Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
File: DkTxM_OHWTqvor6rOIhJBPrJvRk.mft (raw, json)
Hash identifier: 4n8Pfh6LHHOZgYGFSvzflw2dJFvHTyHHw6EMITjj6Gk=
Subject key identifier: 09:EE:74:DC:BA:D0:7E:32:DA:A3:CF:41:E6:1B:CA:14:3E:D0:29:6B
Authority key identifier: 0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
Certificate issuer: /CN=0e44f133f387593aafa2beab38884904fac9bd19
Certificate serial: 019FA9AC11F475E591D6211B071F098BA78E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
Manifest number: 065F
Signing time: Tue 28 Jul 2026 17:00:53 +0000
Manifest this update: Tue 28 Jul 2026 17:00:53 +0000
Manifest next update: Wed 29 Jul 2026 17:00:53 +0000
Files and hashes: 1: DkTxM_OHWTqvor6rOIhJBPrJvRk.crl (hash: cmg8gswXKyIseuQluvnPg6PMzfvzHzEPEeXKyIwMtE4=)
2: Zu63Ow6HIL-cM_My8KJ_oXolMPU.roa (hash: wpqllHKhhs+9B3WcGLDKMWL4IN9CvMn3Xo3gy5XniVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:11:f4:75:e5:91:d6:21:1b:07:1f:09:8b:a7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e44f133f387593aafa2beab38884904fac9bd19
Validity
Not Before: Jul 28 17:00:53 2026 GMT
Not After : Jul 29 17:00:53 2026 GMT
Subject: CN=09ee74dcbad07e32daa3cf41e61bca143ed0296b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6a:7e:86:03:da:e9:57:24:3c:3c:da:f6:ff:
18:6f:7b:48:0e:95:0a:52:f4:08:92:60:ec:8b:19:
cf:47:33:62:cf:27:a6:68:de:2e:74:d6:e7:86:19:
b0:1d:e1:56:08:ea:31:cd:e6:52:e8:10:ae:cf:da:
b5:c8:d7:15:fe:82:54:78:f0:2f:7e:2c:bb:3b:f6:
90:88:9c:6d:66:e0:47:df:36:7a:b1:76:be:5b:3e:
e4:55:95:ee:3b:a9:bc:dd:12:8e:c2:d0:99:52:7e:
89:10:71:1c:62:41:6b:ce:0f:1f:34:d6:aa:1d:2a:
bb:03:8a:2d:63:f7:cd:79:e4:83:12:27:71:44:f3:
45:bf:d1:b5:9e:05:a3:d6:82:f3:db:a7:79:fb:27:
c2:49:52:12:45:94:c7:61:02:7f:a1:4c:e8:43:62:
ca:88:e1:f2:21:11:66:37:31:92:7c:cd:de:37:3b:
5a:8f:d0:12:8f:90:9d:7f:36:b5:88:10:62:e5:f7:
ad:27:65:f1:48:25:82:ee:28:d0:4b:d5:17:be:03:
b2:b8:03:cf:7e:46:0d:dc:84:b0:e1:32:58:da:f9:
03:97:5e:e7:25:6d:21:fb:55:d0:96:db:43:4c:38:
08:40:d5:e5:a4:82:27:06:fb:ae:03:63:83:6e:30:
17:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EE:74:DC:BA:D0:7E:32:DA:A3:CF:41:E6:1B:CA:14:3E:D0:29:6B
X509v3 Authority Key Identifier:
keyid:0E:44:F1:33:F3:87:59:3A:AF:A2:BE:AB:38:88:49:04:FA:C9:BD:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DkTxM_OHWTqvor6rOIhJBPrJvRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/0b68dc-c5c9-40dd-9d8f-dbff0ee1e09e/1/DkTxM_OHWTqvor6rOIhJBPrJvRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f0:4c:d0:24:2e:ad:91:bc:f8:8f:13:dd:78:8a:97:d9:20:a8:
07:9c:7e:e1:56:1c:cb:a4:66:0b:f9:21:d6:2a:0e:36:45:3b:
25:9b:63:71:06:82:1c:a1:af:4f:0e:aa:eb:85:47:de:5e:da:
f9:f1:3c:b8:6b:da:cc:af:dc:f8:c5:4d:9d:23:4b:58:0d:08:
6a:9b:39:53:34:99:06:d3:42:c3:60:ad:28:70:0b:20:ae:c5:
9b:71:05:a8:03:81:2a:45:7b:37:01:18:1a:ec:92:f5:bd:12:
99:e4:22:f7:8c:5a:55:6f:6a:41:83:dc:57:01:e6:34:bb:42:
8e:1c:2a:98:6f:85:45:07:72:58:f1:62:8a:c7:e6:ed:2c:d1:
b4:0d:9c:6e:94:23:8d:77:27:36:72:38:90:a7:9a:d2:fd:c7:
cf:0a:57:5a:83:6f:5a:8f:93:25:2a:8e:e4:f0:74:b2:bd:6e:
22:cc:b7:49:12:3e:bc:a2:47:8d:2e:0b:e7:2a:e8:e4:80:5a:
54:ef:35:86:dd:24:e2:0c:9b:ff:75:c5:2d:43:b6:e0:79:56:
dd:24:33:a7:c7:30:01:0b:35:fa:43:11:4e:a1:a0:f1:61:22:
3a:37:20:a8:d2:dc:e5:c2:95:cd:51:32:63:46:a7:36:2c:1a:
ce:4f:41:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:52:09 2026 by rpki-client