Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json)
Hash identifier: mxl3zv42lWGLxCMHxsOci/mt9OikVP1yh5bahjzvI9A=
Subject key identifier: 42:84:D4:BB:5F:8E:7F:1A:E5:14:10:E5:29:8C:62:F5:F8:60:1F:74
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial: 019E1E6CB722A8572CEDAC293204A7E7CF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
Manifest number: 1907
Signing time: Tue 12 May 2026 23:01:41 +0000
Manifest this update: Tue 12 May 2026 23:01:41 +0000
Manifest next update: Wed 13 May 2026 23:01:41 +0000
Files and hashes: 1: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: 9q4LnJq5KEF30nQT4cB+B+LCBmOzurP86ZYsw+Ca/Yc=)
2: _Myr3fZN1tCVYld8vCIdG7V1e8k.roa (hash: UdvBEvfyvQ6h8H0q4zyZtW4WPV4vjg0onxiSmal+y2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:b7:22:a8:57:2c:ed:ac:29:32:04:a7:e7:cf:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Validity
Not Before: May 12 23:01:41 2026 GMT
Not After : May 13 23:01:41 2026 GMT
Subject: CN=4284d4bb5f8e7f1ae51410e5298c62f5f8601f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:16:80:fd:68:a6:f3:fe:57:38:82:ce:b9:
5c:87:3d:e6:0f:f5:51:01:88:c8:f9:6a:b6:73:ec:
1b:74:86:fd:2b:dd:ce:0d:5c:83:8f:6d:6c:89:fa:
cd:90:5c:f7:3b:58:a7:ab:d1:d8:29:6b:d3:10:fd:
ab:b7:9d:15:84:ea:39:12:46:bc:0b:ce:b3:0b:f4:
83:28:6b:e6:99:fd:3e:21:63:d4:d2:fe:3d:95:62:
6f:42:d7:98:94:9a:16:90:92:0b:b3:85:9c:2a:1a:
1a:4c:20:c2:76:80:77:37:f4:b3:17:ea:a1:05:e9:
46:88:64:ef:b1:60:cc:f4:f1:eb:9b:d4:86:79:94:
80:94:96:14:3e:61:91:1c:d3:cf:f5:a1:e4:66:44:
26:8f:39:92:f2:8b:f1:98:09:ff:8c:1d:08:14:c1:
d2:48:f3:35:4b:df:b9:ca:c0:e3:fb:94:60:de:4e:
46:8c:7c:65:20:68:2f:fa:a1:6d:07:60:c9:f4:ea:
7a:b5:9d:b0:9a:4f:5e:5a:f8:c7:f3:c5:42:1c:fb:
f2:d6:9e:08:b5:34:05:b3:0f:c2:9f:0a:da:d9:48:
19:9b:a8:58:8e:d9:81:f6:7d:58:e0:93:09:eb:66:
54:de:bf:a6:50:24:70:72:79:6b:da:79:a9:bc:0a:
c5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:84:D4:BB:5F:8E:7F:1A:E5:14:10:E5:29:8C:62:F5:F8:60:1F:74
X509v3 Authority Key Identifier:
keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:38:a1:ee:c3:cf:5b:04:4e:5a:62:52:c6:5c:ac:49:9b:8c:
d4:0c:b4:21:b9:87:04:8a:17:da:02:cc:d2:0b:9d:8c:ff:d5:
37:fb:ee:67:9d:0a:6f:f3:c0:44:28:71:7d:b6:97:1b:e4:27:
39:91:09:37:a2:51:d2:78:0f:99:21:96:17:28:ed:65:40:5f:
5d:40:61:22:52:df:d3:e1:66:eb:e7:18:27:68:64:cb:72:74:
e2:6c:83:ec:2c:76:66:a1:24:ef:85:7f:ab:ed:b0:39:0d:c7:
af:b0:dd:ac:28:6b:80:99:f6:94:11:28:fd:25:93:d6:70:8d:
a6:c4:ff:a7:31:bb:34:21:24:73:76:c6:fd:c8:5e:e2:d0:06:
ee:aa:27:c9:7c:06:c5:95:f1:f7:e6:c8:bb:bd:a9:85:99:78:
0b:3c:66:39:37:2c:27:fa:e9:9c:31:50:35:c6:c7:3d:d8:25:
4f:fd:92:fc:37:ad:db:b7:92:bb:f7:30:d2:b0:71:36:bc:a2:
21:e6:3e:85:0e:66:34:7b:e8:c0:49:ed:a5:6b:1b:42:c3:f3:
11:b6:2c:fc:86:56:fd:f2:0d:fe:6a:09:43:4c:29:ae:74:97:
29:72:44:23:c8:f6:0d:85:ec:62:79:1f:46:dd:ca:0f:f3:10:
ab:ed:28:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:44 2026 by rpki-client