Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
File: Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json)
Hash identifier: opK3oKhlXn7WlIIVFcIMNabvWNIfYyXOaq/d9YgX0kU=
Subject key identifier: E8:4F:74:54:07:FB:0F:08:23:29:EC:BD:07:51:BA:B3:A7:38:1B:C3
Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
Certificate issuer: /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Certificate serial: 019CAB6B7F4D10B0C561D33C359D4B15CAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:14 +0000
Manifest this update: Sun 01 Mar 2026 22:01:14 +0000
Manifest next update: Mon 02 Mar 2026 22:01:14 +0000
Files and hashes: 1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: RKdC+zx86/QGQ8WB2bbVQFgn8JoIkmQn+bB8cj9dJBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:7f:4d:10:b0:c5:61:d3:3c:35:9d:4b:15:ca:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Validity
Not Before: Mar 1 22:01:14 2026 GMT
Not After : Mar 2 22:01:14 2026 GMT
Subject: CN=e84f745407fb0f082329ecbd0751bab3a7381bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:db:c5:b8:2e:8c:03:59:b8:6d:dd:5c:81:
4f:e5:af:fa:7f:16:e3:c1:81:fc:56:a9:2c:c0:5e:
bb:ed:0d:81:c2:8e:54:ab:11:0f:af:20:f0:a5:02:
41:f0:4a:de:0c:1d:f9:77:85:a1:b5:9a:a3:cc:fa:
6d:b2:c0:bd:11:38:a5:8d:e6:e1:33:c7:ef:d1:2d:
3a:92:29:98:e4:56:5a:09:8e:c4:95:86:6d:2c:6a:
e3:77:74:d9:03:43:f1:28:ff:8f:83:b0:cf:3f:de:
f2:6d:da:fb:91:67:34:d6:52:dc:a4:a4:ce:92:ef:
ff:b1:18:a1:62:bd:21:c9:18:a3:b6:90:42:54:30:
02:28:fa:12:1b:45:ca:97:c1:e6:2e:ee:9f:8d:9c:
26:5a:60:9d:09:05:e6:72:c2:8a:24:1e:a8:40:09:
c2:4d:e4:14:a1:94:a6:bf:fb:ca:e4:80:4f:f9:99:
9e:c1:18:9d:29:f5:ac:90:d7:dc:af:fd:88:5a:85:
c3:fc:e1:af:3b:7b:92:35:5a:fe:ce:41:32:89:1c:
7b:ad:e1:7e:d9:e9:74:b8:f0:09:68:e3:1d:c6:d0:
3f:11:d4:cc:84:3e:01:40:f2:4f:82:37:3b:22:dc:
a2:fe:df:cf:8e:4a:bd:f3:60:0b:29:51:ed:b7:f9:
f4:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:4F:74:54:07:FB:0F:08:23:29:EC:BD:07:51:BA:B3:A7:38:1B:C3
X509v3 Authority Key Identifier:
keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:79:1e:3b:30:29:16:03:5c:89:c7:d8:05:44:fc:6d:18:d2:
d1:05:fc:38:b1:69:d1:64:0a:e6:fb:91:86:75:a5:b9:f6:ee:
9b:ad:57:72:8c:45:e5:63:9a:4a:08:de:61:2d:af:78:71:d7:
cf:30:4a:9c:21:3b:a4:28:12:92:71:3d:58:00:b9:3e:4b:79:
5b:18:52:b4:19:fb:e0:dd:e5:31:52:16:62:c5:9b:30:c9:69:
39:ea:a9:dc:ef:33:10:7a:cf:a1:13:38:47:bc:f8:1b:26:a8:
67:cd:7d:63:e2:a8:04:d8:cb:30:92:38:b2:6e:64:88:f5:81:
49:44:f9:06:4d:65:99:db:13:19:07:85:16:a5:56:87:88:97:
87:d4:cb:ea:3b:5d:d5:d1:12:6b:e2:fe:18:58:28:6d:bc:e4:
ee:0c:4b:aa:3b:b5:2b:fe:2c:90:88:19:5d:f4:0a:e8:e4:4b:
dc:17:de:b5:99:79:0d:93:39:6f:ed:cd:f1:f1:74:7a:50:d0:
43:bf:f8:2d:09:2e:50:85:7f:f4:de:27:bd:a1:91:d6:2a:6a:
a8:5c:cf:10:44:15:8b:67:3f:69:ca:07:b5:c0:c8:0f:e9:95:
7c:17:f7:1c:a4:13:5b:92:39:71:28:1a:df:71:20:2e:08:17:
81:af:76:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:48:19 2026 by rpki-client