Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: vaPCiiOt3faG4OP958QiKX6CV0EIJoyg3Bk+cxAJv8M=
Subject key identifier: D7:6A:46:B5:AA:CD:2C:73:AB:E7:AA:80:DB:7E:FD:1D:6A:12:CC:58
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 019F91354AF7F2AB7D1C4A67494128ACE08E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 19CE
Signing time: Thu 23 Jul 2026 23:00:16 +0000
Manifest this update: Thu 23 Jul 2026 23:00:16 +0000
Manifest next update: Fri 24 Jul 2026 23:00:16 +0000
Files and hashes: 1: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: sYE1Mjjz+xuRzZjbpDU1ltblp81tNAS4BUm6awfFnnQ=)
2: f-oFGYgAScvKIY1myYftcDiH90Y.roa (hash: jXYW4bNPX8ymp0HBTNVmMzodvWsb+eQz9bU87veKdFM=)
3: lBMdn2iQdHUL-cwEEQDm3tFBaok.roa (hash: 92N+I3r+uRw8V9HIiYjj1Tx/aQGHG9DB0so6vrEW//w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:4a:f7:f2:ab:7d:1c:4a:67:49:41:28:ac:e0:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Jul 23 23:00:16 2026 GMT
Not After : Jul 24 23:00:16 2026 GMT
Subject: CN=d76a46b5aacd2c73abe7aa80db7efd1d6a12cc58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:df:85:b9:b5:dd:36:fb:97:1b:95:aa:d9:1b:
21:30:41:98:12:89:55:f4:dd:49:32:32:af:c0:b8:
21:90:76:ca:e9:f7:e5:92:41:c1:25:11:0f:27:d4:
31:1d:37:e8:a1:14:ab:0d:97:bd:72:0b:00:bc:06:
32:bb:e9:ff:44:59:f0:a2:b6:ff:83:d6:b5:ed:15:
f0:54:89:7b:5d:0b:61:10:66:33:c1:23:7a:e3:1e:
3c:ca:01:fb:23:f4:61:67:63:6b:10:bf:f0:b6:70:
1c:ce:85:4f:08:20:27:d0:17:3b:84:fd:02:bd:ae:
de:7f:a0:fb:9b:9f:08:eb:c1:8d:bb:bb:af:1d:0b:
c7:0e:e2:f7:1e:37:e9:43:05:e5:6a:15:74:96:ad:
c7:e8:34:75:4a:75:83:20:24:3d:12:6d:3e:79:90:
bd:60:a9:5f:e6:6f:96:34:d7:58:0d:ad:16:49:27:
6f:0b:38:51:31:cc:14:b2:49:65:d1:63:0f:9f:57:
28:38:24:ce:9d:87:0f:27:47:fd:1d:6e:c2:3e:07:
ba:49:92:cc:07:05:63:96:ef:a4:c6:db:11:1c:7b:
88:9f:8a:4f:87:5b:ae:f6:7f:c3:9f:b8:47:fa:21:
f1:86:02:80:ef:ce:c5:ef:70:fa:1c:57:10:1a:2f:
d6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:6A:46:B5:AA:CD:2C:73:AB:E7:AA:80:DB:7E:FD:1D:6A:12:CC:58
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:fa:78:78:33:cb:8a:b3:f6:a5:58:83:90:d1:c0:70:32:1d:
40:7d:22:fc:20:74:62:54:49:00:36:8c:86:a9:88:b4:f0:72:
62:7d:41:8f:5f:8a:03:64:7c:46:96:f1:7b:ad:ef:1c:95:72:
10:9f:79:63:c3:c5:a5:18:dc:c3:e7:97:06:5a:1d:34:cf:3e:
3d:a7:37:8c:48:be:ac:01:fb:fe:04:7d:d4:46:33:e6:fe:82:
6b:85:ee:83:88:6f:fe:46:ce:51:30:a9:fe:31:04:c7:47:64:
eb:67:d0:55:a7:03:5e:09:b6:b1:1a:d7:ad:26:02:e9:2c:67:
53:28:23:95:a0:28:69:72:b2:b9:b4:7d:8a:34:0d:65:bf:53:
3e:9e:5f:3a:bb:40:70:3c:b5:3f:75:5d:bb:75:2f:e8:2c:13:
fb:91:4d:1b:1b:e7:6f:03:6d:c4:20:64:64:d9:9d:76:27:18:
65:64:40:17:1d:ef:73:a3:f1:a4:8d:dc:c7:04:6f:7d:d1:8d:
35:f1:45:dc:5b:f8:3a:80:6a:70:f7:b9:ee:d1:b5:d2:e9:0c:
a6:bf:59:62:e0:b7:99:c0:e3:36:2c:1e:6e:82:85:62:92:31:
6e:1f:71:ed:7a:02:2a:a2:73:fd:48:21:14:d8:b6:72:fc:1f:
32:57:e4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:03 2026 by rpki-client