Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
File: Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json)
Hash identifier: BFOgNMmxeZTEIlOIZsXGAgU+PYBXk1tWDEt++IHBgOw=
Subject key identifier: 94:B0:AC:C3:67:29:E9:9A:5B:31:FE:ED:52:A3:D1:CC:8C:EB:4E:30
Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
Certificate issuer: /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Certificate serial: 019EBDD9BEC3302E9BA7B170900C0F7C0FB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
Manifest number: 1955
Signing time: Fri 12 Jun 2026 22:00:24 +0000
Manifest this update: Fri 12 Jun 2026 22:00:24 +0000
Manifest next update: Sat 13 Jun 2026 22:00:24 +0000
Files and hashes: 1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: joPm6knswZPQnqNxdpjo5M36J0mP9Mxz9sjBK0ODc9M=)
2: TZIG1R8-YGmhR0xI5zBvA7V0Dmg.roa (hash: WEHaRsXodnCf7NHMhPdN3H93MUdSSeQQRV5NdrA3eds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:d9:be:c3:30:2e:9b:a7:b1:70:90:0c:0f:7c:0f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Validity
Not Before: Jun 12 22:00:24 2026 GMT
Not After : Jun 13 22:00:24 2026 GMT
Subject: CN=94b0acc36729e99a5b31feed52a3d1cc8ceb4e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fc:b0:ee:8d:ec:9d:fa:02:1b:ff:65:a4:67:
19:5f:6e:1e:49:9d:9d:13:30:54:aa:11:64:08:c5:
1a:f7:b6:8c:b2:e2:93:29:2d:af:4d:3e:e4:14:63:
db:eb:85:3e:2c:8e:20:2d:7b:85:4b:05:33:12:ba:
c0:7f:6b:eb:0b:80:bc:ec:02:e2:96:5e:49:c4:32:
4d:45:f7:51:6e:b1:d9:d1:48:4d:ff:41:3a:5d:10:
4c:5d:ab:9f:bb:7a:ce:b6:1c:07:04:e0:ec:ef:e3:
aa:a9:64:f7:53:aa:ad:03:8e:bf:06:fe:1a:aa:c2:
ab:3d:51:2d:cd:cd:9c:91:65:f9:d0:50:c5:be:a9:
ec:31:4d:d2:f8:59:5e:4f:c5:9b:38:90:cc:d9:5d:
98:c4:01:2a:64:56:52:29:b9:6a:0e:5b:02:81:7e:
5e:13:7f:3b:b7:35:82:31:81:9c:68:63:d9:ea:79:
3b:83:ef:a2:e1:a2:51:71:54:da:90:25:32:6d:69:
a8:d6:6f:71:e5:5d:28:3f:1b:62:bd:4a:14:63:a0:
44:b8:a3:8d:ee:82:90:d1:0d:5d:ce:9b:23:74:66:
9d:ea:0f:0c:da:19:9e:2f:b1:40:03:d8:ff:fb:a6:
11:20:80:34:46:3d:80:b2:ad:0b:e0:1f:84:bb:b0:
11:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:B0:AC:C3:67:29:E9:9A:5B:31:FE:ED:52:A3:D1:CC:8C:EB:4E:30
X509v3 Authority Key Identifier:
keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cc:4a:70:39:73:13:70:59:5f:7e:d2:30:8b:06:d7:ca:2b:
10:44:46:a9:de:1c:cd:a5:ec:57:56:a6:51:db:0f:6a:b2:9b:
e0:23:1c:2a:0d:7e:7c:74:89:84:59:d7:bc:e5:94:74:ef:05:
17:24:2a:a6:49:bc:ed:4d:39:bb:32:44:dd:ff:2d:0c:11:df:
74:8b:ea:a9:63:0b:a2:f1:00:3c:b0:22:e1:c1:d2:f6:a5:0f:
77:f2:10:bc:95:3d:40:c4:58:a1:c3:c0:a9:49:ee:5e:60:65:
a9:c2:a9:f9:57:56:fc:cf:63:dc:7f:7f:74:a8:30:5b:a6:23:
94:1e:77:90:81:67:7c:cc:12:a7:4b:8f:f3:00:4e:93:64:22:
c6:c1:3b:be:9e:3e:e5:7c:bc:7d:5c:1a:d0:8c:ae:6e:ed:f4:
ea:5a:3e:65:79:ac:3b:cb:9e:f8:7b:9c:71:28:b1:08:ec:2e:
4e:49:38:78:a6:2a:8c:13:da:4b:f6:4e:1a:3a:c6:14:2b:80:
17:2c:e0:f4:3c:fd:7f:7c:d7:5b:20:42:d2:00:5c:53:a3:f6:
d7:76:3b:89:f4:1b:22:e8:fa:4b:a3:16:dc:f7:b1:eb:84:4e:
d3:0d:9b:d7:08:ed:bb:3d:70:87:96:be:13:8c:18:af:28:24:
f3:eb:fa:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:06:48 2026 by rpki-client