Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
File: DKcf-Varj49-f1nUCax696KwqGQ.mft (raw, json)
Hash identifier: oQBCEEoEPorVrGmKH6M2mOHxTRHFCnZPyrUwVyfqYRk=
Subject key identifier: 9C:1E:F1:C3:2F:90:9D:7D:2C:8D:F5:E8:79:91:1A:56:FD:7B:B1:6E
Authority key identifier: 0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
Certificate issuer: /CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Certificate serial: 019E1C7E0FCD18E7D282B1FB83D4AE7F6094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 14:01:24 +0000
Manifest this update: Tue 12 May 2026 14:01:24 +0000
Manifest next update: Wed 13 May 2026 14:01:24 +0000
Files and hashes: 1: DKcf-Varj49-f1nUCax696KwqGQ.crl (hash: q9edildtAe0UG7y+sTEFCjyTtZjKhVeviEBFnZAh2NI=)
2: WMPWbERH9P2n3niPjWrFvgxXnog.roa (hash: wqaHkXlpMy/p6v+U45zXhhU2rWewv6uSFHA6UjESriQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:7e:0f:cd:18:e7:d2:82:b1:fb:83:d4:ae:7f:60:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ca71ff956ab8f8f7e7f59d409ac7af7a2b0a864
Validity
Not Before: May 12 14:01:24 2026 GMT
Not After : May 13 14:01:24 2026 GMT
Subject: CN=9c1ef1c32f909d7d2c8df5e879911a56fd7bb16e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:04:40:4c:ef:da:c7:31:8e:ff:3f:df:21:
2d:4e:65:ad:c9:7b:e6:36:20:0c:7b:62:ec:42:b8:
c3:52:c9:0b:43:16:a3:c0:3f:99:56:d7:64:d3:30:
0d:c9:46:76:9e:f5:5c:d9:46:5d:ff:5b:2d:c3:7b:
34:c1:6f:c6:14:02:fa:af:d2:f0:16:c4:99:76:da:
35:08:2c:f4:5a:6a:b4:04:e3:3a:0f:e3:3a:e1:25:
66:c3:33:2b:4f:a5:38:01:46:51:c1:fe:d8:24:0e:
47:e8:a5:b0:6e:7d:44:e5:97:de:aa:1a:51:7a:1e:
d7:95:9e:d5:35:d0:07:32:a7:73:1c:fa:fa:ce:c2:
a6:c3:07:67:64:95:78:bc:b3:2a:c5:a0:d3:12:d7:
7e:22:3d:e5:cb:84:32:78:0b:1a:db:61:ce:b4:ed:
c2:45:33:9f:c4:4b:1a:5f:35:4d:05:41:08:68:ee:
f4:e6:25:5a:d8:00:f9:eb:00:a6:a8:82:ab:58:dc:
31:d2:e3:79:d7:68:62:04:ad:0b:01:bf:af:b0:9d:
d8:f8:b8:69:c9:b0:29:e7:74:fe:60:b1:f6:98:e2:
ac:0e:32:4d:02:f2:ff:07:e2:d9:c3:fb:7a:1a:d4:
76:d8:95:18:c5:18:4c:31:02:e7:d4:0b:f9:ba:5f:
e0:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:1E:F1:C3:2F:90:9D:7D:2C:8D:F5:E8:79:91:1A:56:FD:7B:B1:6E
X509v3 Authority Key Identifier:
keyid:0C:A7:1F:F9:56:AB:8F:8F:7E:7F:59:D4:09:AC:7A:F7:A2:B0:A8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DKcf-Varj49-f1nUCax696KwqGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6eb85e-bbb0-4da7-a4e0-d2ea6004d553/1/DKcf-Varj49-f1nUCax696KwqGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:4c:1f:f5:b0:21:1f:2e:77:5c:43:d3:16:cf:7f:19:68:6a:
bc:b0:6b:12:59:e0:4f:ba:2f:00:1c:5a:24:c9:7d:b0:f2:74:
67:fd:d9:c0:4b:78:c2:9e:12:c1:a8:d9:fc:3f:c3:b7:86:61:
d1:1b:76:cf:68:9e:fe:e8:58:8d:29:7b:05:38:74:86:64:b2:
27:3a:c7:47:21:a8:7e:d8:69:7e:9d:64:2a:8d:74:27:57:56:
bd:97:42:67:29:3b:b5:ef:22:32:b5:75:19:da:c2:39:ea:e7:
5b:c4:2e:c1:b6:60:51:c2:9a:41:24:2b:b8:14:6c:7f:95:52:
87:dc:98:a3:58:8a:bb:97:b4:b2:68:5c:e9:9a:13:70:96:c5:
dd:0b:1c:b2:de:b6:f7:47:58:24:d3:32:f1:a7:95:fc:78:e0:
12:52:26:48:3c:59:1b:f5:8a:59:81:2f:81:f4:83:13:5c:77:
d6:e2:05:30:d6:64:b4:67:3b:5b:99:fc:73:d2:8c:73:52:26:
22:e9:19:12:04:41:5c:e7:9e:8f:3e:b3:3a:ae:5d:2a:ac:e4:
b1:a2:95:0f:40:f8:6c:a2:e1:28:dd:98:21:d4:86:b6:ae:60:
25:f5:bb:b2:c1:ce:f6:e1:1b:2f:81:87:5f:8b:3b:ed:b9:44:
60:b5:93:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:43:15 2026 by rpki-client