Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier: XawGGxmW/sVijaLQnx3xTUAX7URGoND91C0AobR41s4=
Subject key identifier: 05:BF:39:DC:88:59:A9:8F:DA:E5:66:E0:6C:4B:5F:EA:F7:45:18:80
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial: 01A0D1C94A6A4FBD00C04C95D350D5036533
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number: 1A6D
Signing time: Thu 24 Sep 2026 05:00:24 +0000
Manifest this update: Thu 24 Sep 2026 05:00:24 +0000
Manifest next update: Fri 25 Sep 2026 05:00:24 +0000
Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: 3QoLGxUXvbQLfNa3DLW4XrPZ5my/xZ8+EhRXwgUa4zI=)
2: WMPWbERH9P2n3niPjWrFvgxXnog.roa (hash: wqaHkXlpMy/p6v+U45zXhhU2rWewv6uSFHA6UjESriQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:4a:6a:4f:bd:00:c0:4c:95:d3:50:d5:03:65:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Validity
Not Before: Sep 24 05:00:24 2026 GMT
Not After : Sep 25 05:00:24 2026 GMT
Subject: CN=05bf39dc8859a98fdae566e06c4b5feaf7451880
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8d:68:d9:ca:3a:bc:d1:b0:1f:a4:ce:a2:ec:
f2:e7:82:26:b4:b2:dc:1e:27:c5:c6:b1:b0:f5:2a:
0a:63:62:86:8c:1d:36:42:2d:e9:6d:2b:c2:92:7b:
69:a3:88:f2:dd:6e:ba:24:22:5b:fe:d6:28:c5:1d:
f7:17:54:34:96:e9:c5:dd:d0:b9:e1:96:c2:49:98:
88:74:f0:2c:05:62:b1:91:d8:9b:de:68:a2:35:7e:
f0:d9:06:da:6e:61:51:24:64:19:99:bd:73:30:28:
c8:f8:dc:a1:8e:a8:8c:f1:38:5b:10:97:09:f2:51:
5d:31:fe:04:6f:dd:6a:f6:a0:b0:8f:74:2e:0f:46:
72:bc:2b:01:75:0f:6b:fe:9e:5b:c1:b0:cf:88:ec:
d4:9a:d7:0a:34:71:8a:a0:12:b6:6b:b5:d3:39:86:
bd:4b:3d:f1:11:06:ae:42:ad:de:50:5f:66:08:a8:
85:bb:82:99:cb:a0:c9:55:ad:e7:f7:36:cb:af:ab:
74:00:28:05:cf:47:33:2b:f0:86:cb:e7:01:03:2d:
ad:19:94:ca:9f:53:e9:19:a0:af:af:5a:b2:50:06:
08:b1:94:5c:c5:a3:97:1f:00:53:71:c3:eb:a7:9e:
e3:cc:45:f0:f9:fe:98:1d:22:27:f5:39:3d:aa:c6:
48:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:BF:39:DC:88:59:A9:8F:DA:E5:66:E0:6C:4B:5F:EA:F7:45:18:80
X509v3 Authority Key Identifier:
keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:0d:52:8a:55:8d:63:e8:d9:03:f1:24:cb:79:cf:c5:c7:f9:
de:ba:f7:3b:16:d1:6f:8d:b3:84:af:ac:77:77:3a:2c:8d:52:
ed:d3:c6:eb:48:50:29:0e:7b:63:e9:cb:92:23:d4:bf:39:1c:
df:e4:8e:8a:dc:78:29:e1:b1:d8:a8:9e:b9:fd:f3:8b:54:af:
f4:fb:c9:7d:72:3e:74:bd:da:ae:82:28:33:7b:c2:4f:87:6f:
c8:38:b5:3f:86:5d:dd:8b:f4:f8:8c:98:88:9f:cf:35:f3:ac:
b2:cd:9c:6c:b2:db:83:b4:26:4b:19:fc:01:84:f0:cd:66:06:
20:e4:67:c7:16:0f:44:4a:d3:3a:a7:84:33:7c:99:26:bc:0c:
53:18:9a:40:67:ef:07:a1:5e:fe:4e:54:18:a8:ea:25:f5:28:
0c:79:fe:ff:bb:90:cd:ff:63:6b:0b:5e:8e:63:4c:58:9a:a4:
2c:b6:0e:49:85:89:75:98:6d:76:21:f7:15:7c:19:18:4c:81:
ab:12:59:61:a7:be:e0:90:fe:2e:fa:db:66:2e:a7:10:2f:34:
e0:52:4d:d1:aa:de:38:2e:b0:ed:ca:33:fb:6e:c1:a8:fd:5f:
2c:87:d0:9f:d8:ef:bf:df:13:fc:a0:b3:1c:87:df:33:46:d3:
8d:56:d3:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:10:30 2026 by rpki-client