Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
File: DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft (raw, json)
Hash identifier: IvMxm+ahs+VlqbYnyV0EP8gdkGbeVDOYHkfzi34GcQM=
Subject key identifier: 25:AD:EE:62:25:3A:CB:BD:48:3E:E3:1C:30:75:D2:E5:D8:59:81:36
Authority key identifier: 0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
Certificate issuer: /CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Certificate serial: 01A0EAE52620B0675C8F8B37D0759691DEA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
Manifest number: 1A7A
Signing time: Tue 29 Sep 2026 02:01:21 +0000
Manifest this update: Tue 29 Sep 2026 02:01:21 +0000
Manifest next update: Wed 30 Sep 2026 02:01:21 +0000
Files and hashes: 1: DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl (hash: LkBTNCVtkC9px4E/1MAkxBa9myw0coVkQj1qPAzKARw=)
2: _Myr3fZN1tCVYld8vCIdG7V1e8k.roa (hash: UdvBEvfyvQ6h8H0q4zyZtW4WPV4vjg0onxiSmal+y2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e5:26:20:b0:67:5c:8f:8b:37:d0:75:96:91:de:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca4bb69b3f56805140efae243e4dd4b36c0dd1b
Validity
Not Before: Sep 29 02:01:21 2026 GMT
Not After : Sep 30 02:01:21 2026 GMT
Subject: CN=25adee62253acbbd483ee31c3075d2e5d8598136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:68:4f:ca:46:9e:2c:d4:dc:6d:13:f5:b5:e1:
ad:9c:dc:1b:f1:92:08:1f:ee:10:30:03:cf:aa:40:
82:18:a4:6d:69:03:b3:dd:7b:69:16:65:99:88:17:
e4:29:3c:ec:eb:b7:a8:36:da:f9:ac:be:9f:9d:33:
b8:48:85:a3:aa:45:bd:74:c7:47:87:31:8c:48:d4:
eb:6e:b0:5c:21:1b:6a:7f:4f:c0:59:28:20:f0:05:
8f:8c:48:76:84:52:32:88:e5:d8:00:d0:62:b0:41:
49:da:78:41:77:67:f5:21:d6:9d:a9:19:be:43:aa:
6d:31:3c:d9:cc:51:1f:3f:db:1c:14:70:6d:5b:a3:
fa:ea:d0:df:f6:4c:f4:52:20:2b:45:a5:82:5f:05:
41:cd:c1:20:e2:bd:12:7f:23:fc:10:d8:30:74:48:
5e:61:58:1b:3d:4c:68:0a:ca:23:6f:ed:04:58:3c:
07:43:00:65:31:8f:1f:9d:6e:b8:2d:60:3d:dc:5d:
6f:e6:4d:a6:ea:84:c4:40:2e:e4:d4:9e:5a:c0:dd:
68:8c:41:5a:59:15:88:88:38:63:f5:92:82:f4:71:
dd:15:fb:37:6a:c4:9c:2c:14:f6:be:fc:2d:0e:ac:
18:1b:14:e8:fa:c1:73:17:16:64:94:54:0b:44:e0:
6a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AD:EE:62:25:3A:CB:BD:48:3E:E3:1C:30:75:D2:E5:D8:59:81:36
X509v3 Authority Key Identifier:
keyid:0C:A4:BB:69:B3:F5:68:05:14:0E:FA:E2:43:E4:DD:4B:36:C0:DD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKS7abP1aAUUDvriQ-TdSzbA3Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/686cfd-a02c-4073-99dd-d7f45e0a7736/1/DKS7abP1aAUUDvriQ-TdSzbA3Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c1:6f:55:e9:02:63:9a:ef:d0:c8:c3:72:51:18:7e:f8:bd:
05:a1:b9:e5:de:e7:eb:c2:b8:87:ca:cc:0e:98:92:e4:74:35:
74:ff:11:eb:7e:7a:90:78:0f:51:38:60:d4:28:9a:b4:81:a8:
c7:88:1f:75:a3:7f:ae:b2:73:f6:d5:d0:bd:1d:47:a4:5e:d6:
bd:fe:8e:21:fe:c7:40:22:d7:1e:d5:bb:d8:3b:a9:1c:49:da:
9d:77:28:25:d1:15:f5:97:5c:ed:42:33:78:4e:dd:63:be:d9:
44:57:f6:bf:0a:a7:75:6c:8a:38:43:2a:4f:f9:dd:ff:0f:02:
dc:4e:c3:49:50:90:6c:20:4f:5e:09:8c:ea:67:3e:b1:43:4d:
27:0e:14:71:d8:2e:81:cf:bc:99:37:4b:ed:64:38:20:c2:b0:
99:99:d7:eb:08:65:67:05:25:e4:71:8f:1e:ed:67:e4:45:ad:
d8:80:24:10:c1:ac:76:2f:5d:e6:5d:b1:96:ad:c0:f3:72:11:
f0:b6:b2:d2:53:86:13:01:cc:07:e4:e8:ab:97:b0:4d:51:83:
1a:56:5d:ad:9d:71:3a:c0:3b:5f:65:5f:fd:03:5b:cf:8b:d3:
10:e6:ce:d2:a9:34:05:86:4e:3e:be:23:7d:e6:b5:b2:16:81:
e9:ef:7e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:13:36 2026 by rpki-client