Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: 1RmPXQWA9baN0ZlP9qNJnQBRORA/rElJTdCfGvWSTHI=
Subject key identifier: 79:3E:CE:85:97:89:6C:1D:1D:66:D3:E3:7D:20:30:3D:30:B6:84:9B
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 019CABA2193EC1B8158F244F9EE891CFF7A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 184E
Signing time: Sun 01 Mar 2026 23:00:53 +0000
Manifest this update: Sun 01 Mar 2026 23:00:53 +0000
Manifest next update: Mon 02 Mar 2026 23:00:53 +0000
Files and hashes: 1: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: vb+FztjXOtHQzxMAmmuYCo73mO7prRtOipqzFcWD4RE=)
2: f-oFGYgAScvKIY1myYftcDiH90Y.roa (hash: jXYW4bNPX8ymp0HBTNVmMzodvWsb+eQz9bU87veKdFM=)
3: lBMdn2iQdHUL-cwEEQDm3tFBaok.roa (hash: 92N+I3r+uRw8V9HIiYjj1Tx/aQGHG9DB0so6vrEW//w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:19:3e:c1:b8:15:8f:24:4f:9e:e8:91:cf:f7:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Mar 1 23:00:53 2026 GMT
Not After : Mar 2 23:00:53 2026 GMT
Subject: CN=793ece8597896c1d1d66d3e37d20303d30b6849b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:b7:25:ea:6c:fb:4b:b3:e9:78:da:f3:19:
11:ea:64:14:8f:cc:dd:03:e9:dc:52:a0:7a:75:8c:
56:4a:47:48:fd:ea:28:16:06:bf:d3:3b:95:3a:49:
94:bc:7c:e9:8f:42:3a:bd:d3:b4:45:b9:91:96:9c:
19:2d:94:14:23:7f:de:e3:dd:ef:81:5f:c6:19:af:
58:30:b1:c9:7d:89:64:01:cc:04:1e:90:d9:e6:1a:
79:87:e3:83:bd:34:4d:5f:3b:86:b3:61:3f:a3:42:
d5:c1:28:13:e6:4a:a6:9c:87:7b:6d:02:d1:90:c1:
e1:6f:5a:17:d4:55:2c:de:2c:dc:db:32:2e:21:20:
a8:c2:58:e6:e0:07:f7:76:5c:4b:4c:71:62:44:43:
61:52:8b:9a:7b:a8:ed:dc:26:b2:03:4f:e3:aa:23:
e8:4f:41:15:12:3d:1e:65:b7:2d:92:fa:22:79:b0:
36:57:4b:7b:1f:94:ee:ff:fe:95:aa:27:67:a9:b3:
48:4b:1a:2d:fe:e1:0a:31:e5:98:5d:46:f8:07:d3:
b1:b2:65:5b:3c:ef:42:77:fe:6f:60:74:95:48:8e:
88:c7:dd:7f:33:73:9f:9a:06:b7:d4:00:74:66:0f:
f4:42:10:34:72:d9:50:15:16:3a:7f:98:52:0c:a8:
2f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3E:CE:85:97:89:6C:1D:1D:66:D3:E3:7D:20:30:3D:30:B6:84:9B
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:17:b9:24:29:f2:04:66:fd:6f:03:e4:fe:da:c7:c0:a7:c1:
d0:6c:9f:09:eb:e4:8b:e8:0c:5b:70:e8:80:f1:c5:0d:4f:48:
58:92:0c:cf:19:8a:54:ac:f1:0c:f7:ec:87:32:a8:7b:6f:80:
45:d9:82:da:a5:35:af:39:b8:c1:c0:3f:eb:60:ea:d0:6c:9f:
a1:13:b6:54:11:94:6e:a7:e4:2f:d2:5e:89:44:b6:5e:be:14:
38:cf:64:69:a7:96:07:09:b5:33:2a:6e:68:b6:42:e2:d8:a7:
9a:c6:d5:29:0e:d6:53:de:e7:94:57:11:29:6b:29:b5:fa:e6:
2d:61:4e:47:2b:3d:01:d7:79:f0:1b:5b:ba:66:3e:14:62:d1:
88:ff:38:75:80:eb:55:5b:68:ad:8d:ae:20:48:c2:e5:39:c9:
8b:c4:b9:38:11:22:ee:8e:90:36:7a:84:e0:2a:d3:a2:aa:c7:
42:57:54:57:5f:3b:de:70:4d:05:82:7c:84:b6:6d:c7:d6:14:
b0:56:c6:9a:03:ad:11:0a:5e:89:c5:ec:2d:2e:74:c9:59:a8:
18:05:6f:19:b6:22:86:a0:a4:b4:ec:d7:43:59:4d:93:9c:98:
1f:b8:77:47:0c:56:27:d9:d7:ec:35:23:34:75:1c:09:46:51:
39:ab:42:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrohk+wbgVjyRPnuiRz/eoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YWViYzE1NGE1NmM4MzAyNWNiZDg2NDFhOWFjMzE1Y2I1
NTFjMDYwHhcNMjYwMzAxMjMwMDUzWhcNMjYwMzAyMjMwMDUzWjAzMTEwLwYDVQQD
Eyg3OTNlY2U4NTk3ODk2YzFkMWQ2NmQzZTM3ZDIwMzAzZDMwYjY4NDliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi+3Jeps+0uz6Xja8xkR6mQUj8zd
A+ncUqB6dYxWSkdI/eooFga/0zuVOkmUvHzpj0I6vdO0RbmRlpwZLZQUI3/e493v
gV/GGa9YMLHJfYlkAcwEHpDZ5hp5h+ODvTRNXzuGs2E/o0LVwSgT5kqmnId7bQLR
kMHhb1oX1FUs3izc2zIuISCowljm4Af3dlxLTHFiRENhUouae6jt3CayA0/jqiPo
T0EVEj0eZbctkvoiebA2V0t7H5Tu//6VqidnqbNISxot/uEKMeWYXUb4B9OxsmVb
PO9Cd/5vYHSVSI6Ix91/M3Ofmga31AB0Zg/0QhA0ctlQFRY6f5hSDKgvbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHk+zoWXiWwdHWbT430gMD0wtoSbMB8GA1UdIwQY
MBaAFHSuvBVKVsgwJcvYZBqawxXLVRwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQt
MDdhMWQ2NTU0OGJhLzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQtMDdhMWQ2NTU0OGJh
LzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAORe5JCny
BGb9bwPk/trHwKfB0GyfCevki+gMW3DogPHFDU9IWJIMzxmKVKzxDPfshzKoe2+A
RdmC2qU1rzm4wcA/62Dq0GyfoRO2VBGUbqfkL9JeiUS2Xr4UOM9kaaeWBwm1Mypu
aLZC4tinmsbVKQ7WU97nlFcRKWsptfrmLWFORys9Add58BtbumY+FGLRiP84dYDr
VVtorY2uIEjC5TnJi8S5OBEi7o6QNnqE4CrToqrHQldUV1873nBNBYJ8hLZtx9YU
sFbGmgOtEQpeicXsLS50yVmoGAVvGbYihqCktOzXQ1lNk5yYH7h3RwxWJ9nX7DUj
NHUcCUZROatC8A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:02 2026 by rpki-client