Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
File: Dkbx623dT_7-GDgAMCvmNs_pZTc.mft (raw, json)
Hash identifier: LJAu+cPLJLsa5C/RAogVOR1Yqy1zA1vK2/wCcdNV62Q=
Subject key identifier: DA:4B:15:FE:A4:DC:B0:ED:8F:FF:15:EB:B4:4D:A6:9F:8C:8E:23:1E
Authority key identifier: 0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
Certificate issuer: /CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Certificate serial: 01A0C3695A528E1BEB3C719804C888E6DE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
Manifest number: 1A61
Signing time: Mon 21 Sep 2026 10:00:56 +0000
Manifest this update: Mon 21 Sep 2026 10:00:56 +0000
Manifest next update: Tue 22 Sep 2026 10:00:56 +0000
Files and hashes: 1: Dkbx623dT_7-GDgAMCvmNs_pZTc.crl (hash: xl32PwS5KnNI9tIQAbp1pHI5EWQiFQjwBnwHIWnsdSA=)
2: TZIG1R8-YGmhR0xI5zBvA7V0Dmg.roa (hash: WEHaRsXodnCf7NHMhPdN3H93MUdSSeQQRV5NdrA3eds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:69:5a:52:8e:1b:eb:3c:71:98:04:c8:88:e6:de:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e46f1eb6ddd4ffefe183800302be636cfe96537
Validity
Not Before: Sep 21 10:00:56 2026 GMT
Not After : Sep 22 10:00:56 2026 GMT
Subject: CN=da4b15fea4dcb0ed8fff15ebb44da69f8c8e231e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:17:c9:68:7f:51:e7:a3:b3:7a:3b:69:80:7b:
3a:92:7d:7e:76:86:b4:29:fc:e7:a5:3d:39:c2:05:
79:26:c2:04:04:39:35:ac:aa:0a:c8:52:0f:04:39:
f4:f1:cc:2f:22:ed:ba:ea:b8:42:49:b7:ef:3c:11:
9b:f4:b3:de:31:8d:f7:5f:01:8c:10:e8:d9:b7:23:
0e:db:ff:8e:43:12:a2:de:63:a3:87:d1:e1:f7:b0:
51:0c:4e:4f:df:a0:7c:d0:a5:26:8e:66:22:0d:68:
5f:37:28:52:27:7a:9c:72:c9:2b:a8:2a:18:9f:9d:
49:5c:f4:17:c9:fa:c4:5e:51:01:87:40:ba:11:55:
49:73:6d:b4:41:75:04:5a:04:5d:e4:ed:d7:02:59:
cc:fb:fb:f0:26:09:59:3d:9d:74:18:9b:34:fa:63:
1f:59:05:a8:1d:75:4e:da:c4:eb:ff:ff:75:48:27:
00:27:3b:d1:3d:95:fe:dd:1f:88:2a:55:41:e5:d5:
4a:99:42:70:6a:f3:10:e3:3e:b5:1b:80:e8:58:f9:
31:04:61:8b:72:a2:7b:04:7b:ea:89:83:66:b2:e3:
ae:8d:e1:d5:c3:f2:f2:08:31:8d:24:96:8a:bd:68:
0d:e9:43:b2:88:61:a9:46:02:a9:8a:97:69:ce:3f:
8a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4B:15:FE:A4:DC:B0:ED:8F:FF:15:EB:B4:4D:A6:9F:8C:8E:23:1E
X509v3 Authority Key Identifier:
keyid:0E:46:F1:EB:6D:DD:4F:FE:FE:18:38:00:30:2B:E6:36:CF:E9:65:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dkbx623dT_7-GDgAMCvmNs_pZTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/558afe-49fe-438e-bd37-f4fced35b352/1/Dkbx623dT_7-GDgAMCvmNs_pZTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:58:68:7d:3d:18:6b:a3:77:3a:15:47:29:c9:c3:8e:7f:55:
