Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
File: DkTxM_OHWTqvor6rOIhJBPrJvRk.mft (raw, json)
Hash identifier: pjpfXapRscitJ11VLntFDPkM2JGc5dcBTUGhG4hZOb8=
Subject key identifier: 3D:EE:3F:2E:70:A6:12:11:5A:6B:3D:4D:DA:21:38:2C:3C:6E:7D:AC
Authority key identifier: 0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
Certificate issuer: /CN=0e44f133f387593aafa2beab38884904fac9bd19
Certificate serial: 019CACEBD7785F7DE6541AFD4087AFFBAFA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
Manifest number: 04D3
Signing time: Mon 02 Mar 2026 05:01:03 +0000
Manifest this update: Mon 02 Mar 2026 05:01:03 +0000
Manifest next update: Tue 03 Mar 2026 05:01:03 +0000
Files and hashes: 1: DkTxM_OHWTqvor6rOIhJBPrJvRk.crl (hash: mFwDRCbypyJvYOk04rJFkFNDxhoLtN9Fq/priYHxJXs=)
2: Zu63Ow6HIL-cM_My8KJ_oXolMPU.roa (hash: wpqllHKhhs+9B3WcGLDKMWL4IN9CvMn3Xo3gy5XniVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:d7:78:5f:7d:e6:54:1a:fd:40:87:af:fb:af:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e44f133f387593aafa2beab38884904fac9bd19
Validity
Not Before: Mar 2 05:01:03 2026 GMT
Not After : Mar 3 05:01:03 2026 GMT
Subject: CN=3dee3f2e70a612115a6b3d4dda21382c3c6e7dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:68:5d:b5:d7:87:e0:b9:20:db:45:53:d6:c2:
7d:6b:b4:e1:55:b7:26:5d:d6:7b:e1:52:84:b6:b9:
b1:71:1e:17:82:b9:a2:64:96:79:69:26:9b:c7:aa:
b0:a3:2b:0f:58:bd:89:da:fa:49:3a:33:bb:22:28:
d7:0d:77:eb:1a:d2:bd:4e:56:fc:f3:3f:30:9e:cc:
a9:d2:33:16:86:05:30:6e:47:22:82:7a:90:82:f9:
7a:ca:d8:4c:52:b8:5d:88:75:a8:84:d8:15:18:53:
97:e5:47:dd:86:1e:21:f4:5e:b7:f8:d0:e1:1f:4f:
2f:c6:03:79:02:bd:d6:8d:fa:b6:d3:c5:0e:f5:11:
6e:4d:83:9f:49:97:ff:f9:48:4d:b6:42:e2:a2:c8:
2d:4a:cf:6c:6e:0c:6b:f4:35:30:d4:fd:36:0e:f5:
85:05:01:7f:37:9f:e8:41:af:9b:14:4a:b0:79:ab:
c7:7b:00:d4:81:11:57:22:4f:30:85:cf:00:38:d8:
9c:b1:0a:de:49:3b:55:c4:27:9d:39:c1:81:2b:81:
18:0c:27:a4:34:23:c4:8d:3a:2c:7b:5f:7c:7b:17:
6b:e3:3e:b8:ca:08:bf:6c:26:9a:27:59:38:66:b8:
20:68:64:b8:08:ea:3f:8c:d1:f3:93:b8:e4:07:5b:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EE:3F:2E:70:A6:12:11:5A:6B:3D:4D:DA:21:38:2C:3C:6E:7D:AC
X509v3 Authority Key Identifier:
keyid:0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:c3:5e:03:cc:1d:40:a6:39:5b:71:a4:17:1e:aa:a4:59:4d:
c3:41:83:45:2c:df:a4:f9:b7:f3:8a:10:f2:88:9e:de:df:46:
e7:e4:b8:7a:bc:e6:34:bc:21:09:00:33:41:90:25:bf:6d:14:
6b:ff:90:a3:55:e5:ba:66:88:33:15:b8:ed:c8:98:2e:e2:38:
8f:06:41:2e:c9:88:cc:d7:89:91:4f:3f:c1:43:15:0f:04:8e:
a5:27:d2:d8:3d:ec:75:55:c1:86:e4:fa:26:71:5a:bf:18:7b:
b1:1f:15:f8:09:39:a2:e6:b6:de:07:9c:51:04:86:a8:cf:bf:
8a:9e:f3:f6:29:96:03:f1:f0:8d:9d:e4:4c:03:34:56:8d:e9:
19:1c:ec:c2:e4:d7:4f:20:7e:57:9e:6e:e5:96:7a:9f:be:70:
8a:05:91:d8:b4:36:4d:0a:46:b7:68:f6:34:21:b4:96:71:bb:
54:cd:bf:7a:fd:98:e8:02:b6:ca:e2:39:08:56:4c:87:9b:9e:
fa:43:5e:bc:4c:a9:03:d7:2a:40:d2:74:55:5c:dc:40:37:b6:
7f:8d:3a:af:fe:40:17:5e:26:51:79:7f:4a:71:bb:5c:93:51:
3a:d2:ff:10:a8:97:22:a0:ab:a1:2f:d7:bd:37:05:0f:16:4b:
5e:de:a0:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:29:07 2026 by rpki-client