Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
File: DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft (raw, json)
Hash identifier: gusxUH6TFmsB4WbqJWI4qmnVTQ0LgCiiaVKTTEKlcTw=
Subject key identifier: F1:CA:1B:F5:24:90:51:F4:05:D9:0E:EB:80:EB:42:B6:40:5F:CF:AD
Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Certificate serial: 019D25BA9B10BFFDC103E5915F061975472B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
Manifest number: 0105
Signing time: Wed 25 Mar 2026 16:01:19 +0000
Manifest this update: Wed 25 Mar 2026 16:01:19 +0000
Manifest next update: Thu 26 Mar 2026 16:01:19 +0000
Files and hashes: 1: DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl (hash: AOUIhgilXhe8jrL3QYJxdAWObLYZb6U7aLABf2J2cC4=)
2: GlhmPCyy1FDf_YTiqeYgVfiC97w.roa (hash: aM5XCtKjHw7PII1T2KGsCatDptMXLc32zqDWbo5CqIM=)
3: qqcaq47Akg1rjPpdSSbGkwyrvpk.asa (hash: cwFdQdAV6zODkwY2szZRrvlvnRzifxMX56MS8xtw3IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:9b:10:bf:fd:c1:03:e5:91:5f:06:19:75:47:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Validity
Not Before: Mar 25 16:01:19 2026 GMT
Not After : Mar 26 16:01:19 2026 GMT
Subject: CN=f1ca1bf5249051f405d90eeb80eb42b6405fcfad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:08:7e:e0:dc:9b:3e:83:da:c8:8c:f2:74:c3:
68:85:c4:4c:6a:ab:57:cf:17:45:ab:8e:41:d6:35:
2f:04:a9:21:86:64:98:ef:7f:5a:24:8c:b2:0b:29:
d3:c5:20:42:5e:f5:62:ea:ca:14:99:1c:e8:7c:f3:
a3:bd:c6:89:c5:9c:71:2b:c4:e1:ab:c7:3d:eb:4a:
71:e2:32:7c:72:50:95:ab:b2:05:21:94:c0:f0:61:
b4:a1:d8:53:58:2f:1e:59:78:c5:f6:b1:0a:a5:92:
e4:22:16:8d:56:98:4a:a8:d8:25:4e:9e:ad:e5:8a:
5f:87:14:1f:9e:df:e5:ec:34:e3:6a:7b:3b:12:94:
da:2b:67:09:df:67:60:65:6a:03:ed:ac:2e:d0:1b:
75:02:8f:4c:03:5f:b6:03:7f:86:ae:a1:62:9e:3f:
68:fd:55:d6:ba:16:7d:93:d5:a7:41:95:66:18:2e:
48:db:55:f6:3b:40:c2:ad:c1:00:f4:5d:c0:31:21:
23:b3:54:5d:1e:37:e0:49:7d:93:f8:25:bc:f0:60:
ca:1f:37:14:cb:61:75:23:02:e7:80:c1:10:2b:f6:
a6:50:e1:58:b7:4e:63:43:1e:f0:c6:cc:2a:d6:11:
43:5b:78:35:0d:a0:4c:36:1b:cc:27:0f:cd:d5:37:
c2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CA:1B:F5:24:90:51:F4:05:D9:0E:EB:80:EB:42:B6:40:5F:CF:AD
X509v3 Authority Key Identifier:
keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2b:96:1a:58:0c:2d:50:91:98:cb:37:90:2e:6b:0b:b4:2c:
69:ad:96:bf:4b:e3:75:a9:ba:a1:b7:63:12:fe:b7:9d:d9:cb:
14:59:8a:11:83:9f:51:d4:66:c7:5f:90:ee:f3:66:34:ba:f2:
bd:27:52:5c:73:51:5f:9e:6d:46:b1:e6:d1:b1:ba:46:6a:78:
40:10:96:a6:74:cd:4a:f1:c1:bc:7d:12:fd:04:54:c1:32:a0:
ed:7f:b6:fb:b5:45:82:b5:8f:a9:09:45:f3:02:0d:73:17:e9:
7e:95:72:76:9b:61:75:f1:59:40:f2:2b:7f:04:3d:a7:55:bc:
d2:de:60:53:33:57:d5:5a:48:1c:b5:51:36:75:47:6d:7a:f6:
72:e3:e1:49:b6:b8:16:79:5d:17:e3:a6:b9:7a:33:23:bf:8d:
a3:0a:e0:0d:1b:9e:93:6d:1f:19:f8:d4:93:e2:3d:9d:88:fb:
fe:6d:9a:07:23:63:8c:d2:c8:0a:ab:84:d4:d5:fa:40:d3:9d:
5d:f2:db:85:d1:95:29:fb:56:60:9a:05:0b:db:23:93:5c:e5:
e4:f6:f0:b0:4b:f3:a7:3c:f9:b0:e1:4f:92:ac:12:f8:87:3c:
0e:1a:af:3c:b8:d7:e4:dd:fa:fa:c8:a3:f5:27:df:1b:50:f4:
04:29:65:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:01:52 2026 by rpki-client