Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier: B7BfsxA5PBRpnmRKUdXXlv9YJF7YOv1J9mP6eTMHEsA=
Subject key identifier: 40:9F:D7:03:54:BB:19:0A:26:A6:4A:70:8A:AF:DF:74:AA:CA:85:81
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial: 019D992B7B82C55DE1E14FE1BBAB25305D26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:00:56 +0000
Manifest this update: Fri 17 Apr 2026 02:00:56 +0000
Manifest next update: Sat 18 Apr 2026 02:00:56 +0000
Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: cvsatT/hckEiyVAX5HMuys8yDN3OuRLsU2mFBtgU2J8=)
2: WMPWbERH9P2n3niPjWrFvgxXnog.roa (hash: wqaHkXlpMy/p6v+U45zXhhU2rWewv6uSFHA6UjESriQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:7b:82:c5:5d:e1:e1:4f:e1:bb:ab:25:30:5d:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Validity
Not Before: Apr 17 02:00:56 2026 GMT
Not After : Apr 18 02:00:56 2026 GMT
Subject: CN=409fd70354bb190a26a64a708aafdf74aaca8581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:27:0f:80:f8:51:7d:a8:11:c8:65:22:ce:e7:
71:e5:d9:8c:15:70:0a:bc:7d:82:ad:64:d9:9d:73:
3a:cd:0d:46:11:49:38:26:7a:80:06:64:81:f8:6e:
fe:1e:05:b1:1e:1e:df:de:f7:9a:b6:6f:8a:de:f1:
7f:88:e4:46:33:8a:e2:8b:d0:8c:9e:03:b7:1f:25:
df:9e:c8:41:a3:84:de:0c:8f:4b:42:c8:2e:a4:da:
f8:dd:4e:b7:d4:bb:40:4c:d8:4b:08:0e:f2:38:97:
52:81:b3:17:4f:2c:92:10:71:08:e8:b5:19:46:f8:
53:4c:f7:66:55:5d:21:06:b9:56:1d:3c:d9:cc:ff:
88:f1:85:13:db:f8:d9:bf:52:91:45:05:45:94:df:
01:fd:53:e0:a7:20:c4:17:a9:18:09:ae:b7:00:3b:
a3:22:4a:da:d7:cf:b2:1b:05:8a:dc:46:dc:03:49:
15:33:bd:24:4d:39:81:96:7e:c4:16:11:c4:90:c0:
e8:14:d9:7a:bc:c9:98:41:d6:c6:74:9e:41:af:68:
cb:4b:30:9f:79:5f:f2:78:a8:97:ee:93:c2:8f:96:
4b:ee:c7:da:c9:39:ae:f0:58:eb:58:f7:74:c7:30:
67:70:6c:38:87:b3:90:05:2b:81:2b:ab:66:4e:a5:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9F:D7:03:54:BB:19:0A:26:A6:4A:70:8A:AF:DF:74:AA:CA:85:81
X509v3 Authority Key Identifier:
keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:66:e2:f5:a6:94:da:57:18:4e:bf:4b:b3:95:26:e1:13:30:
17:6b:6e:fb:1e:54:8e:96:c3:9e:c1:0e:0d:d3:1a:5c:f8:24:
86:aa:24:c0:bf:a2:0a:50:27:94:b5:0a:e1:68:62:0f:73:da:
b6:62:f5:23:ae:de:35:d9:af:0c:8e:1b:13:fb:ba:97:71:ad:
f1:13:79:d7:31:8c:cd:55:72:40:7c:24:6a:f8:cb:7c:f9:9b:
9b:fa:ab:1a:26:8c:cc:2c:ba:1e:4a:23:af:70:91:d3:db:5b:
e8:41:8f:79:e5:57:fe:48:d7:1d:70:05:14:f6:81:26:af:d7:
88:ba:f2:30:8e:92:93:94:1c:02:f6:cc:41:d6:b8:cb:b3:c2:
49:cb:96:37:89:56:d5:e5:91:3a:46:43:c9:a4:fc:44:99:b5:
69:a1:62:9b:98:a1:4a:29:1b:f5:a0:31:bc:d2:82:93:4d:0e:
4d:74:31:64:88:57:16:8c:2c:10:23:53:4b:ec:f2:9b:df:15:
f4:74:53:8f:32:9c:ad:77:3c:96:07:9c:df:2b:cb:44:03:da:
8c:15:c7:2c:b5:b5:ea:32:4e:f8:ce:5d:88:0d:01:67:ea:ab:
36:22:7d:35:12:20:a2:32:6d:d9:cb:17:03:ce:cf:3c:a7:b3:
51:c4:13:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:57 2026 by rpki-client