Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: ZpeiBAGxCyBiNU4i78yOJvgiHtByjqIehmPNikIk0Cs=
Subject key identifier: 59:14:94:90:4B:CB:C7:50:3D:55:0B:D9:04:30:F4:44:04:B3:D8:21
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019E1DC7A13F6C1049054EE0F5C36E8090FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 148A
Signing time: Tue 12 May 2026 20:01:22 +0000
Manifest this update: Tue 12 May 2026 20:01:22 +0000
Manifest next update: Wed 13 May 2026 20:01:22 +0000
Files and hashes: 1: ZigwfFDMTq9p3ufVtUZkAGSvOE8.roa (hash: hCk1IHYdcTCr5kX9GXFGk1z+A8RaamqdMUb21r4V0lQ=)
2: _yYYJqfXVlc0vfrgF-N_-ifqqrI.roa (hash: eQvPWCtkqfCKSoaOHzqPxJoyHgCrLUUV4Qj8AdQuoio=)
3: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: bmaQE5l0Q1KQ7pgWty+7EKKZHZ+quJ9PSX4c+aWxerA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:a1:3f:6c:10:49:05:4e:e0:f5:c3:6e:80:90:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: May 12 20:01:22 2026 GMT
Not After : May 13 20:01:22 2026 GMT
Subject: CN=591494904bcbc7503d550bd90430f44404b3d821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:00:c4:8e:a4:3e:16:90:6d:b8:bb:37:5d:74:
e8:96:31:c2:01:97:50:fa:f7:52:aa:a6:8c:70:51:
7b:6c:47:cc:7e:11:d8:03:12:6e:83:44:b2:4a:c3:
03:3f:6c:7f:dc:4a:e5:75:f8:25:ca:33:af:0b:19:
9c:8c:c2:4d:ab:d4:d8:71:04:92:39:c7:01:9b:be:
3f:4a:90:34:35:93:7f:a0:a3:38:0c:d6:51:30:63:
3f:6b:2c:c3:f6:19:1d:7b:74:b3:2a:96:43:f6:5b:
9e:59:45:a8:73:9e:19:98:e6:6a:66:b3:c0:1c:6a:
61:95:e1:45:b8:b8:42:ff:2d:3f:7a:bb:f9:84:11:
9b:28:86:74:bd:0a:32:5b:00:a1:9d:20:e3:08:2f:
c1:e1:0a:bb:ae:31:3a:55:1b:84:4b:3a:67:fa:4a:
29:55:65:4d:91:de:c9:77:cb:61:65:6b:cc:fe:09:
6a:4a:80:31:58:c6:c4:95:a8:c4:12:c1:f9:a1:90:
f1:25:b9:e1:8f:ef:25:4d:61:94:e1:72:a9:c8:89:
90:f6:d6:f0:79:cf:af:33:6b:b7:7d:d0:75:ce:9e:
b6:bb:b4:6a:69:e4:6a:ea:d6:d6:89:70:37:fa:a3:
2e:ff:f6:c0:6b:19:36:5d:0e:06:3c:bb:22:31:b5:
3c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:14:94:90:4B:CB:C7:50:3D:55:0B:D9:04:30:F4:44:04:B3:D8:21
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:96:8c:b8:67:ad:6d:a6:f0:b0:ea:04:2e:87:13:28:d9:55:
2c:79:b5:b5:bf:3a:b4:52:96:0c:74:2c:b3:a7:08:3e:5a:3c:
ad:ed:2b:cf:12:55:fd:15:b9:96:2d:af:98:80:c8:2a:b0:e1:
70:f9:5e:fe:ba:c1:ab:14:f7:73:5c:98:53:61:d4:20:93:8f:
18:3d:40:e1:58:5d:ff:8c:a1:10:6f:3b:72:5d:26:97:90:9a:
c8:df:41:61:f8:77:b6:92:ae:54:7e:b6:43:00:32:75:b7:49:
ec:ba:44:ff:26:3c:d2:00:07:22:c0:f1:fb:33:b3:b3:9c:61:
ea:aa:4a:97:37:de:12:fb:e8:99:99:46:25:8a:3c:bc:73:45:
73:48:b6:ba:18:f1:ed:c9:a6:64:fd:f7:93:ea:87:d2:01:e3:
39:b5:69:f9:bd:6d:28:7d:9a:31:7c:2b:0f:bc:66:19:44:e0:
a7:c4:11:c8:55:c2:c6:f4:b6:b4:a6:5e:f6:05:a2:58:f7:41:
2c:2d:1e:13:15:52:4d:b4:78:93:39:fb:2a:e7:f1:12:72:84:
5d:94:61:46:0b:b0:df:4a:b3:cc:b3:4d:ea:74:06:4c:04:2d:
22:57:a4:df:70:b8:fa:f9:eb:12:14:70:77:93:a2:4a:f9:0d:
1f:75:2b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:39:34 2026 by rpki-client