Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
File: DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft (raw, json)
Hash identifier: vRb3C413cOw3oqr0k3u9ZB6UBXMmPay51Z1jZRClrrg=
Subject key identifier: 4F:C2:C5:B5:95:B5:47:C4:3A:C4:B1:2D:CC:17:EE:80:6F:C8:B5:15
Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Certificate serial: 01A1DEA73654D38A2C9EA4731C714731706F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
Manifest number: 0377
Signing time: Sun 15 Nov 2026 10:01:02 +0000
Manifest this update: Sun 15 Nov 2026 10:01:02 +0000
Manifest next update: Mon 16 Nov 2026 10:01:02 +0000
Files and hashes: 1: DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl (hash: 9ZP6pooK0sBCVJ6bDugH+W2PMTegdq2fcc8W+0S+qXQ=)
2: GlhmPCyy1FDf_YTiqeYgVfiC97w.roa (hash: aM5XCtKjHw7PII1T2KGsCatDptMXLc32zqDWbo5CqIM=)
3: qqcaq47Akg1rjPpdSSbGkwyrvpk.asa (hash: cwFdQdAV6zODkwY2szZRrvlvnRzifxMX56MS8xtw3IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:36:54:d3:8a:2c:9e:a4:73:1c:71:47:31:70:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Validity
Not Before: Nov 15 10:01:02 2026 GMT
Not After : Nov 16 10:01:02 2026 GMT
Subject: CN=4fc2c5b595b547c43ac4b12dcc17ee806fc8b515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:bd:1a:26:37:23:0f:c6:fa:6e:e2:0b:ad:
b1:69:60:89:17:6d:a5:2c:88:b3:3a:ce:9f:dc:d9:
d5:20:d4:73:4a:1e:48:ec:2d:bc:82:bb:2d:c8:c8:
f0:a5:e3:50:c2:04:3e:d3:2e:17:3b:34:71:79:32:
7a:a5:04:eb:26:ec:72:f1:f1:13:6b:f6:bc:db:14:
45:f3:79:e6:84:de:b4:b5:3c:9d:83:9e:c7:2d:0f:
ca:f6:a9:d9:40:71:7f:2c:d5:e0:82:59:1a:26:76:
bb:f8:e7:87:c8:7a:7a:fd:e9:90:5d:83:28:b5:fa:
00:3d:35:39:85:fd:11:59:29:9b:c1:da:83:2a:4f:
65:98:55:7c:4a:46:5f:d6:2b:85:ac:12:96:c6:29:
4d:01:49:46:13:e3:b7:81:db:71:19:ea:0f:b1:2e:
27:91:e0:0a:b0:e2:f0:c0:3d:62:a0:f9:2e:10:1b:
1b:af:d9:9e:82:ce:d9:a5:5e:30:6e:dd:b7:f1:b6:
77:f2:6d:61:5e:76:7c:ad:f3:f2:dd:f7:21:41:57:
90:d9:54:7a:bc:09:43:5c:4d:1c:0f:46:ee:46:50:
4e:dc:31:64:ce:28:a1:84:f1:ec:63:2b:0d:da:2f:
47:be:24:c9:61:ac:7b:e0:87:31:97:8b:82:06:90:
35:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:C2:C5:B5:95:B5:47:C4:3A:C4:B1:2D:CC:17:EE:80:6F:C8:B5:15
X509v3 Authority Key Identifier:
keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:61:f9:7b:ca:93:33:2f:ca:86:23:19:4d:0d:cc:00:79:a6:
03:b9:30:05:b0:7d:db:73:17:35:f3:65:c3:0d:08:3f:0e:18:
e8:bd:98:6b:cf:da:b3:71:ee:b2:b3:c5:9d:5f:95:b0:ee:f5:
54:56:90:6e:53:45:92:d7:11:df:2b:ca:ce:c8:9f:dc:a0:a0:
20:9f:a6:78:02:85:8e:2e:3d:c9:84:bc:6a:53:1c:97:6d:fd:
38:55:20:ed:b1:13:e9:4e:0f:49:2b:ea:79:22:e8:24:70:17:
31:23:96:2c:e3:1a:c1:4f:17:ef:e7:16:bd:63:3c:a6:7f:ea:
89:6b:10:84:9d:f5:ce:a1:e9:b0:a1:80:3d:f2:0a:7e:f7:26:
b5:6d:64:52:49:c2:f0:82:89:80:47:f5:91:50:5f:85:84:6a:
a9:33:5d:87:6b:82:a0:ab:1b:15:77:2a:a3:cc:1b:38:fa:58:
7a:ee:20:96:b8:8a:2c:c4:8d:fe:65:30:eb:cd:2a:c8:1c:9a:
2e:48:64:6e:3c:6b:6b:90:1d:df:8a:71:62:0a:ac:31:17:5b:
ea:f8:3a:28:77:7d:69:9c:2a:8f:5e:14:01:50:ae:a3:09:39:
56:b6:b2:23:c5:81:f4:28:04:f2:0c:86:c7:ff:7b:9e:65:77:
8b:eb:b4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:35:03 2026 by rpki-client