5c:37:4a:76:91:93:ed:63:00:c5:b2:41:df:02:ae:19:2f:56:
6c:87:7a:76:4a:fb:71:72:e3:6d:78:f4:9f:0c:45:ac:40:3a:
3e:d9:4c:93:db:59:bd:94:e5:70:a1:68:b1:0a:f3:ef:16:ed:
24:a5:6b:0e:d6:78:ba:b6:71:c6:e0:8f:4e:5c:56:3e:6e:3a:
3d:15:75:eb:8e:9e:a9:bb:47:66:ca:ad:91:81:42:be:f4:e1:
2b:ef:b0:76:e4:af:e2:86:1e:7f:b6:ea:54:1f:4d:35:d9:63:
81:92:80:16:24:fa:f7:f2:f6:32:17:16:39:b1:2e:b7:43:c7:
a4:3f:26:6f:e5:eb:02:4e:54:19:db:d9:5b:24:7c:5d:e5:6d:
1c:de:59:00:f7:2a:47:11:8a:28:05:3b:9b:35:83:d5:e7:68:
5b:4c:1c:97:76:67:1c:56:00:22:1e:1b:2e:bf:54:9c:71:6b:
b3:03:1e:7f:f1:eb:c7:c4:47:97:74:5a:44:f0:36:82:c1:f8:
a6:7d:38:c9:da:2c:80:0d:c0:0a:23:01:8a:d6:a8:02:ec:52:
dd:2c:46:c6:b3:4c:09:45:25:27:14:0b:a5:ce:16:2e:fa:61:
65:90:76:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDDaVpSjhvrPHGYBMiI5t4UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlNDZmMWViNmRkZDRmZmVmZTE4MzgwMDMwMmJlNjM2Y2Zl
OTY1MzcwHhcNMjYwOTIxMTAwMDU2WhcNMjYwOTIyMTAwMDU2WjAzMTEwLwYDVQQD
EyhkYTRiMTVmZWE0ZGNiMGVkOGZmZjE1ZWJiNDRkYTY5ZjhjOGUyMzFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8hfJaH9R56OzejtpgHs6kn1+doa0
KfznpT05wgV5JsIEBDk1rKoKyFIPBDn08cwvIu266rhCSbfvPBGb9LPeMY33XwGM
EOjZtyMO2/+OQxKi3mOjh9Hh97BRDE5P36B80KUmjmYiDWhfNyhSJ3qccskrqCoY
n51JXPQXyfrEXlEBh0C6EVVJc220QXUEWgRd5O3XAlnM+/vwJglZPZ10GJs0+mMf
WQWoHXVO2sTr//91SCcAJzvRPZX+3R+IKlVB5dVKmUJwavMQ4z61G4DoWPkxBGGL
cqJ7BHvqiYNmsuOujeHVw/LyCDGNJJaKvWgN6UOyiGGpRgKpipdpzj+K3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNpLFf6k3LDtj/8V67RNpp+MjiMeMB8GA1UdIwQY
MBaAFA5G8ett3U/+/hg4ADAr5jbP6WU3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81NThhZmUtNDlmZS00MzhlLWJkMzct
ZjRmY2VkMzViMzUyLzEvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81NThhZmUtNDlmZS00MzhlLWJkMzctZjRmY2VkMzViMzUy
LzEvRGtieDYyM2RUXzctR0RnQU1Ddm1Oc19wWlRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFhofT0Y
a6N3OhVHKcnDjn9VXDdKdpGT7WMAxbJB3wKuGS9WbId6dkr7cXLjbXj0nwxFrEA6
PtlMk9tZvZTlcKFosQrz7xbtJKVrDtZ4urZxxuCPTlxWPm46PRV1646eqbtHZsqt
kYFCvvThK++wduSv4oYef7bqVB9NNdljgZKAFiT69/L2MhcWObEut0PHpD8mb+Xr
Ak5UGdvZWyR8XeVtHN5ZAPcqRxGKKAU7mzWD1edoW0wcl3ZnHFYAIh4bLr9UnHFr
swMef/Hrx8RHl3RaRPA2gsH4pn04ydosgA3ACiMBitaoAuxS3SxGxrNMCUUlJxQL
pc4WLvphZZB2bw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:51:20 2026 by rpki-client