Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: y5wGLKBg+zZ/5JbqUBvaSugY+NlQzFGAvAgb1tV3s7E=
Subject key identifier: 48:C8:86:C0:23:9C:24:E4:F7:8A:BC:8D:AB:9E:DC:1C:BD:58:FE:6B
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 019D273AA22DA53F484BDAF8FB504E00466E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 188E
Signing time: Wed 25 Mar 2026 23:00:47 +0000
Manifest this update: Wed 25 Mar 2026 23:00:47 +0000
Manifest next update: Thu 26 Mar 2026 23:00:47 +0000
Files and hashes: 1: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: kmIk1qTMW/Vx4HFk4uG/BWSPnaHd1Ns9jOYIJ+r101U=)
2: f-oFGYgAScvKIY1myYftcDiH90Y.roa (hash: jXYW4bNPX8ymp0HBTNVmMzodvWsb+eQz9bU87veKdFM=)
3: lBMdn2iQdHUL-cwEEQDm3tFBaok.roa (hash: 92N+I3r+uRw8V9HIiYjj1Tx/aQGHG9DB0so6vrEW//w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a2:2d:a5:3f:48:4b:da:f8:fb:50:4e:00:46:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Mar 25 23:00:47 2026 GMT
Not After : Mar 26 23:00:47 2026 GMT
Subject: CN=48c886c0239c24e4f78abc8dab9edc1cbd58fe6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:8b:33:3d:1f:2c:fc:80:77:c0:a2:04:44:
c4:df:0b:0d:74:d7:e0:3e:88:77:84:b9:4e:74:14:
15:65:cc:a1:4a:6a:a8:fd:33:ea:eb:ac:ea:9f:49:
33:a5:fa:a6:5b:6a:90:91:77:e7:84:77:aa:fb:b9:
e1:31:a7:04:30:d2:45:d7:36:de:aa:a7:aa:08:f3:
ee:db:4e:ef:bd:5b:31:48:8c:25:87:e8:d4:4e:37:
dd:3e:73:0e:c2:ea:d5:2f:f0:a0:16:54:63:c6:4d:
52:b8:59:04:83:86:0a:fd:a5:47:54:5d:7f:de:1a:
4a:2d:2a:1b:6c:96:a2:9c:c5:6c:48:ab:cd:81:33:
31:6f:5e:46:12:ae:9a:ee:5b:5e:80:7e:73:5c:e8:
11:b6:24:94:26:59:a9:e2:a1:aa:67:38:90:71:0f:
c9:17:03:85:5b:be:e7:16:0e:30:0d:f3:79:f1:56:
12:01:43:b1:62:f8:0f:98:89:7f:f3:12:25:0d:f2:
1e:14:91:92:21:0e:ce:81:78:78:16:44:6a:4c:d0:
42:01:db:8d:73:ca:f5:76:67:9b:ce:44:73:12:06:
24:43:20:47:2b:d1:68:62:4f:2f:d9:ec:7e:49:48:
99:d4:02:5a:79:ce:59:40:6e:53:7f:15:0b:f7:7e:
b7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C8:86:C0:23:9C:24:E4:F7:8A:BC:8D:AB:9E:DC:1C:BD:58:FE:6B
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:c7:ac:83:c1:9a:11:07:da:82:bd:07:5b:71:86:1a:04:d8:
a6:66:29:43:93:02:ca:b3:62:63:b2:20:83:f7:92:c3:43:56:
ba:55:22:67:5e:9a:f1:fe:52:a5:45:e7:6d:99:38:1b:fb:f6:
17:4b:1b:f8:23:fd:38:7c:63:ea:8d:ed:81:61:e3:5c:26:55:
a1:77:24:f7:9b:97:c8:30:f6:e1:34:e0:44:35:03:94:82:6b:
bf:74:1f:0f:a8:49:66:e9:02:c6:c4:21:67:3d:69:97:a2:2a:
9c:e9:65:ce:ec:1d:ec:bd:1b:d1:d4:5f:10:73:cc:37:6f:67:
b7:65:cc:7a:71:23:aa:3d:48:14:88:be:59:08:00:bd:83:7c:
22:38:70:f7:9e:84:43:ed:e5:fc:d0:cf:49:5b:32:99:ed:ef:
a4:4e:11:7c:af:72:1e:89:04:f2:87:55:c8:ac:b7:1e:48:4a:
aa:13:a2:46:ee:36:81:5e:47:54:fa:ce:3f:00:43:17:8a:bb:
66:d9:3b:8c:26:82:33:f1:3b:14:50:5a:1f:e7:06:e1:e0:62:
44:04:8e:c6:30:e9:02:ff:55:29:c1:a1:58:02:de:51:0b:0e:
30:57:20:98:99:86:4c:d5:33:14:7a:49:b5:29:19:e5:37:6b:
2d:4a:e0:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nOqItpT9IS9r4+1BOAEZuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YWViYzE1NGE1NmM4MzAyNWNiZDg2NDFhOWFjMzE1Y2I1
NTFjMDYwHhcNMjYwMzI1MjMwMDQ3WhcNMjYwMzI2MjMwMDQ3WjAzMTEwLwYDVQQD
Eyg0OGM4ODZjMDIzOWMyNGU0Zjc4YWJjOGRhYjllZGMxY2JkNThmZTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKSLMz0fLPyAd8CiBETE3wsNdNfg
Poh3hLlOdBQVZcyhSmqo/TPq66zqn0kzpfqmW2qQkXfnhHeq+7nhMacEMNJF1zbe
qqeqCPPu207vvVsxSIwlh+jUTjfdPnMOwurVL/CgFlRjxk1SuFkEg4YK/aVHVF1/
3hpKLSobbJainMVsSKvNgTMxb15GEq6a7ltegH5zXOgRtiSUJlmp4qGqZziQcQ/J
FwOFW77nFg4wDfN58VYSAUOxYvgPmIl/8xIlDfIeFJGSIQ7OgXh4FkRqTNBCAduN
c8r1dmebzkRzEgYkQyBHK9FoYk8v2ex+SUiZ1AJaec5ZQG5TfxUL9363xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjIhsAjnCTk94q8jaue3By9WP5rMB8GA1UdIwQY
MBaAFHSuvBVKVsgwJcvYZBqawxXLVRwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQt
MDdhMWQ2NTU0OGJhLzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQtMDdhMWQ2NTU0OGJh
LzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0Mesg8Ga
EQfagr0HW3GGGgTYpmYpQ5MCyrNiY7Igg/eSw0NWulUiZ16a8f5SpUXnbZk4G/v2
F0sb+CP9OHxj6o3tgWHjXCZVoXck95uXyDD24TTgRDUDlIJrv3QfD6hJZukCxsQh
Zz1pl6IqnOllzuwd7L0b0dRfEHPMN29nt2XMenEjqj1IFIi+WQgAvYN8Ijhw956E
Q+3l/NDPSVsyme3vpE4RfK9yHokE8odVyKy3HkhKqhOiRu42gV5HVPrOPwBDF4q7
Ztk7jCaCM/E7FFBaH+cG4eBiRASOxjDpAv9VKcGhWALeUQsOMFcgmJmGTNUzFHpJ
tSkZ5TdrLUrgCw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:02:32 2026 by rpki-client