Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
File: DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft (raw, json)
Hash identifier: CrS/PDilr9tUujgPlCH1+z/QUc8dmV9bEQQTfTeice0=
Subject key identifier: 7E:69:E7:94:DC:8F:F3:9D:82:81:15:69:14:F6:FB:D0:8B:3E:BD:9C
Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Certificate serial: 019E1CEB60F89716ED11DE9CBC9A98A5C0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
Manifest number: 0185
Signing time: Tue 12 May 2026 16:00:48 +0000
Manifest this update: Tue 12 May 2026 16:00:48 +0000
Manifest next update: Wed 13 May 2026 16:00:48 +0000
Files and hashes: 1: DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl (hash: EygTHaw8n/F8ISfI6bwCj5dIM0t6EOTJOB9pihOTM1I=)
2: GlhmPCyy1FDf_YTiqeYgVfiC97w.roa (hash: aM5XCtKjHw7PII1T2KGsCatDptMXLc32zqDWbo5CqIM=)
3: qqcaq47Akg1rjPpdSSbGkwyrvpk.asa (hash: cwFdQdAV6zODkwY2szZRrvlvnRzifxMX56MS8xtw3IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:60:f8:97:16:ed:11:de:9c:bc:9a:98:a5:c0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Validity
Not Before: May 12 16:00:48 2026 GMT
Not After : May 13 16:00:48 2026 GMT
Subject: CN=7e69e794dc8ff39d8281156914f6fbd08b3ebd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:44:b0:d8:b5:f5:01:22:76:c2:d4:20:0b:a4:
46:0a:c6:85:4c:d8:c4:2a:bb:dc:be:b7:e1:af:ef:
40:07:d8:73:7e:14:1c:f3:ca:23:55:9d:74:0b:7c:
e1:7d:16:ff:fb:93:04:a9:13:bb:06:73:8b:d4:56:
6a:cf:be:6a:84:a9:2f:ce:4e:95:43:2f:ba:d8:04:
4c:56:d7:59:d1:2f:31:af:46:4d:15:ed:3e:af:e0:
13:33:51:c8:8c:54:fa:9e:80:54:09:c0:2b:df:0a:
d9:2f:87:86:14:85:3c:3b:3a:c8:76:81:5b:3b:6d:
78:08:9a:81:7e:a2:8c:d1:c7:fb:49:7e:e6:48:43:
bc:12:b9:c0:5d:50:44:26:03:0c:0d:4a:7d:b4:46:
c0:25:82:d8:43:6b:59:d2:69:3f:35:b6:7c:6a:6c:
bd:a2:7d:cb:70:8c:19:fe:be:aa:e1:2d:dc:e8:42:
af:24:bf:9b:46:d7:ab:51:91:e9:c6:93:5f:f6:ee:
91:a9:c9:be:5b:bb:d9:58:4d:19:f3:c0:db:8b:82:
83:05:b4:e2:23:00:7e:98:a8:9b:0e:92:4f:a9:20:
5c:b0:fb:78:75:a7:29:f1:3e:a1:b8:7d:bd:88:4f:
ae:78:2e:d1:9d:ae:28:ab:88:27:be:46:ac:46:10:
6b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:69:E7:94:DC:8F:F3:9D:82:81:15:69:14:F6:FB:D0:8B:3E:BD:9C
X509v3 Authority Key Identifier:
keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:00:5e:f8:48:2c:1f:5a:4f:ca:fc:7f:f4:26:62:55:10:99:
8c:d7:89:0e:ff:9d:c0:bb:9c:ac:7c:5a:cf:b1:41:10:90:d9:
b5:36:dd:67:13:aa:db:6a:5d:80:65:66:09:31:96:f0:6b:36:
2f:4e:29:01:ee:7b:74:eb:fc:2f:a8:f0:2f:79:ec:01:8f:49:
85:3b:a5:a8:89:bb:47:70:84:93:24:86:8b:ac:43:4d:df:33:
c1:62:0c:77:b9:2e:4a:7f:28:04:7c:0a:57:b1:b6:27:c7:eb:
ef:41:87:07:49:53:d2:cd:4e:07:88:ae:54:d3:0e:19:87:fb:
6d:19:69:71:44:aa:3e:93:3d:2c:91:08:49:c9:b8:07:13:eb:
df:90:b2:8a:98:30:81:58:2e:19:1f:f9:42:bb:ec:c6:a5:73:
3e:4f:e4:19:96:94:f2:a4:2f:be:51:1c:d5:a9:3b:8b:b1:9f:
9f:ff:4c:7a:41:9a:7a:a8:42:a6:fa:69:9d:d1:03:c0:c2:3f:
85:2a:55:ae:52:6b:c9:71:fe:50:03:a8:ac:c3:d2:8c:03:14:
0c:6b:be:48:70:35:95:45:f8:a5:48:ca:d4:0b:20:a5:fb:b1:
00:37:09:34:98:7b:a3:20:ac:20:f2:65:fd:e2:a0:38:4a:81:
63:b5:79:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:21:14 2026 by rpki-client