Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
File: Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json)
Hash identifier: e/BntgAFUX6nZW04Hf5WSjy9XdRc9z4406eedZJMOXE=
Subject key identifier: A8:FF:18:EB:EA:C9:9D:2D:3C:D7:63:66:81:E5:8C:DF:2E:CC:05:77
Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
Certificate issuer: /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Certificate serial: 019D984FBEA674BE0D669E8C669027573972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
Manifest number: 18BD
Signing time: Thu 16 Apr 2026 22:00:56 +0000
Manifest this update: Thu 16 Apr 2026 22:00:56 +0000
Manifest next update: Fri 17 Apr 2026 22:00:56 +0000
Files and hashes: 1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: mvsyesrUXZMfHWkqOmTbHR8hUsjF03PdVWFiHFaKsuk=)
2: TZIG1R8-YGmhR0xI5zBvA7V0Dmg.roa (hash: WEHaRsXodnCf7NHMhPdN3H93MUdSSeQQRV5NdrA3eds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:be:a6:74:be:0d:66:9e:8c:66:90:27:57:39:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Validity
Not Before: Apr 16 22:00:56 2026 GMT
Not After : Apr 17 22:00:56 2026 GMT
Subject: CN=a8ff18ebeac99d2d3cd7636681e58cdf2ecc0577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5f:af:ae:41:8d:b5:4a:51:51:3a:d0:8a:61:
e8:9c:20:27:a7:60:f5:af:22:e5:85:e5:05:6c:ae:
3f:6a:b6:46:92:76:d5:32:d0:75:0d:bd:7e:45:e4:
5b:aa:1a:08:13:14:77:7a:fc:bd:ca:54:97:e8:56:
ab:e2:33:c9:d8:9e:59:56:7d:eb:48:d7:ce:3c:c2:
d9:2c:3f:a8:28:f5:3b:1a:b0:5c:26:85:ae:9d:9a:
c9:76:c6:58:90:6b:6b:0e:cd:e2:b0:4d:81:c3:b1:
8c:21:fa:d5:a3:d8:29:4d:ba:50:5f:13:54:b1:aa:
06:8f:d2:11:a1:fc:cd:a9:2c:7f:d3:a6:50:9a:d0:
7c:de:ac:8b:33:3a:1b:9f:93:b8:e3:63:6b:46:76:
5d:db:0e:4d:3a:4d:c2:c8:be:7b:45:66:d7:e0:33:
cb:22:8d:13:7c:63:e8:47:ca:0c:63:30:f0:df:fa:
a2:3f:6e:04:c5:05:cf:3e:1b:1f:e1:38:05:2b:f7:
2a:6b:36:38:23:c3:e9:87:5e:67:e7:ea:e2:e7:d5:
3a:4b:ee:44:3d:8e:f4:65:df:24:c0:20:68:28:d0:
16:92:89:73:cd:37:b7:c4:41:18:59:1a:a8:4f:62:
61:c5:f3:d0:b0:a4:13:bc:d8:8a:01:89:9f:7b:ab:
f9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FF:18:EB:EA:C9:9D:2D:3C:D7:63:66:81:E5:8C:DF:2E:CC:05:77
X509v3 Authority Key Identifier:
keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:7e:5f:ca:fd:78:55:64:29:31:ca:f2:49:32:c8:0d:3b:3c:
bf:c7:31:f8:56:4e:52:bb:2e:39:69:f6:11:71:67:77:13:66:
dc:ae:8c:0c:58:87:ca:ff:76:af:29:a6:3a:bc:dc:0d:2a:50:
0b:7b:90:04:98:96:b9:76:fa:4c:a7:81:b9:8e:ab:9c:3f:47:
45:a1:82:6a:14:aa:0f:a7:ed:bb:e9:cc:2f:2e:4a:83:2a:63:
1c:4b:85:82:20:79:64:75:8a:9b:b1:8b:b9:47:40:5e:a9:ca:
a3:e0:f4:a3:e5:71:f0:ac:91:6e:e1:95:2b:13:f7:79:92:e4:
2d:a0:69:52:e4:52:34:fc:fa:7c:34:f5:61:8e:67:88:31:96:
62:3f:9a:67:92:01:3e:f5:91:43:10:26:cc:d1:f2:b9:ee:db:
87:91:97:55:e3:fa:72:8e:21:36:42:f1:d4:90:0a:e6:24:b6:
61:dc:18:be:59:09:3b:83:69:13:60:2e:56:da:59:d4:76:71:
95:61:d3:ca:27:b7:b9:03:d5:8c:31:d5:88:00:e1:b2:0a:59:
53:4e:2c:39:97:17:dd:d6:e2:0c:29:44:df:16:89:39:43:ad:
e6:c9:f3:98:bd:5b:7e:4b:11:de:30:05:96:0a:d1:07:14:13:
31:ae:e5:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:06:45 2026 by rpki-client