Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
File: DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft (raw, json)
Hash identifier: E6CiLLPk8IR8cVfWKEZ+m8YOyiFksYvo1KGuhMXWdcs=
Subject key identifier: D8:D0:B5:D7:E2:94:67:59:79:FC:9B:A5:E7:D6:09:E8:46:79:A2:9F
Authority key identifier: 0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
Certificate issuer: /CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Certificate serial: 019F8FB57831C31E1DEEA36BD8EEAB36912C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
Manifest number: 0245
Signing time: Thu 23 Jul 2026 16:01:02 +0000
Manifest this update: Thu 23 Jul 2026 16:01:02 +0000
Manifest next update: Fri 24 Jul 2026 16:01:02 +0000
Files and hashes: 1: DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl (hash: VX4nN+i38c4BNX/jfNfCU9vnxEwQSbReTj0Np5v+XdU=)
2: GlhmPCyy1FDf_YTiqeYgVfiC97w.roa (hash: aM5XCtKjHw7PII1T2KGsCatDptMXLc32zqDWbo5CqIM=)
3: qqcaq47Akg1rjPpdSSbGkwyrvpk.asa (hash: cwFdQdAV6zODkwY2szZRrvlvnRzifxMX56MS8xtw3IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:78:31:c3:1e:1d:ee:a3:6b:d8:ee:ab:36:91:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca51990ce0c89f0d210609e67e9e807565c131f
Validity
Not Before: Jul 23 16:01:02 2026 GMT
Not After : Jul 24 16:01:02 2026 GMT
Subject: CN=d8d0b5d7e294675979fc9ba5e7d609e84679a29f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0a:83:af:54:ca:2d:7e:a2:2f:56:02:7e:49:
f3:2f:fa:e8:7b:5e:db:e6:af:91:a3:06:c4:07:3c:
56:06:e8:34:71:c0:73:6a:50:96:e3:05:d1:a0:d2:
19:75:8e:7e:22:bd:00:f6:10:a8:78:ac:20:22:0a:
b6:d2:2e:04:0f:d5:4a:d3:5a:d1:9b:aa:ed:f0:ad:
af:32:64:b3:29:0d:11:17:b3:7e:2b:52:4c:7b:f6:
9b:e7:7d:f6:58:c7:6d:82:aa:0c:22:59:88:72:bd:
6e:ae:f8:6a:61:a7:bf:7e:9e:a4:65:8a:2e:1a:88:
ed:de:6c:fd:0a:37:a8:36:a6:2d:39:9c:dd:56:93:
90:8b:42:05:03:c7:48:2c:d0:7c:2f:fc:c5:3b:b0:
69:d7:8c:4f:d1:e2:e7:75:f9:7d:e8:b8:84:f4:cb:
46:25:ad:69:bb:38:8c:df:a6:07:e4:82:7a:0c:66:
10:52:82:97:59:80:f2:df:d2:1a:45:4f:16:78:45:
c3:df:32:b6:0b:1f:de:30:e2:71:f0:73:78:4f:aa:
05:9a:83:2b:b3:92:c6:81:8f:35:02:61:8e:f6:b8:
b9:37:8e:c1:8d:82:b6:6b:d7:fa:5b:1d:f9:3c:93:
1e:bf:a7:1a:9e:07:87:4d:9f:f4:76:76:85:49:81:
a6:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D0:B5:D7:E2:94:67:59:79:FC:9B:A5:E7:D6:09:E8:46:79:A2:9F
X509v3 Authority Key Identifier:
keyid:0C:A5:19:90:CE:0C:89:F0:D2:10:60:9E:67:E9:E8:07:56:5C:13:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKUZkM4MifDSEGCeZ-noB1ZcEx8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/f630a8-7179-4005-85ef-9b6db1e72088/1/DKUZkM4MifDSEGCeZ-noB1ZcEx8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:7b:80:a1:76:4d:8e:92:2e:2c:7b:93:22:98:9c:bb:18:60:
b3:08:ef:12:67:64:54:17:6f:81:ab:d6:1b:b0:ea:0f:4c:a7:
66:d0:69:cf:57:37:c4:2b:aa:94:5a:be:fe:6b:01:02:b1:8c:
3c:55:b1:cb:3c:e1:60:8e:a4:f7:f6:0f:44:d5:60:18:fd:25:
48:82:17:d6:ca:a5:ba:29:01:93:23:85:0c:6b:a1:bc:70:c4:
52:5f:f4:7d:dd:0d:c0:ae:93:01:ab:4b:3a:16:d9:d9:36:67:
ed:b1:62:9b:a8:c5:d7:1d:7b:52:15:1d:bb:d3:8f:e8:ea:78:
86:44:30:0f:ee:04:7f:45:2a:96:88:e3:14:d6:f2:dc:28:32:
22:e6:39:34:32:db:71:d7:11:90:12:be:bf:97:73:de:be:ad:
d6:41:81:5f:6f:69:40:eb:82:bb:94:7a:cb:67:3e:48:1e:ec:
f4:49:a5:b9:0a:97:62:ee:08:e5:9a:af:05:b6:d2:15:fb:8a:
87:11:6d:1f:1a:68:34:bf:14:ac:86:34:75:57:93:5a:81:2d:
b9:a4:5a:36:04:12:0e:6d:39:b8:ec:83:05:19:54:93:f8:dc:
00:0a:13:1e:bb:e6:b4:69:4b:c1:77:55:72:0f:5e:7c:f1:cc:
b4:c7:56:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:39:48 2026 by rpki-client