Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.mft
File: DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.mft (raw, json)
Hash identifier: WqT5zgz98vNdtdd7o6jEJ0AE1s8WGOzn9bPHI83yQCo=
Subject key identifier: A3:37:11:9A:B8:40:4B:9C:AB:6B:2A:E3:2C:56:98:E0:61:49:6F:4A
Authority key identifier: 0C:A4:DC:9F:35:28:52:13:FB:2B:70:F1:F3:03:71:C1:63:2F:21:C4
Certificate issuer: /CN=0ca4dc9f35285213fb2b70f1f30371c1632f21c4
Certificate serial: 019F8F7E675A5A3ABC481FF7CF9D46DFA135
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.mft
Manifest number: 3F
Signing time: Thu 23 Jul 2026 15:00:53 +0000
Manifest this update: Thu 23 Jul 2026 15:00:53 +0000
Manifest next update: Fri 24 Jul 2026 15:00:53 +0000
Files and hashes: 1: DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.crl (hash: YFx4ImlH9n9elfpFP0CtGBy88NDJLqGpKMnUZkZ6+1s=)
2: Pmyh4imTnw0NWXX_3yLDINvGWCk.roa (hash: QegoWgfiWcVE8E11dfbKes3Tm9kqwxOHdbl4ivPOgTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:67:5a:5a:3a:bc:48:1f:f7:cf:9d:46:df:a1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4dc9f35285213fb2b70f1f30371c1632f21c4
Validity
Not Before: Jul 23 15:00:53 2026 GMT
Not After : Jul 24 15:00:53 2026 GMT
Subject: CN=a337119ab8404b9cab6b2ae32c5698e061496f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a5:aa:f1:60:1f:92:81:c9:99:fa:a3:79:d0:
61:0d:76:8e:88:7e:b6:d2:d0:f9:d9:18:ca:4c:a8:
56:43:50:bf:06:96:3a:58:e3:4a:2a:ff:04:0f:59:
df:9e:d7:d5:87:3e:e5:3b:10:14:11:f7:c9:8e:cf:
3c:41:2e:dd:50:10:83:4b:65:4d:58:9a:4e:00:21:
43:92:0d:4e:00:f0:6f:a8:e6:39:ee:46:58:63:bc:
f8:87:68:2a:ef:60:90:e3:ee:9b:28:d0:51:d0:0a:
57:8a:62:1c:54:84:c5:0b:6d:d1:85:21:d5:8e:36:
0f:02:c5:94:9d:60:eb:ea:0e:63:e2:e8:e1:08:c4:
76:96:34:84:b4:65:3c:79:d4:aa:4e:f4:4c:ca:6a:
60:e6:c7:e6:eb:ad:78:f4:66:5c:6f:4a:0f:9e:cc:
9f:13:97:b6:c7:a1:ba:95:e5:65:c0:f3:d6:fb:2f:
e3:e0:66:fc:35:69:32:cc:14:e0:42:dd:d3:1f:99:
61:8f:7a:d0:bd:d5:0f:b2:db:9c:ea:24:e9:bb:3b:
99:14:ad:80:0e:c1:c8:d8:60:cb:f9:4a:f0:eb:81:
a6:dd:bb:cd:1b:90:c4:d8:bc:84:fb:67:30:ad:6d:
80:c9:ab:e5:c2:54:f3:3d:de:5d:e7:90:95:7e:a8:
97:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:37:11:9A:B8:40:4B:9C:AB:6B:2A:E3:2C:56:98:E0:61:49:6F:4A
X509v3 Authority Key Identifier:
keyid:0C:A4:DC:9F:35:28:52:13:FB:2B:70:F1:F3:03:71:C1:63:2F:21:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8b4147-e6e0-4d80-a93f-ef63b816dd35/1/DKTcnzUoUhP7K3Dx8wNxwWMvIcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:dd:0f:42:e4:41:7f:17:b8:f5:18:d4:8e:ef:9e:c0:71:63:
3b:31:1c:91:c9:ca:eb:a7:e6:ea:4a:3d:0c:ce:cd:2d:df:fc:
19:19:7d:0f:eb:3c:22:6f:60:e5:83:37:48:9b:33:0a:57:78:
47:03:99:69:64:7c:f7:50:0d:7e:20:b0:68:37:85:fc:ac:62:
97:0b:92:13:65:c0:5f:9a:49:6b:71:93:9f:2b:5a:76:e5:a7:
24:94:b6:41:f4:95:e3:6d:b2:2f:23:57:2f:b2:fb:b5:32:47:
23:71:6a:81:a2:69:4b:a8:02:54:5a:0c:d7:3c:38:f9:6a:48:
fb:04:57:50:98:95:ee:b0:1b:1d:14:25:af:ab:25:46:0c:be:
04:ae:4a:51:37:25:a2:c4:19:cc:b0:d0:3b:d5:c6:23:c3:a2:
ea:76:99:22:5d:66:8e:d0:df:53:97:85:08:3b:b9:a6:18:90:
94:a7:2c:cc:1b:7c:a4:52:9e:19:5b:9e:a0:1d:ce:4d:c8:64:
10:c0:4b:76:a9:ed:46:ee:60:44:4c:df:91:f7:ff:11:8b:c1:
bb:b5:a0:52:2f:9c:3b:85:9d:0f:37:43:63:89:d1:d0:57:04:
9f:a7:b6:ef:d2:65:5e:9e:06:ec:41:7b:84:ba:21:84:db:8d:
3e:27:ef:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:40 2026 by rpki-client