Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: IL/lo6EVAYsi/7iGGz+CGNUAyGTMaSSPiYNQkk1qWQ8=
Subject key identifier: 38:DD:ED:F1:8F:E4:9A:11:08:A4:35:A4:EE:BF:B4:73:C1:E2:90:C6
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 019EBEB5D102DCA1D28B2C9CFAD7086F9D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 1961
Signing time: Sat 13 Jun 2026 02:00:46 +0000
Manifest this update: Sat 13 Jun 2026 02:00:46 +0000
Manifest next update: Sun 14 Jun 2026 02:00:46 +0000
Files and hashes: 1: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: NaFsofz6bVi2oV+hvs+qDlJvO7LlKcT42/clQm/kzXQ=)
2: f-oFGYgAScvKIY1myYftcDiH90Y.roa (hash: jXYW4bNPX8ymp0HBTNVmMzodvWsb+eQz9bU87veKdFM=)
3: lBMdn2iQdHUL-cwEEQDm3tFBaok.roa (hash: 92N+I3r+uRw8V9HIiYjj1Tx/aQGHG9DB0so6vrEW//w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:b5:d1:02:dc:a1:d2:8b:2c:9c:fa:d7:08:6f:9d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Jun 13 02:00:46 2026 GMT
Not After : Jun 14 02:00:46 2026 GMT
Subject: CN=38ddedf18fe49a1108a435a4eebfb473c1e290c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ab:21:82:26:06:aa:76:7e:fd:3a:c9:72:3e:
22:5d:da:ec:a7:1f:a0:1e:f6:f5:3b:08:ea:da:08:
44:a9:e8:11:56:11:4a:36:d8:2f:98:4a:c8:fb:e5:
50:6f:27:65:40:00:e3:c5:78:60:3b:00:fd:2a:34:
95:ba:ae:33:7b:e2:01:98:09:8f:1d:0e:dd:69:6a:
7c:29:96:21:6a:ad:5e:90:4d:91:64:e6:3a:f5:40:
5c:1c:f2:29:9d:86:b2:01:4b:11:6b:63:1e:c3:15:
36:64:89:d0:c7:c0:ac:2a:bf:b7:78:9d:9c:5d:66:
9d:43:02:ef:e8:3b:f4:0b:8e:e9:7f:a2:d7:55:a5:
c0:8a:34:d1:61:d6:f1:e2:3a:a1:a9:03:3e:97:10:
13:91:d4:b6:62:5f:cf:d4:a6:83:7b:f2:60:37:a0:
39:df:d7:f5:ee:26:48:e6:81:fe:51:a3:e6:94:2d:
05:79:bc:91:30:5d:26:32:6f:80:b7:36:e6:69:1b:
16:68:da:ac:e7:50:5a:71:2d:f2:f8:af:1d:10:61:
9d:3f:3a:78:e4:87:72:e8:74:95:11:7c:46:25:32:
31:3a:26:91:dd:5b:fc:92:e6:48:f3:b8:d0:97:e7:
1a:72:95:fa:64:1a:bc:e6:bc:70:da:e3:77:db:67:
e9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:DD:ED:F1:8F:E4:9A:11:08:A4:35:A4:EE:BF:B4:73:C1:E2:90:C6
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:53:59:cc:d7:37:12:60:a5:5e:ab:1e:19:8b:d1:07:f4:f9:
f5:1e:d2:95:27:62:b5:b2:49:ee:80:dd:3f:c1:64:23:15:25:
72:0e:c1:c4:78:b3:6e:fb:fe:33:77:62:7e:c4:66:bb:95:54:
dc:a1:14:10:ce:50:1e:75:d7:72:1f:14:7e:ad:a0:cf:d0:14:
28:88:e3:ae:23:6c:05:5a:6a:13:aa:e4:3c:12:ee:96:88:ce:
8c:f4:8f:78:39:9c:fb:f3:86:24:6d:b8:94:65:bf:a6:68:8e:
0d:ae:27:f1:6d:80:05:d6:a5:7f:f2:62:4c:1f:16:f9:af:fc:
d9:60:a6:66:f6:cf:7f:e3:d8:51:76:e5:d4:27:41:f2:18:1e:
99:38:ce:29:c2:52:e4:f6:d3:0c:ea:1d:5d:bf:80:ba:73:3f:
fd:90:51:ca:d1:0f:fb:2f:b7:93:26:6d:fa:42:7f:f2:53:d1:
74:41:37:2d:22:43:b1:34:28:cd:2d:08:7a:20:a0:43:aa:32:
cc:8b:ad:ab:6d:a1:99:29:16:ed:be:7b:80:a0:01:9d:f5:ae:
4b:10:a5:bf:7c:cc:1b:fc:ed:ae:11:22:a7:39:16:3d:9d:50:
cd:ff:b6:82:75:66:33:37:29:4e:14:88:f2:f3:e3:95:2d:62:
44:23:c9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:12:18 2026 by rpki-client