Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
File: dkcGam8eUnJLJzFHdNk2k8FV8Og.mft (raw, json)
Hash identifier: 44XIa9S7frv9p/gLofsp2yKpdm5YsCapx1gDAwf3ypI=
Subject key identifier: 12:B4:7C:06:26:6C:BA:55:AE:E2:75:E4:5F:54:FB:AC:3E:02:78:97
Authority key identifier: 76:47:06:6A:6F:1E:52:72:4B:27:31:47:74:D9:36:93:C1:55:F0:E8
Certificate issuer: /CN=7647066a6f1e52724b27314774d93693c155f0e8
Certificate serial: 01A0E92ED6704AD0CAF8E47B14A3D28BBE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
Manifest number: F2
Signing time: Mon 28 Sep 2026 18:02:35 +0000
Manifest this update: Mon 28 Sep 2026 18:02:35 +0000
Manifest next update: Tue 29 Sep 2026 18:02:35 +0000
Files and hashes: 1: dkcGam8eUnJLJzFHdNk2k8FV8Og.crl (hash: XULdHFMJvoeLcIC7gY800o4uG2ypwruzAA6f6+eJ0Qc=)
2: i9Nq0--gwc6aMhEBRcW9umVjIDg.asa (hash: +TjLueIMBfVDAHW/6ohVxjiAuWPC/TrJyQ1e+Bkvo8o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:2e:d6:70:4a:d0:ca:f8:e4:7b:14:a3:d2:8b:be:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7647066a6f1e52724b27314774d93693c155f0e8
Validity
Not Before: Sep 28 18:02:35 2026 GMT
Not After : Sep 29 18:02:35 2026 GMT
Subject: CN=12b47c06266cba55aee275e45f54fbac3e027897
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dd:58:7a:0d:a2:1b:20:d6:aa:fb:a5:4d:99:
e5:f8:9c:a4:b9:b0:1a:2c:3d:b7:cd:cd:83:cc:ef:
2e:5a:79:f9:9f:46:7a:a2:ea:58:43:1c:e1:02:73:
8e:30:2e:ee:fa:82:fb:28:1f:74:db:1d:c0:88:06:
e7:39:d9:ee:8a:86:53:f2:b6:9c:d3:f6:82:2d:a6:
3c:e4:6b:9b:86:55:91:9d:53:19:12:a1:cc:89:a8:
88:8b:ce:b1:8f:f7:f8:21:a2:8b:bd:9a:4f:b9:c9:
d5:9c:92:86:19:60:e2:38:87:86:12:85:93:98:da:
8f:d2:d5:bc:42:54:63:33:89:98:6a:bf:19:d6:ef:
1d:c2:57:5f:d9:c8:91:a9:a4:cb:67:7d:2d:90:03:
e7:22:49:d5:cb:32:42:40:45:a0:5d:a3:ae:29:8f:
e3:fd:bc:3e:94:ff:d3:6f:3c:e0:74:6f:75:28:c4:
af:98:7d:21:0a:3d:18:32:6a:33:a5:24:af:4f:c1:
36:23:f1:2c:6c:b4:b1:e8:83:44:e9:5c:9b:a9:84:
d4:29:42:d8:c0:2e:cb:ab:63:96:31:5c:56:41:f8:
7a:60:cb:04:a5:ae:8f:f4:04:2c:13:56:9b:89:14:
d5:c5:5f:14:01:3f:22:b9:e1:55:fb:23:0f:60:d8:
fb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B4:7C:06:26:6C:BA:55:AE:E2:75:E4:5F:54:FB:AC:3E:02:78:97
X509v3 Authority Key Identifier:
keyid:76:47:06:6A:6F:1E:52:72:4B:27:31:47:74:D9:36:93:C1:55:F0:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dkcGam8eUnJLJzFHdNk2k8FV8Og.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/1e29fa-670f-4476-b6e9-1b6eda78184c/1/dkcGam8eUnJLJzFHdNk2k8FV8Og.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:e2:63:c5:e0:d4:b5:cb:77:5a:9f:fe:65:bf:fa:ac:bd:29:
02:37:08:9d:a8:91:fc:20:a0:6c:b6:dd:2a:40:ec:97:cc:5d:
0f:20:9f:d4:b9:39:78:b6:0c:1f:32:d8:77:29:26:df:81:f0:
ef:7f:00:97:72:95:64:e5:41:0b:9e:aa:3d:dc:e3:3a:f0:2e:
9f:a5:36:a9:63:c2:c3:b5:3b:3e:ea:64:14:e1:0c:c9:ee:bc:
24:2d:f0:ce:63:f4:ca:fe:6a:2f:05:f9:1b:09:e0:50:1f:20:
14:13:fb:a9:51:8b:44:e4:7a:ef:dd:fd:9b:2a:91:0e:ff:03:
cb:19:30:57:30:d1:05:6c:ef:cd:10:06:8a:a1:38:bb:23:3e:
32:47:a0:86:c8:bf:0d:ed:48:b2:81:11:08:8c:21:6c:e3:f5:
1f:9c:25:8c:8e:64:b7:f9:6b:0b:49:9e:44:cc:67:4d:e2:45:
a6:95:50:2f:65:72:d6:9a:00:5e:36:66:b2:42:c8:46:16:2c:
63:63:f7:46:2f:a1:bb:c8:cf:5f:21:83:26:cd:7d:1f:92:ea:
1f:3c:ee:09:91:3b:17:74:a6:4c:9e:11:49:51:a6:39:0d:1c:
b2:d8:01:74:d8:e8:a2:c9:30:23:61:6b:6b:cd:f0:dc:09:f7:
7a:b8:c8:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:47:29 2026 by rpki-client