Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
File: Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json)
Hash identifier: 3F2WdmW1FVix09wErfERCaset1oVdGu6Sy7HG0Q67/0=
Subject key identifier: 5F:51:FE:3B:6B:05:89:A6:B8:33:1B:D7:34:5E:67:35:ED:12:F9:DD
Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
Certificate issuer: /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Certificate serial: 019FA974B3A7F8B75FD3C71AD4FE956B828D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
Manifest number: 19CF
Signing time: Tue 28 Jul 2026 16:00:25 +0000
Manifest this update: Tue 28 Jul 2026 16:00:25 +0000
Manifest next update: Wed 29 Jul 2026 16:00:25 +0000
Files and hashes: 1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: 14GXit+eNmOCGhlaiuv0MGv4Pes9GpaJYvEDVwMJHBE=)
2: TZIG1R8-YGmhR0xI5zBvA7V0Dmg.roa (hash: WEHaRsXodnCf7NHMhPdN3H93MUdSSeQQRV5NdrA3eds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:b3:a7:f8:b7:5f:d3:c7:1a:d4:fe:95:6b:82:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Validity
Not Before: Jul 28 16:00:25 2026 GMT
Not After : Jul 29 16:00:25 2026 GMT
Subject: CN=5f51fe3b6b0589a6b8331bd7345e6735ed12f9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c3:72:fd:c4:8b:31:b2:c1:b5:d0:18:4b:ea:
c3:88:02:9a:2d:2c:f8:a0:ec:b6:af:24:73:66:b8:
dd:82:f0:91:0c:54:dc:e3:66:ba:bb:2e:25:7d:11:
d9:e4:8b:85:75:03:08:62:ab:ff:61:ec:2e:28:15:
86:57:ad:fe:79:29:3b:45:4e:e0:0d:11:ca:d5:21:
74:b8:65:c3:da:30:a1:d1:80:cd:d6:63:6f:2a:d5:
e9:1a:34:16:75:3f:3e:68:46:db:88:f1:8a:af:d3:
c1:14:e3:2b:2c:11:d8:12:52:af:e0:52:1d:ed:63:
e8:87:f2:87:fa:4b:8a:07:7a:d8:a2:34:ff:e3:74:
e1:01:97:a9:49:a5:14:db:d1:2a:10:76:67:b9:a8:
a5:4d:4a:12:d4:3c:29:1a:1b:d0:b4:92:32:03:c3:
bd:9d:a9:83:86:5b:58:17:6e:6b:2f:48:e7:af:21:
62:64:7f:68:af:77:bb:07:31:c2:03:41:06:92:16:
34:36:45:1d:88:91:a3:03:ca:64:98:41:00:11:41:
3c:26:81:f9:2d:9b:c8:43:6c:68:a0:19:17:1f:38:
01:e5:82:6d:dd:14:ac:4d:b6:e3:72:21:c8:a5:54:
13:c8:a5:03:af:1d:eb:64:0e:fe:a1:34:cc:54:3e:
03:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:51:FE:3B:6B:05:89:A6:B8:33:1B:D7:34:5E:67:35:ED:12:F9:DD
X509v3 Authority Key Identifier:
keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4d:41:aa:28:5c:a8:06:d7:d3:b0:e3:33:28:e8:0e:ac:81:
3d:cd:13:ed:06:61:aa:31:7e:de:52:16:13:ba:4a:b4:fc:cd:
81:c1:7d:92:90:28:6a:37:39:44:ca:b4:ff:a3:67:65:c5:6c:
fd:41:26:f9:73:f2:a9:af:4d:df:d6:34:54:b4:93:44:f6:3d:
a8:e6:fe:85:3a:71:6f:63:51:10:1f:15:2c:12:d7:b7:57:4a:
87:6b:86:b3:a9:47:5e:1e:af:ba:ea:75:f7:49:1f:af:ba:aa:
fa:8e:9e:0a:2b:0f:25:b2:86:ea:f3:0b:46:e5:2b:f4:ae:d9:
08:83:5b:c5:7c:5b:4d:0f:e5:dd:61:a8:1b:4c:f8:42:75:66:
14:c2:40:ef:2f:93:17:a3:e6:9c:fd:92:78:19:56:a3:47:09:
77:66:c0:14:71:ec:95:0d:1d:05:9a:3f:c1:a4:3a:9a:68:c1:
2f:26:28:40:00:fd:45:29:e9:87:f7:60:81:07:bb:bb:26:17:
59:15:75:e0:6c:9b:4a:61:18:69:6d:f0:e8:84:d6:dc:1f:dc:
79:ad:c6:08:14:9c:5e:a5:d7:8b:56:87:49:aa:cd:ec:e7:b7:
b8:08:d6:31:c9:8d:8d:25:8a:ce:2d:6b:a1:2a:e1:57:88:dc:
20:9d:7e:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+pdLOn+Ldf08ca1P6Va4KNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDZmMWViNmRkZDRmZmVmZTE4MzgwMDMwMmJlNjM2Y2Zl
OTY1MzcwHhcNMjYwNzI4MTYwMDI1WhcNMjYwNzI5MTYwMDI1WjAzMTEwLwYDVQQD
Eyg1ZjUxZmUzYjZiMDU4OWE2YjgzMzFiZDczNDVlNjczNWVkMTJmOWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsNy/cSLMbLBtdAYS+rDiAKaLSz4
oOy2ryRzZrjdgvCRDFTc42a6uy4lfRHZ5IuFdQMIYqv/YewuKBWGV63+eSk7RU7g
DRHK1SF0uGXD2jCh0YDN1mNvKtXpGjQWdT8+aEbbiPGKr9PBFOMrLBHYElKv4FId
7WPoh/KH+kuKB3rYojT/43ThAZepSaUU29EqEHZnuailTUoS1DwpGhvQtJIyA8O9
namDhltYF25rL0jnryFiZH9or3e7BzHCA0EGkhY0NkUdiJGjA8pkmEEAEUE8JoH5
LZvIQ2xooBkXHzgB5YJt3RSsTbbjciHIpVQTyKUDrx3rZA7+oTTMVD4DIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9R/jtrBYmmuDMb1zReZzXtEvndMB8GA1UdIwQY
MBaAFA5G8ett3U/+/hg4ADAr5jbP6WU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81NThhZmUtNDlmZS00MzhlLWJkMzct
ZjRmY2VkMzViMzUyLzEvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81NThhZmUtNDlmZS00MzhlLWJkMzctZjRmY2VkMzViMzUy
LzEvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmE1Bqihc
qAbX07DjMyjoDqyBPc0T7QZhqjF+3lIWE7pKtPzNgcF9kpAoajc5RMq0/6NnZcVs
/UEm+XPyqa9N39Y0VLSTRPY9qOb+hTpxb2NREB8VLBLXt1dKh2uGs6lHXh6vuup1
90kfr7qq+o6eCisPJbKG6vMLRuUr9K7ZCINbxXxbTQ/l3WGoG0z4QnVmFMJA7y+T
F6PmnP2SeBlWo0cJd2bAFHHslQ0dBZo/waQ6mmjBLyYoQAD9RSnph/dggQe7uyYX
WRV14GybSmEYaW3w6ITW3B/cea3GCBScXqXXi1aHSarN7Oe3uAjWMcmNjSWKzi1r
oSrhV4jcIJ1+2Q==
-----END CERTIFICATE-----
Generated at Tue Jul 28 18:09:24 2026 by rpki-client