Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
File: DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft (raw, json)
Hash identifier: qAdeu0tYJYnwR8BDGhjjY8lmzNTDkgfXzgHG+C/HKJs=
Subject key identifier: 05:D4:9D:B4:07:53:D5:42:A3:87:63:A4:43:1F:6E:E0:6A:46:7E:34
Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Certificate serial: 01A0DFBC99E63FF079F375DE9B3DF9F3DF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
Manifest number: 02F3
Signing time: Sat 26 Sep 2026 22:01:14 +0000
Manifest this update: Sat 26 Sep 2026 22:01:14 +0000
Manifest next update: Sun 27 Sep 2026 22:01:14 +0000
Files and hashes: 1: DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl (hash: EFKez8/ojwHtO4lHs1VyPQdy9USKuMb4edN4qZVnoY4=)
2: GlhmPCyy1FDf_YTiqeYgVfiC97w.roa (hash: aM5XCtKjHw7PII1T2KGsCatDptMXLc32zqDWbo5CqIM=)
3: qqcaq47Akg1rjPpdSSbGkwyrvpk.asa (hash: cwFdQdAV6zODkwY2szZRrvlvnRzifxMX56MS8xtw3IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:99:e6:3f:f0:79:f3:75:de:9b:3d:f9:f3:df:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Validity
Not Before: Sep 26 22:01:14 2026 GMT
Not After : Sep 27 22:01:14 2026 GMT
Subject: CN=05d49db40753d542a38763a4431f6ee06a467e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:77:45:aa:cf:f4:d8:5f:eb:b3:c4:39:03:
9f:e0:c2:1e:48:04:b5:86:e9:ad:44:49:c8:54:08:
89:9a:97:71:e5:14:59:e5:a0:c1:e8:1a:f2:56:83:
73:e0:c3:4f:1b:9a:48:7f:e0:f2:2c:81:9f:bc:8a:
28:c2:af:4d:65:5f:f3:11:4d:73:c1:eb:62:b1:d8:
32:cf:c5:00:7a:39:7e:0e:d1:a2:73:88:be:1f:88:
56:2f:f2:0d:2b:d3:03:f9:a3:3a:19:03:26:c1:9c:
e7:54:34:df:6d:8a:e9:0a:4c:f3:bf:88:aa:c1:38:
3c:06:08:eb:a3:92:dd:81:bf:16:e0:5b:98:41:96:
d9:07:50:cc:bb:79:bd:f2:27:68:95:0d:66:6c:23:
ed:ad:21:eb:03:56:ea:df:c0:aa:28:8a:f2:8c:68:
9c:5d:81:07:c8:1c:4f:b8:f4:27:d4:22:dd:d5:a4:
ba:f6:78:db:46:af:b4:50:a0:97:37:53:d0:ff:39:
a1:d0:c7:1f:7b:b8:37:80:6f:37:4c:95:20:28:b0:
8e:c7:72:5d:d1:19:38:5c:c5:4a:ac:79:92:cc:d6:
4c:f0:81:38:90:58:43:96:a5:a2:ee:60:e3:ef:71:
bb:8b:31:0a:b1:e2:42:88:ec:69:8c:41:c2:f5:1f:
62:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D4:9D:B4:07:53:D5:42:A3:87:63:A4:43:1F:6E:E0:6A:46:7E:34
X509v3 Authority Key Identifier:
keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:be:14:6b:de:f3:32:ba:a2:5c:b7:3a:7e:90:81:c3:a6:39:
c4:8b:62:b3:6e:ca:49:bc:12:31:b5:75:b6:aa:30:06:30:9a:
7b:21:c3:bc:4b:f8:64:51:ee:21:65:3a:7b:d6:9f:be:f2:38:
d1:1f:f4:9e:5d:a1:3b:5c:3a:1c:b5:e3:5f:ee:6d:6e:d6:da:
76:b3:33:cb:7b:3d:f9:f8:d7:95:3e:51:c7:16:69:f7:8e:a7:
5c:0a:7e:e7:a8:64:ff:24:40:bd:a8:e9:81:ad:7a:56:40:96:
57:fe:a0:98:a8:fc:9f:87:0a:52:c1:35:5c:50:16:96:c9:76:
25:7a:72:b2:ab:1e:f9:73:12:db:19:fc:4a:fa:f8:fc:02:21:
19:a6:de:91:a1:bb:89:68:07:f7:15:29:9c:e9:f1:42:d6:50:
7f:99:fa:6e:57:55:78:b4:aa:a3:20:47:ea:70:1c:94:59:9d:
3e:5b:fd:c6:4b:c8:c2:c3:2a:20:91:49:08:d8:1b:d7:10:b9:
1c:03:62:24:3b:ea:21:a3:4b:31:46:d3:26:3c:46:d4:d0:c8:
bb:37:80:38:39:7b:38:11:6e:7d:d7:d6:07:67:cc:03:4a:5a:
ea:21:a0:9c:65:ef:b5:79:a8:71:3d:34:6e:22:05:68:02:22:
27:d7:05:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 07:50:56 2026 by rpki-client