Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
File: Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json)
Hash identifier: P2F2qaZ2xC9K0Sx6PjxLW5u8YE4Zt25vcBa6CfXYdpE=
Subject key identifier: 95:44:D5:BE:55:A6:60:99:17:AA:17:C9:00:7C:D6:A1:EF:D0:E6:E3
Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
Certificate issuer: /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Certificate serial: 01A1C44226639C1E7B9CF48AD50C6DAAB223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
Manifest number: 1AE6
Signing time: Tue 10 Nov 2026 07:00:31 +0000
Manifest this update: Tue 10 Nov 2026 07:00:31 +0000
Manifest next update: Wed 11 Nov 2026 07:00:31 +0000
Files and hashes: 1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: pkJ08in2UAG0SI5CnmaIFPL/0LwCaY5u8mWX43CVoxo=)
2: TZIG1R8-YGmhR0xI5zBvA7V0Dmg.roa (hash: WEHaRsXodnCf7NHMhPdN3H93MUdSSeQQRV5NdrA3eds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Nov 2026 07:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:42:26:63:9c:1e:7b:9c:f4:8a:d5:0c:6d:aa:b2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Validity
Not Before: Nov 10 07:00:31 2026 GMT
Not After : Nov 11 07:00:31 2026 GMT
Subject: CN=9544d5be55a6609917aa17c9007cd6a1efd0e6e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:a2:1d:cb:d6:6c:35:1e:50:be:24:05:b8:
b4:e2:24:ff:11:d1:65:50:40:0e:d4:39:e8:f3:c7:
6a:41:5f:36:f0:23:71:13:31:f1:ac:09:91:e6:e5:
71:25:f0:dd:5f:e8:3a:e2:2c:84:8e:ff:bc:c2:ef:
01:23:18:11:f3:42:05:e2:a3:cf:cf:3f:f4:62:b7:
95:22:21:b6:c8:7d:6f:06:0f:87:ca:83:a7:4e:69:
fb:55:fe:f6:98:04:40:f6:1a:bb:f9:c8:08:a5:00:
30:b5:40:12:64:0f:ef:ac:af:6c:c3:1d:2e:9f:64:
a7:37:09:5f:23:7a:c1:15:c4:09:6c:3e:ef:a2:42:
45:3d:88:6d:2a:10:92:2c:10:97:a9:b4:92:45:30:
0d:25:f1:e5:a0:8d:10:e0:a5:03:4c:11:e2:6d:96:
0c:07:00:1f:7a:9f:ea:07:ac:b0:09:b9:5e:dc:42:
4a:21:9d:0e:8f:f7:6e:a1:1f:32:34:11:b6:d6:f2:
d0:ac:53:ee:ed:d6:96:f5:ff:ec:e0:bb:84:dc:3c:
fe:0c:7c:90:39:c3:58:9c:f4:4e:f3:cb:0a:2a:42:
75:65:93:7f:f6:3b:39:bb:17:91:5a:59:ed:30:cf:
aa:a7:e0:a6:e6:00:3a:9e:14:55:e9:96:f1:c6:57:
5e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:44:D5:BE:55:A6:60:99:17:AA:17:C9:00:7C:D6:A1:EF:D0:E6:E3
X509v3 Authority Key Identifier:
keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8a:fa:9f:2f:fb:35:94:fe:7a:f6:dd:2e:3f:94:3b:8a:b0:
c4:70:30:54:25:8c:8c:54:3a:0f:ba:65:52:6f:0f:7c:a5:57:
2a:f0:72:82:13:60:41:29:53:2f:df:96:11:83:9c:8c:7d:c9:
21:46:46:2a:30:aa:4d:e9:b4:96:bd:6e:3b:dc:fd:7f:4b:de:
39:5b:41:64:66:eb:b4:d9:ed:87:74:00:68:1b:dd:cc:03:1c:
ea:7a:4e:ea:0c:e1:ed:50:bd:c1:63:d6:80:c0:38:2b:c5:45:
99:96:0f:43:48:1b:f2:97:de:54:a1:af:62:62:78:b9:c4:73:
35:97:40:0e:54:3f:24:bd:1b:c2:0e:19:ce:4a:c7:a6:27:3a:
f2:09:87:60:dd:a7:93:df:1c:1f:26:00:bc:e3:cd:c0:70:13:
4c:dc:a3:17:e9:e5:b1:0c:03:18:5b:0d:84:09:af:44:e7:bb:
bf:9e:b3:fb:41:ac:3c:8b:20:10:e0:da:0c:8d:89:33:27:4d:
31:3b:29:90:98:cc:12:d8:fb:ea:6f:37:a0:1a:ad:5b:c6:0f:
df:50:76:28:23:0e:1f:ff:0c:fe:c3:25:8f:96:15:a8:b9:5a:
a9:1b:04:a2:8d:03:4f:4e:38:66:a3:f4:ba:17:e6:6f:fd:91:
3d:c0:b5:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHEQiZjnB57nPSK1QxtqrIjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDZmMWViNmRkZDRmZmVmZTE4MzgwMDMwMmJlNjM2Y2Zl
OTY1MzcwHhcNMjYxMTEwMDcwMDMxWhcNMjYxMTExMDcwMDMxWjAzMTEwLwYDVQQD
Eyg5NTQ0ZDViZTU1YTY2MDk5MTdhYTE3YzkwMDdjZDZhMWVmZDBlNmUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneCiHcvWbDUeUL4kBbi04iT/EdFl
UEAO1Dno88dqQV828CNxEzHxrAmR5uVxJfDdX+g64iyEjv+8wu8BIxgR80IF4qPP
zz/0YreVIiG2yH1vBg+HyoOnTmn7Vf72mARA9hq7+cgIpQAwtUASZA/vrK9swx0u
n2SnNwlfI3rBFcQJbD7vokJFPYhtKhCSLBCXqbSSRTANJfHloI0Q4KUDTBHibZYM
BwAfep/qB6ywCble3EJKIZ0Oj/duoR8yNBG21vLQrFPu7daW9f/s4LuE3Dz+DHyQ
OcNYnPRO88sKKkJ1ZZN/9js5uxeRWlntMM+qp+Cm5gA6nhRV6ZbxxldeSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVE1b5VpmCZF6oXyQB81qHv0ObjMB8GA1UdIwQY
MBaAFA5G8ett3U/+/hg4ADAr5jbP6WU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81NThhZmUtNDlmZS00MzhlLWJkMzct
ZjRmY2VkMzViMzUyLzEvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81NThhZmUtNDlmZS00MzhlLWJkMzctZjRmY2VkMzViMzUy
LzEvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU4r6ny/7
NZT+evbdLj+UO4qwxHAwVCWMjFQ6D7plUm8PfKVXKvByghNgQSlTL9+WEYOcjH3J
IUZGKjCqTem0lr1uO9z9f0veOVtBZGbrtNnth3QAaBvdzAMc6npO6gzh7VC9wWPW
gMA4K8VFmZYPQ0gb8pfeVKGvYmJ4ucRzNZdADlQ/JL0bwg4ZzkrHpic68gmHYN2n
k98cHyYAvOPNwHATTNyjF+nlsQwDGFsNhAmvROe7v56z+0GsPIsgEODaDI2JMydN
MTspkJjMEtj76m83oBqtW8YP31B2KCMOH/8M/sMlj5YVqLlaqRsEoo0DT044ZqP0
uhfmb/2RPcC1og==
-----END CERTIFICATE-----
Generated at Tue Nov 10 11:32:11 2026 by rpki-client