Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: kAZx2T85L137xt9a4izZVp2+ZquDHWWZIjlABbwc0Kg=
Subject key identifier: FB:EE:35:E8:56:AC:38:34:21:58:BE:C7:A8:25:C7:68:EB:1F:66:D1
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 01A0CF35FCC6F5BF2ECFEFD7654576F539B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 120A
Signing time: Wed 23 Sep 2026 17:00:16 +0000
Manifest this update: Wed 23 Sep 2026 17:00:16 +0000
Manifest next update: Thu 24 Sep 2026 17:00:16 +0000
Files and hashes: 1: Jf9n1jU0iNZqHiPFX0khcO8APqY.asa (hash: HmCAO4LPXkIwoXgwKfzir3g7UxPnF0W1mI++hpZZWhw=)
2: OWX2u3h86crIqlZrJEDgTq1vnqE.roa (hash: LsGVcbsq1OthlSGdFhoXpBIhd+P4m0nMhxD/QuTqmCw=)
3: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: KE4+me7KOG8g8nVl/uGJ1m5NpK/IJI9iygqcFzi7icY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:35:fc:c6:f5:bf:2e:cf:ef:d7:65:45:76:f5:39:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Sep 23 17:00:16 2026 GMT
Not After : Sep 24 17:00:16 2026 GMT
Subject: CN=fbee35e856ac38342158bec7a825c768eb1f66d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:94:02:0f:38:ef:b5:54:ba:4b:56:64:67:3c:
ae:a1:01:20:20:37:e6:84:11:fe:32:f5:d3:27:71:
5f:8c:60:55:c3:23:ed:a8:c6:b1:ea:34:39:50:f8:
68:d6:c6:b1:04:b4:fa:0b:12:cb:b3:1f:d9:5f:58:
80:39:01:90:9f:7a:95:dc:d5:b7:2b:c5:9e:a3:28:
02:74:c7:98:06:46:9f:5a:96:30:f5:e7:00:fb:7c:
08:28:ef:2b:61:8a:2b:d3:e1:40:99:b0:50:58:06:
26:e8:5c:79:a2:e6:28:8a:74:10:12:5f:7b:3e:40:
7c:cb:2d:11:64:3a:06:7d:fd:de:46:76:54:cf:eb:
12:27:50:e0:24:28:ff:f6:67:8e:54:a7:73:ae:3f:
97:a8:47:3d:53:6d:6a:26:86:b4:90:66:d7:74:bc:
da:6d:60:5a:ae:04:67:2b:86:bd:04:a4:55:77:21:
f5:a7:f9:ce:c3:94:34:49:ca:0f:4a:c4:f5:2a:17:
f2:49:14:bb:b8:db:ee:bc:88:40:cc:f4:44:e5:3e:
b8:53:e4:a0:79:97:ea:a7:99:14:44:73:95:17:0f:
36:9d:ef:78:ad:b8:67:f6:96:02:a7:91:2d:15:90:
b7:36:10:2c:fe:fb:cf:26:d1:98:09:16:f2:c7:3a:
49:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EE:35:E8:56:AC:38:34:21:58:BE:C7:A8:25:C7:68:EB:1F:66:D1
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:46:45:e5:bc:8b:b9:48:df:f8:4e:46:5e:a7:5f:58:37:86:
47:92:11:01:02:f3:b8:d9:ef:61:8a:e8:29:4d:92:1e:55:21:
7a:c8:e5:b2:e5:e3:37:64:bb:20:fd:de:22:b7:1e:45:16:40:
73:cf:1f:4a:7c:bb:f3:62:d6:b6:98:31:1c:f1:73:ee:eb:07:
b4:ad:d8:0f:0a:83:58:56:80:54:88:8b:2c:c2:23:e4:cf:88:
1d:5d:16:0b:3b:ad:6a:b8:90:95:a0:76:7c:21:17:63:53:b3:
51:a2:55:7b:54:31:39:d7:ef:de:5d:d3:e3:9a:35:86:7c:83:
68:40:b6:73:1f:68:b0:42:19:c2:bb:40:d2:41:33:fb:03:71:
25:b6:fa:e2:db:e6:21:f0:df:fe:94:83:ea:6a:85:94:d7:1a:
c4:fa:bf:47:ae:66:b4:09:7e:56:35:96:eb:ca:71:6d:e9:d5:
0d:cf:a1:48:88:54:88:46:d2:f9:6d:b3:5d:0d:83:63:d5:f6:
df:6c:b2:67:ff:ae:1d:fd:e7:3c:0d:6c:b1:1b:3e:3d:0a:d9:
2f:0b:0a:0d:eb:50:d8:8a:41:26:76:3c:33:f7:12:e7:87:27:
64:e5:06:88:8f:ef:8a:a9:a7:8d:f5:ea:d7:1b:3e:9c:df:4b:
8c:f6:06:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:06:40 2026 by rpki-client