:e4:e7:86:81:4d:
e6:95:c2:ca:40:7d:d7:64:6e:8d:99:1f:4b:01:f8:
48:26:ff:e7:f0:b6:cc:16:fe:cd:18:4e:09:5a:17:
71:ac:2d:41:bc:53:07:c5:97:39:d7:1c:d4:0e:e4:
e5:33:34:b4:a3:23:0c:d2:0e:a7:fa:fd:99:b5:8c:
4b:ba:94:1d:cc:1e:16:0d:08:bd:a6:73:68:11:a2:
5d:37:2f:a4:84:fc:3a:98:76:88:3c:dd:3c:ba:58:
9e:1a:03:22:fd:bb:d5:15:93:a2:8d:52:d5:1d:ea:
13:c8:aa:67:da:89:6a:5a:be:3f:05:74:c3:7f:a8:
46:75:60:5f:3a:90:19:de:4f:5e:60:81:33:b9:3c:
35:bc:6d:03:2e:6d:8d:0a:2c:34:6d:24:23:2b:23:
7b:f9:9c:36:f2:c0:86:69:db:2f:44:25:88:df:06:
cf:6a:6e:81:1e:a1:2d:a4:4b:fc:5c:e5:b3:c3:9e:
a5:bd:92:42:25:2d:54:4b:a4:93:08:d6:23:22:73:
df:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:6D:4A:53:2A:7A:A1:30:71:3B:B9:69:67:9A:36:69:92:B8:6C:32
X509v3 Authority Key Identifier:
keyid:0D:7A:91:25:69:B7:87:D9:2E:53:55:FF:FA:ED:58:1F:E5:0A:29:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXqRJWm3h9kuU1X_-u1YH-UKKcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/059d1a-ef94-4729-bf6d-42ae75b7957d/1/DXqRJWm3h9kuU1X_-u1YH-UKKcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:d7:8b:74:6d:ef:ff:a1:79:1d:6f:9a:7e:ea:d2:4e:15:a5:
d3:f2:80:ee:9e:f8:84:ea:53:de:87:cb:2e:e6:91:57:bb:d2:
a7:43:5e:b2:8f:81:d7:a3:f3:b9:09:d2:e9:c6:c5:99:c1:d5:
91:8a:e8:15:b3:71:84:9d:b6:d9:fc:39:e6:8a:c0:bb:6e:bf:
cc:68:17:5f:ab:26:a9:a3:f6:71:b7:62:ff:57:61:18:8c:94:
39:d2:e3:0a:fb:91:ff:cf:37:0a:c0:cf:2f:59:0b:b1:9a:7f:
51:aa:30:ae:17:eb:19:c5:e1:19:54:59:b1:57:3e:13:c9:2e:
59:5a:fb:4d:99:07:18:25:0c:18:ae:01:0a:57:23:db:7f:c7:
ac:42:cc:58:28:49:06:70:1d:fe:17:af:ae:fe:f8:d3:6c:a5:
6c:a2:5c:9c:e4:6b:f5:24:f7:8e:64:8d:52:23:e1:1a:45:f2:
19:e5:b5:84:77:12:ff:83:80:2b:6e:a8:17:ae:86:89:34:fc:
03:5f:c2:3f:2b:d1:1b:1e:1b:08:e0:73:f0:98:ad:c8:33:1c:
b2:2d:fb:d9:90:29:14:8e:20:3c:10:30:38:fe:01:bc:a3:a0:
1b:39:74:39:ac:07:e3:e4:ec:7c:a6:0d:8a:48:b6:33:41:a7:
f7:4a:7c:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:52:58 2026 by rpki-client