Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: Xlgqe6lFtzTELWfwPmQcmMat9ap1yin46A0rWjbbdCY=
Subject key identifier: B2:48:8F:D8:93:E4:C7:56:80:86:6A:2A:05:9D:46:32:0D:C0:61:3A
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019EC36E08D3E858DF53F105A2F0D076EA92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 14E2
Signing time: Sun 14 Jun 2026 00:00:28 +0000
Manifest this update: Sun 14 Jun 2026 00:00:28 +0000
Manifest next update: Mon 15 Jun 2026 00:00:28 +0000
Files and hashes: 1: PQzuHXy5L5b0_yyO6eHIjUH6mi4.roa (hash: V23nZz7mLpe9717HDXLwPI/8HSc0dvBjnJ7WCHyFfwE=)
2: ZigwfFDMTq9p3ufVtUZkAGSvOE8.roa (hash: hCk1IHYdcTCr5kX9GXFGk1z+A8RaamqdMUb21r4V0lQ=)
3: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: wQyBN6Hs9vDOsYUWk8DFpSmhVErg01uMXi8f65D+2wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:6e:08:d3:e8:58:df:53:f1:05:a2:f0:d0:76:ea:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Jun 14 00:00:28 2026 GMT
Not After : Jun 15 00:00:28 2026 GMT
Subject: CN=b2488fd893e4c75680866a2a059d46320dc0613a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a9:f9:91:c2:32:af:88:6e:2f:c9:39:63:f3:
dc:cb:1a:48:42:84:45:08:3f:c7:3a:c2:21:f5:da:
b5:fa:18:3f:02:8c:a3:54:f9:0d:63:5c:4e:d5:22:
d6:03:87:15:11:09:f9:ba:68:af:8d:e3:b2:46:42:
64:7a:38:c2:48:6c:d8:7a:90:b8:12:9e:59:a8:1a:
3d:03:58:dc:13:a0:31:e2:39:c5:1f:20:ea:2f:16:
b1:d2:20:12:35:d1:35:c9:39:32:d9:03:52:6a:50:
8e:15:e3:e8:36:b8:8b:f3:1a:52:c7:19:b0:15:c4:
bd:a9:27:ff:e3:3b:4d:7d:bf:87:29:59:5c:24:62:
bc:e3:6c:fa:ed:20:15:db:dc:e3:ad:f5:9e:4a:20:
50:9e:b6:c7:bf:11:80:4b:2d:12:13:2e:76:ac:8d:
30:91:ca:09:20:5b:97:5e:09:23:b3:a6:d9:e0:24:
8b:3e:db:a8:0a:25:90:bf:0b:a2:30:44:95:95:65:
a0:4e:36:0c:b5:c9:60:9e:a6:53:75:06:52:5c:fb:
51:d3:35:d2:9e:7b:50:ef:9c:ea:52:cd:77:54:07:
fa:d6:48:6b:25:09:a3:b1:5e:ea:8c:d5:7a:df:46:
f1:f9:29:79:f5:1b:38:19:61:42:bc:a6:a3:04:76:
b6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:48:8F:D8:93:E4:C7:56:80:86:6A:2A:05:9D:46:32:0D:C0:61:3A
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:8c:8b:3d:c5:3e:91:f4:54:cb:89:db:88:c4:5b:5e:cf:1f:
6f:d4:f0:5b:f0:35:25:49:06:cd:90:f9:57:78:7c:69:35:ec:
91:f7:25:ae:89:c1:e1:9e:9f:36:f1:76:b0:52:9d:fc:5f:5b:
b3:db:ce:da:29:c8:29:3c:fd:49:92:cd:41:3d:ac:ef:47:55:
79:0a:34:17:5f:5c:e2:c9:c9:5f:7a:4a:49:52:49:32:29:9a:
2a:37:a4:2d:f7:d7:9f:5d:52:14:a3:1b:55:45:d1:09:fc:e1:
24:b0:33:07:2c:cb:f8:40:ca:69:7f:ae:26:17:70:ee:31:a7:
ce:58:1a:73:54:b0:c5:7f:f4:80:70:4d:b4:16:b5:83:0b:45:
7b:56:02:92:1b:b8:0e:67:0f:57:5b:44:fd:78:a4:54:09:f1:
d4:17:70:53:13:cf:08:14:61:8a:ca:24:f2:f7:da:53:45:81:
29:55:80:45:e8:c1:89:7c:d0:49:0e:22:39:d1:4e:01:67:8b:
f8:40:c8:d0:39:b7:db:52:e8:29:51:45:39:ba:98:f8:3a:91:
fe:35:9f:27:15:e7:8e:ea:7d:8b:98:83:7f:46:23:a1:11:a9:
c1:ed:c8:8d:56:2e:7b:32:cd:dd:32:c4:3e:ca:66:22:d1:33:
11:a3:23:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:09:15 2026 by rpki-client