Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
File: dcqtndM2-CAZCTaTYHy57S-ZDXE.mft (raw, json)
Hash identifier: W7UWXDQlyW4dGtxKQ5F1Us3eCqhQUzSs7VktxUzofIg=
Subject key identifier: AA:F4:28:14:2C:3D:91:3E:21:19:91:B9:EF:B5:82:ED:2F:CB:CB:6A
Authority key identifier: 75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71
Certificate issuer: /CN=75caad9dd336f82019093693607cb9ed2f990d71
Certificate serial: 01A0D3EFBB35D996079908224A96323A73A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:01:38 +0000
Manifest this update: Thu 24 Sep 2026 15:01:38 +0000
Manifest next update: Fri 25 Sep 2026 15:01:38 +0000
Files and hashes: 1: dcqtndM2-CAZCTaTYHy57S-ZDXE.crl (hash: FMVamPcZuFJr5rBbBV9kgzqCgjo5aGuf9eDzww7GrwE=)
2: wDVVsACpsiR5l1cTOi-d9O7OwNM.roa (hash: brl42J6QrRGQ7zMiwW/xpTyzUuzmwf2YtA561oH5iPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:bb:35:d9:96:07:99:08:22:4a:96:32:3a:73:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caad9dd336f82019093693607cb9ed2f990d71
Validity
Not Before: Sep 24 15:01:38 2026 GMT
Not After : Sep 25 15:01:38 2026 GMT
Subject: CN=aaf428142c3d913e211991b9efb582ed2fcbcb6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:69:88:2a:1c:79:5c:87:e0:58:68:16:1d:
1c:9f:c6:c8:29:4b:83:ef:43:43:75:81:f8:a6:ca:
b8:d2:d9:2c:0d:b1:fb:d7:a4:25:d2:1f:34:57:b2:
19:ab:cb:96:0c:fc:5a:ed:10:50:f0:71:28:88:63:
a0:67:71:79:0a:f5:3c:13:02:6c:fd:35:7e:38:f8:
df:49:93:c2:90:29:66:c8:3a:ba:c2:41:21:59:6b:
fd:3f:41:61:ff:f0:12:78:c1:69:1d:59:2a:24:dd:
22:ac:e3:86:fa:19:b6:c8:14:86:34:93:07:a8:9a:
3d:38:e3:79:d2:0c:ba:f1:23:8e:58:90:30:cc:56:
2e:d8:c7:77:80:a4:6d:ab:e1:43:0f:1e:10:a0:1c:
78:91:47:d9:ff:02:c8:31:e2:91:a4:32:e0:b8:a9:
b9:d0:a9:e2:62:2d:4f:23:dd:0b:55:d7:8e:83:9c:
e0:53:a6:f2:99:a0:82:22:53:fc:b4:fc:04:f8:90:
b8:a7:1e:53:fe:60:fc:63:19:4d:07:61:7e:7c:9b:
85:35:fc:35:6c:89:53:5a:34:6a:90:74:df:fd:2f:
03:71:66:ed:0b:dc:df:aa:22:36:4c:14:ec:f8:8e:
ad:b7:10:3d:b3:63:06:3c:99:71:43:66:c4:c1:76:
cd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F4:28:14:2C:3D:91:3E:21:19:91:B9:EF:B5:82:ED:2F:CB:CB:6A
X509v3 Authority Key Identifier:
keyid:75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c5:47:f1:e3:1d:53:29:fe:e2:c3:cf:10:33:52:3f:8b:69:
80:f4:cb:ff:9b:70:75:1d:ff:19:5c:52:53:a9:40:26:e7:cf:
e3:d8:74:8e:2e:93:97:22:70:4b:3d:c4:f1:4b:59:eb:83:ad:
cd:40:3e:04:d4:a3:37:61:67:c4:0d:42:ab:4b:cd:90:e6:98:
16:75:b3:42:1b:fe:0a:56:49:d4:6c:7d:f5:8d:f3:90:2d:4c:
ac:aa:d2:fb:40:84:e5:5c:4c:06:07:19:c6:a5:6b:5b:2a:ae:
8f:8a:03:ef:70:71:cc:63:34:78:33:49:a3:31:5d:07:03:5c:
35:4c:e5:be:96:54:87:c2:56:af:ca:b6:be:eb:bb:5e:e4:42:
00:da:a6:9c:26:10:aa:49:f2:b8:cc:8a:f5:a0:5d:c9:1b:05:
12:57:9f:90:e5:ca:a0:33:cd:83:1c:b5:ee:5f:94:e0:37:a2:
c0:b2:56:09:0a:8d:2d:b1:8e:25:80:6a:85:84:df:25:5b:cf:
54:46:b8:2c:dc:08:90:44:58:6e:c7:9f:b5:14:78:d1:0d:ec:
b0:f5:28:02:f9:fd:7b:87:14:14:db:3a:fc:1f:66:c4:34:b4:
68:da:ce:06:c3:b2:d9:64:d9:e1:41:b8:22:22:bb:84:78:ed:
d5:9d:b8:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:30:27 2026 by rpki-client