Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier: Ay2bpHsPuTNXiidqgG/qxvwpMxL/5IHqxEh+KMpw1FU=
Subject key identifier: 07:58:79:6E:E7:B2:0B:35:89:74:02:D1:C8:A8:E1:6A:37:FC:AF:5C
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial: 019CA9B3748C4ABFB3012AC166E6B7341BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 14:00:36 +0000
Manifest this update: Sun 01 Mar 2026 14:00:36 +0000
Manifest next update: Mon 02 Mar 2026 14:00:36 +0000
Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: 93oPNXatAGFVP55opeWADDLursA0T6DsoWaWY4ebkWo=)
2: WMPWbERH9P2n3niPjWrFvgxXnog.roa (hash: wqaHkXlpMy/p6v+U45zXhhU2rWewv6uSFHA6UjESriQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:74:8c:4a:bf:b3:01:2a:c1:66:e6:b7:34:1b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Validity
Not Before: Mar 1 14:00:36 2026 GMT
Not After : Mar 2 14:00:36 2026 GMT
Subject: CN=0758796ee7b20b35897402d1c8a8e16a37fcaf5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:db:7c:23:59:25:4a:78:10:0d:f6:13:aa:03:
b8:81:9b:b9:d3:71:b0:4e:da:7a:02:e1:ab:70:97:
81:74:ac:f4:ad:e6:13:95:d1:bb:9d:14:f4:09:3b:
30:8a:11:2f:af:ec:74:94:d9:69:77:19:b7:fd:b2:
9f:94:31:e9:34:41:9a:67:19:31:5f:af:b3:93:18:
62:ae:5c:28:0b:ea:b8:3e:b5:2b:93:e7:08:7d:49:
2f:4b:40:75:7b:bb:b6:f5:ae:1c:a3:40:b6:4c:ba:
45:3d:69:4f:79:97:3c:2a:73:86:60:d9:0c:75:86:
43:dd:98:e7:fc:f3:3f:a1:78:05:56:ab:9b:75:c6:
72:5c:a2:a5:18:9f:c5:08:a7:99:15:17:18:51:90:
ff:51:54:98:ed:15:6a:3c:74:4a:48:49:24:f9:53:
dd:cd:7b:30:1d:d9:df:f3:30:91:c8:f4:97:34:83:
d3:81:9c:1b:66:14:cb:04:6e:ed:64:84:2b:be:ed:
17:a8:a4:9b:0b:7b:3f:00:76:5a:d9:17:28:de:4f:
f0:cf:8b:46:c2:45:c7:a7:6c:fb:d4:16:56:fe:0f:
e0:eb:48:db:98:1f:cc:ba:60:0a:85:cf:26:8a:c6:
0e:1e:84:e8:88:63:26:1a:c7:9b:de:5f:3a:d1:f6:
16:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:58:79:6E:E7:B2:0B:35:89:74:02:D1:C8:A8:E1:6A:37:FC:AF:5C
X509v3 Authority Key Identifier:
keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a6:9e:61:ff:f6:96:88:89:f8:66:b7:3d:7b:93:3e:a8:d9:
c8:15:fd:ba:7a:e0:91:ac:fe:c0:65:e3:22:50:0d:c9:84:b8:
3a:5b:4d:6b:c8:6a:b3:e1:1b:64:22:d8:e5:6e:2e:7e:45:45:
06:52:b4:ff:b4:2f:aa:e3:da:af:87:74:b3:24:69:a0:b8:f5:
2f:1e:08:fe:a0:24:36:fb:95:21:e6:6d:2e:9e:a9:11:f9:17:
48:0c:7e:57:27:51:80:82:8b:39:8c:9f:7d:6b:cd:62:d3:12:
88:bd:a4:1c:23:87:7e:76:62:25:7f:99:2b:36:82:6c:de:27:
78:a6:ae:5c:78:1c:40:24:a0:27:e0:cc:43:75:26:49:82:ca:
26:f6:46:30:41:fb:15:10:b6:d0:2f:0d:90:61:22:f4:e3:44:
ef:f7:da:43:2c:83:f0:c9:ed:d0:87:ac:9a:d6:1e:50:bb:59:
b5:05:ca:ea:41:33:e2:0d:9b:b9:73:5f:52:14:69:37:1a:3d:
e6:02:43:f7:5b:bb:aa:b5:ba:81:39:f5:5b:d3:fb:8c:00:26:
62:24:08:7d:6b:d4:14:02:79:6b:c4:83:b5:fe:da:95:4a:7d:
84:82:04:f8:ed:cd:9e:01:63:dd:21:29:71:44:d2:c1:75:02:
c1:6c:8f:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:18:20 2026 by rpki-client