Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
File: dcqtndM2-CAZCTaTYHy57S-ZDXE.mft (raw, json)
Hash identifier: AlrWrCrjIFVA/uzDxuruWLRdGnl0jQCP2zeSI28xsDc=
Subject key identifier: EE:F9:10:0F:E4:26:91:87:53:FA:60:59:2E:8B:34:61:1D:B1:D1:31
Authority key identifier: 75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71
Certificate issuer: /CN=75caad9dd336f82019093693607cb9ed2f990d71
Certificate serial: 01A1DE7103DD5DD7D228AE55DA00685CABB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
Manifest number: 0171
Signing time: Sun 15 Nov 2026 09:01:50 +0000
Manifest this update: Sun 15 Nov 2026 09:01:50 +0000
Manifest next update: Mon 16 Nov 2026 09:01:50 +0000
Files and hashes: 1: dcqtndM2-CAZCTaTYHy57S-ZDXE.crl (hash: uJpQzOIcFlDNYUnMdkDrQGjJwPaNIgdPgCCCp16oMVw=)
2: wDVVsACpsiR5l1cTOi-d9O7OwNM.roa (hash: brl42J6QrRGQ7zMiwW/xpTyzUuzmwf2YtA561oH5iPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:71:03:dd:5d:d7:d2:28:ae:55:da:00:68:5c:ab:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75caad9dd336f82019093693607cb9ed2f990d71
Validity
Not Before: Nov 15 09:01:50 2026 GMT
Not After : Nov 16 09:01:50 2026 GMT
Subject: CN=eef9100fe426918753fa60592e8b34611db1d131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:ee:b3:8a:8f:5e:a1:4e:df:8e:dd:60:fc:
71:dd:ad:6e:04:6c:81:40:18:06:f4:37:b6:f0:34:
73:40:00:9d:dc:d7:85:02:d0:c8:eb:92:79:32:b5:
6f:da:6a:1f:39:0e:05:d7:55:cc:79:7d:2f:72:42:
5a:7d:11:f2:f1:20:7f:4b:e8:52:e3:40:ad:8b:3a:
ca:10:e7:76:10:6e:b4:84:e1:0a:17:04:cf:9a:e5:
ab:fc:aa:7e:a0:29:00:8b:63:dc:52:ac:cc:66:88:
32:ed:91:aa:5f:12:12:83:11:24:ec:33:84:39:43:
48:0f:0f:e7:2f:40:31:60:01:13:98:05:fc:84:20:
63:c6:97:20:ed:5c:2f:aa:2d:12:f4:b2:af:54:be:
9e:bf:bf:b9:d2:5b:cc:a7:e7:62:c2:20:2e:10:e7:
ab:bc:92:61:4b:a7:9b:fc:c9:61:f8:5f:6c:e8:53:
e4:28:bf:c5:27:b2:c7:e9:60:89:e7:81:b6:5f:f5:
0c:1d:5d:05:90:88:60:1d:cf:c2:dc:fe:bb:f8:31:
21:7e:19:1b:4a:4f:97:8e:9c:1b:a5:cc:2a:b7:af:
ee:a9:b4:5c:df:10:b8:4c:a8:7d:a0:55:99:b8:9d:
46:19:73:b4:58:71:dc:e1:69:72:7b:7f:b8:02:e0:
cc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:F9:10:0F:E4:26:91:87:53:FA:60:59:2E:8B:34:61:1D:B1:D1:31
X509v3 Authority Key Identifier:
keyid:75:CA:AD:9D:D3:36:F8:20:19:09:36:93:60:7C:B9:ED:2F:99:0D:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dcqtndM2-CAZCTaTYHy57S-ZDXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/0255ff-5305-4682-86e9-44ca22df7e14/1/dcqtndM2-CAZCTaTYHy57S-ZDXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:ca:67:b4:f6:3b:3d:4a:e1:13:0b:e5:40:0c:e3:12:0b:93:
1d:91:93:a3:52:f8:44:58:9c:2e:24:c1:a1:be:55:d2:8b:6d:
5a:bb:46:62:c4:63:99:39:2b:d2:34:22:9d:4e:51:46:8c:58:
2c:32:30:9a:14:e5:33:8e:57:bb:a3:44:26:d4:18:43:77:a1:
51:e0:14:f0:84:a0:86:cb:b3:eb:8d:92:62:e0:75:82:00:35:
98:ac:12:73:6c:2a:28:f0:8d:6b:11:ad:0c:f9:7c:80:05:37:
a0:cb:ab:10:34:a3:27:46:e4:90:5c:43:ef:39:8c:ae:19:2b:
52:62:cf:97:f5:9a:31:50:c6:5c:e5:d5:43:23:0b:5d:ed:72:
43:58:b4:0a:b3:2c:f7:53:4b:18:44:ba:66:25:86:23:44:97:
15:6d:04:79:32:c0:2b:70:e0:cb:74:2d:cf:03:45:a2:bf:7c:
47:b3:42:8e:da:75:0c:7e:67:d1:19:b7:e2:33:0b:aa:c6:a4:
23:8c:36:b2:69:7a:66:4a:4f:bf:67:d1:18:07:d7:0c:85:34:
63:80:14:cc:22:49:e0:cd:49:e5:4a:b5:c2:f9:3b:b6:c6:df:
4d:e6:c5:80:63:e2:4d:4e:9d:cf:f6:7e:65:9f:69:91:a9:6a:
19:0f:8f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 14:02:24 2026 by rpki-client