Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
File: do_utqkKhqzxGHHk5Xii6n7Cgdk.mft (raw, json)
Hash identifier: NotqFnBztX8M9k/ldblAevvpdlmUHNeyQh5QFogGYHM=
Subject key identifier: F9:DB:85:1F:1B:11:81:C7:19:48:76:E3:22:88:BF:F8:33:17:3B:27
Authority key identifier: 76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
Certificate issuer: /CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Certificate serial: 019F93FFE814FCB6818F538D2F6C315B481D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
Manifest number: 04D3
Signing time: Fri 24 Jul 2026 12:00:49 +0000
Manifest this update: Fri 24 Jul 2026 12:00:49 +0000
Manifest next update: Sat 25 Jul 2026 12:00:49 +0000
Files and hashes: 1: W-L9Z-et_hk_ElQE4x3JidtYxJ8.roa (hash: H+ygr+3swIT2aBvGxAFeyCAkH1uxCN9KnvrpdAVtIB8=)
2: do_utqkKhqzxGHHk5Xii6n7Cgdk.crl (hash: +57S5xhujJEwUmSaB7wJ40CiH4jkTDHqi+Ww5+wU/eA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:e8:14:fc:b6:81:8f:53:8d:2f:6c:31:5b:48:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Validity
Not Before: Jul 24 12:00:49 2026 GMT
Not After : Jul 25 12:00:49 2026 GMT
Subject: CN=f9db851f1b1181c7194876e32288bff833173b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:51:ef:c4:ba:81:b0:6c:0a:1c:45:5c:95:33:
63:14:35:da:ed:eb:25:60:cf:1c:3b:f4:88:27:97:
bd:50:61:46:15:e5:9a:2a:9f:f6:9b:74:a4:93:c0:
57:2a:45:1f:cc:b7:7e:45:07:8b:8d:78:9f:1e:5f:
82:8a:0f:16:a4:3b:81:85:cc:d9:9b:0b:39:40:18:
da:3f:47:23:f9:a0:9b:47:54:59:f5:8c:55:1c:68:
fa:30:3f:93:7f:50:78:13:61:08:dc:43:ee:eb:b5:
86:aa:06:a5:c8:83:97:81:c9:25:38:27:e8:66:2d:
d8:6f:74:63:b2:5a:bf:b6:c9:d5:23:c3:83:78:91:
1b:4c:8b:f6:64:b2:e8:24:0e:de:7f:fa:b1:eb:be:
81:40:17:b1:7f:28:ec:b5:96:cc:c1:28:ab:fd:34:
be:16:da:ad:97:39:fe:bd:2f:4e:15:15:20:68:96:
74:08:08:3d:3f:a5:26:2f:be:8c:e8:00:70:bb:44:
ce:ee:5d:d4:44:4e:d9:9e:0b:dc:0c:52:11:1b:5e:
c8:50:d5:79:93:09:b2:26:a2:aa:1b:ee:e1:59:34:
ac:d9:55:e1:2f:bd:2e:83:cd:dc:26:96:36:57:51:
ee:b5:3f:8b:f4:71:ea:0c:77:6a:cc:c7:e3:d1:48:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DB:85:1F:1B:11:81:C7:19:48:76:E3:22:88:BF:F8:33:17:3B:27
X509v3 Authority Key Identifier:
keyid:76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:08:87:e1:18:dc:c3:2d:9c:5a:c9:8e:06:96:2c:aa:c9:b9:
cb:6e:01:56:c5:0f:44:0b:e7:ec:2c:c2:c9:74:0a:31:41:90:
04:49:78:2a:5a:b0:27:2e:9f:da:b8:ec:4b:e6:36:2e:c8:b0:
d9:23:c5:66:26:00:db:b0:05:e7:d4:40:e5:51:71:2a:c9:42:
6c:87:b5:33:dd:08:bb:92:0c:4a:13:81:42:9b:95:e2:9c:91:
23:53:8f:82:3b:45:52:ac:72:c4:fc:bb:5b:f2:74:7c:62:c6:
ca:bd:c4:dd:cb:a1:69:f0:39:92:8c:c2:68:d3:13:ac:45:90:
6a:0a:be:ee:76:78:b8:d3:49:85:89:a1:79:c5:9c:f8:bb:39:
4e:07:95:79:01:bc:02:94:ff:d1:19:68:dd:e2:33:fe:7b:2f:
70:cb:1e:96:4a:60:ea:c1:79:12:2f:f0:72:d7:12:62:05:68:
92:09:fc:66:82:80:9d:08:c4:34:10:29:40:b8:e5:bd:4e:c7:
a3:7c:57:5e:b5:3f:84:3f:a0:5f:da:81:b9:19:00:c4:f9:e6:
16:f6:64:03:b0:66:45:7a:7d:ce:4b:cc:36:58:71:3e:9f:20:
f0:66:d7:b0:87:fc:04:dd:15:d3:ee:c6:9b:a0:3f:2a:4b:0b:
16:99:88:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:01:35 2026 by rpki-client