Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
File: do_utqkKhqzxGHHk5Xii6n7Cgdk.mft (raw, json)
Hash identifier: /HN0IeyEybKimKAYEQz4qs40fEn2N6qXNNjP7ED+yOQ=
Subject key identifier: 96:3E:E6:18:BE:E9:93:40:53:13:F3:B9:58:32:2B:E3:11:DC:59:14
Authority key identifier: 76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
Certificate issuer: /CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Certificate serial: 01A0F18BAEF11EFEECC17954ED6649ECC768
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
Manifest number: 0588
Signing time: Wed 30 Sep 2026 09:00:58 +0000
Manifest this update: Wed 30 Sep 2026 09:00:58 +0000
Manifest next update: Thu 01 Oct 2026 09:00:58 +0000
Files and hashes: 1: W-L9Z-et_hk_ElQE4x3JidtYxJ8.roa (hash: H+ygr+3swIT2aBvGxAFeyCAkH1uxCN9KnvrpdAVtIB8=)
2: do_utqkKhqzxGHHk5Xii6n7Cgdk.crl (hash: UKfir43REX1ZDa+/+cJbGtC0VPJqho2QNTBVkSmRcRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:8b:ae:f1:1e:fe:ec:c1:79:54:ed:66:49:ec:c7:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Validity
Not Before: Sep 30 09:00:58 2026 GMT
Not After : Oct 1 09:00:58 2026 GMT
Subject: CN=963ee618bee993405313f3b958322be311dc5914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ac:ea:f4:81:df:0b:73:9f:8f:93:a1:f3:4a:
1c:55:10:6a:f3:3f:62:15:ae:3c:80:76:a9:b0:a3:
4e:23:1e:16:db:44:4b:da:71:0c:27:ba:12:04:d0:
93:51:08:91:fb:45:a6:d6:1e:bc:7b:4d:94:bc:6a:
21:61:1c:40:ba:83:7d:c3:fe:1b:b2:65:7d:c0:9d:
5e:5b:d9:43:08:79:cf:da:22:e6:af:d0:3c:d8:f4:
32:ad:02:c1:af:ab:db:7d:e1:61:62:da:49:fe:c0:
64:a8:a4:bd:9c:77:e7:f1:e6:80:41:16:56:8b:8b:
ac:d9:85:f1:a4:dc:23:67:b5:a5:56:8f:ee:45:49:
10:72:82:76:21:44:b2:fb:ab:e3:96:46:1f:52:14:
f4:8a:61:d5:ef:6a:2d:1c:5e:69:83:67:a0:7c:74:
8f:5d:40:69:70:1b:28:11:8b:1e:85:35:f4:35:24:
37:28:d5:ad:53:c1:a3:13:38:46:0e:a1:0d:c8:b2:
40:d3:5a:97:4f:77:52:01:6b:90:64:be:bb:43:98:
09:eb:36:37:51:ba:a1:f1:24:8b:66:39:b6:15:47:
b5:2f:8d:b1:73:84:49:b7:94:c7:52:8a:14:a4:25:
ab:b0:12:aa:3a:a4:6e:00:ad:2d:1f:17:f5:89:1e:
1d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3E:E6:18:BE:E9:93:40:53:13:F3:B9:58:32:2B:E3:11:DC:59:14
X509v3 Authority Key Identifier:
keyid:76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:c6:26:fa:b8:9b:84:5d:81:35:41:8e:7a:e7:ec:5e:1f:5e:
da:ad:38:08:06:87:5a:fb:59:39:2a:dc:cc:d9:d4:03:b9:79:
6f:40:83:4e:92:dc:8e:0b:e0:33:a9:14:04:5a:cb:d1:7c:f1:
b8:85:2a:49:28:fa:e8:85:7f:95:b5:60:0c:1b:ac:a5:50:4a:
1e:fb:82:31:7c:e7:99:f7:e9:35:8e:f4:9d:51:14:e2:95:78:
d8:9c:f4:a1:ed:5f:13:a7:bf:30:a3:a5:86:4e:b6:4d:7d:1a:
f6:9f:ef:60:40:8e:50:18:95:51:8d:2c:2d:de:a5:ab:d4:2b:
80:31:4f:f4:e5:de:71:09:c3:bc:fe:7a:c4:9f:5e:c0:b9:88:
f5:e4:93:d3:ec:92:9c:a9:43:ad:cc:c5:ef:5a:d0:b6:be:7a:
4d:f2:54:dc:31:be:03:81:96:2b:2a:82:7d:bc:11:d8:6d:d8:
7c:82:42:36:f2:ae:6b:12:c1:6b:59:13:58:c1:13:89:f9:bb:
fe:42:4d:70:b3:79:c5:aa:fa:e1:b5:c5:12:9f:96:d3:7a:46:
e5:0d:84:2d:ca:13:0b:fc:ea:10:a8:bb:5d:70:a1:55:0a:e6:
7e:ed:61:ad:f8:25:53:ee:12:51:40:02:35:75:59:8a:e0:9f:
f1:a1:77:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:47:55 2026 by rpki-client