Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: nZOxm1vIp0Veg4p1IeH2amlTgtA8N802ACccq62oCZo=
Subject key identifier: 21:69:1C:43:4F:40:24:8B:0A:DE:49:C1:37:F9:E3:C1:F1:F8:5E:D2
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 01A0D1C9A83252FC4847F67048A2E6C6E77E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 1A74
Signing time: Thu 24 Sep 2026 05:00:48 +0000
Manifest this update: Thu 24 Sep 2026 05:00:48 +0000
Manifest next update: Fri 25 Sep 2026 05:00:48 +0000
Files and hashes: 1: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: l5FJDlcnwExb8uyhA/Sh8I3GiNdvS6hIVcKXOckopkY=)
2: f-oFGYgAScvKIY1myYftcDiH90Y.roa (hash: jXYW4bNPX8ymp0HBTNVmMzodvWsb+eQz9bU87veKdFM=)
3: lBMdn2iQdHUL-cwEEQDm3tFBaok.roa (hash: 92N+I3r+uRw8V9HIiYjj1Tx/aQGHG9DB0so6vrEW//w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d1:c9:a8:32:52:fc:48:47:f6:70:48:a2:e6:c6:e7:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Sep 24 05:00:48 2026 GMT
Not After : Sep 25 05:00:48 2026 GMT
Subject: CN=21691c434f40248b0ade49c137f9e3c1f1f85ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:95:95:da:f5:8d:df:93:2c:a3:bd:f3:63:
ec:26:5e:33:1f:05:92:71:3c:cf:ea:cf:8b:90:29:
82:46:c9:3c:1f:ba:3e:7d:9d:2c:3e:b3:83:6f:5f:
c0:03:56:23:e0:b6:66:0c:d9:03:09:f1:31:07:d0:
58:43:64:de:f1:6a:dd:04:06:80:d0:33:c1:16:c5:
27:e6:d5:91:91:80:9d:c3:36:57:1a:e8:e8:7a:03:
cc:e0:e4:bc:aa:56:f2:90:fe:4b:75:24:b8:91:86:
8a:e2:5e:6a:07:07:d5:02:97:7f:0d:12:a8:be:d8:
16:b4:d5:be:50:80:30:da:d9:2e:3d:be:5d:ce:11:
ea:2f:a1:00:a0:35:7d:38:03:c5:9c:4d:af:ec:97:
59:dd:67:d0:b9:34:f2:67:ed:4e:73:a7:f4:b4:5f:
63:f5:ef:60:67:7c:16:73:95:5c:a8:d7:84:9e:91:
d7:d1:99:d6:d0:e2:c5:b3:56:48:a9:d8:b3:96:ea:
a9:da:4f:e1:e5:dc:c2:c2:a3:c0:f9:41:c4:0a:7e:
b9:f5:61:d6:29:f9:5d:f3:05:65:09:11:6f:31:db:
90:0d:fc:f7:f4:08:c2:e8:85:f5:b7:4f:23:bb:46:
f0:fc:79:91:6d:4d:55:9f:dc:f9:f6:a2:29:b8:c6:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:69:1C:43:4F:40:24:8B:0A:DE:49:C1:37:F9:E3:C1:F1:F8:5E:D2
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:d7:76:03:af:48:8b:f3:94:db:ba:08:66:fb:db:8f:d5:67:
87:d5:22:51:f5:f2:09:44:d6:f0:54:d8:15:1e:51:92:00:f2:
d7:86:21:af:28:2b:38:c1:b6:2d:55:3a:63:e4:c4:ac:76:e4:
c1:b1:37:db:6f:18:26:82:dd:57:f8:a7:56:e4:cf:d9:08:2c:
ef:2b:f3:5f:46:39:1b:09:dc:db:18:4a:90:d4:43:9e:27:7c:
e9:89:6b:50:88:55:01:72:a1:dc:47:9e:06:9c:00:5b:99:b6:
67:0d:e0:61:45:4c:a9:ad:41:1d:43:96:c6:57:db:6b:87:02:
c1:ab:91:97:c1:c2:0b:58:63:99:29:60:c4:54:9c:87:96:b8:
3f:38:9d:1e:e2:21:6f:39:a6:ac:60:ca:2a:25:51:42:83:86:
13:24:ff:74:42:08:12:55:59:b8:b1:20:0c:25:41:a4:bb:d3:
14:fd:fb:33:13:1a:30:f7:74:b1:ee:d4:e6:85:8d:a0:2c:6a:
01:9d:40:72:80:e1:85:a9:1a:13:9a:80:cd:8e:5f:fa:61:ed:
57:d0:92:61:a8:da:13:3c:bc:95:b2:11:26:aa:5f:3e:69:5a:
ae:05:fb:4f:80:ef:3b:98:01:4a:21:d8:90:91:de:5e:14:3a:
68:ca:74:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 10:40:56 2026 by rpki-client