Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: tSkgwKoISs9DVaERtSSvHSBNzHGTjan0qeRxkgRHkQ4=
Subject key identifier: BF:20:14:40:72:A4:14:C0:44:87:A9:6E:FF:5E:AC:47:D2:69:80:32
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 01A0C6331482C775D7AB782C4EA92C55DAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 1A6E
Signing time: Mon 21 Sep 2026 23:00:31 +0000
Manifest this update: Mon 21 Sep 2026 23:00:31 +0000
Manifest next update: Tue 22 Sep 2026 23:00:31 +0000
Files and hashes: 1: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: YG75tim6c/EuM+q1FAXvoqWWchov4vJW3iFXjIj9siU=)
2: f-oFGYgAScvKIY1myYftcDiH90Y.roa (hash: jXYW4bNPX8ymp0HBTNVmMzodvWsb+eQz9bU87veKdFM=)
3: lBMdn2iQdHUL-cwEEQDm3tFBaok.roa (hash: 92N+I3r+uRw8V9HIiYjj1Tx/aQGHG9DB0so6vrEW//w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:33:14:82:c7:75:d7:ab:78:2c:4e:a9:2c:55:da:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Sep 21 23:00:31 2026 GMT
Not After : Sep 22 23:00:31 2026 GMT
Subject: CN=bf20144072a414c04487a96eff5eac47d2698032
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b2:b1:0a:3a:fc:ae:1e:29:df:b6:23:8f:e3:
19:71:a4:a3:36:56:79:82:1a:19:81:9c:8f:f2:a9:
2c:5d:5a:cb:b1:b0:91:fc:b2:e5:9e:90:c0:7d:4d:
98:f6:7c:05:29:01:bc:d5:00:2b:a9:88:95:0f:69:
89:67:99:c3:c7:df:4e:f5:7e:b6:43:3e:de:60:47:
53:28:e7:5f:43:8b:2b:18:ab:3e:c1:2c:3e:b7:73:
ad:1f:c5:b5:f5:6e:a2:a9:a9:78:b3:07:a9:c7:08:
c0:16:b7:e6:15:e2:f7:16:c4:31:df:19:f3:6b:d3:
93:c7:5f:77:d1:04:fc:6b:ea:26:82:d5:35:df:b0:
d8:cc:45:8f:05:1f:dd:08:c0:b2:10:4e:15:c7:3b:
e0:68:5a:69:90:57:18:f9:bd:50:07:2c:98:00:d6:
80:98:79:65:f0:2b:9d:be:8c:56:de:30:26:e3:6d:
c8:bb:72:55:2c:36:b9:03:65:12:5b:d6:6f:08:71:
78:ea:a7:08:c5:93:63:82:18:9f:f8:a7:68:59:e9:
67:ff:be:92:5c:61:87:f3:7e:29:a7:33:38:61:e7:
78:95:09:17:a6:ed:21:d3:8f:1d:03:4e:27:d2:ce:
72:25:43:db:8b:9f:61:94:ef:02:c0:1a:c4:b0:97:
e9:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:20:14:40:72:A4:14:C0:44:87:A9:6E:FF:5E:AC:47:D2:69:80:32
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:e8:7b:8f:99:fc:4b:91:e9:f0:02:7d:d1:45:50:25:8c:88:
f9:9c:3e:e7:2d:80:26:e3:c1:eb:b2:ff:bf:b1:27:52:33:f9:
37:2a:71:a8:7d:1e:f6:f8:3a:ee:8e:64:04:ae:91:ed:6b:90:
20:56:45:6a:9d:ab:0d:0b:94:56:3c:aa:5e:8b:3a:88:fd:ce:
cd:d9:91:0a:35:ae:74:62:3a:66:a4:28:d6:ba:a6:1a:5e:9d:
4a:2c:69:5f:c3:e3:d7:8f:4a:1f:c1:ef:16:a6:cd:4b:a3:69:
57:5e:a3:1b:4c:04:9d:0f:eb:93:be:0f:de:c7:48:2c:b0:ed:
49:7c:79:f2:d1:de:28:23:cd:91:dc:8d:eb:d1:88:08:1f:92:
4f:c8:72:91:e3:c0:c1:a2:9a:2f:8b:2d:a5:46:c8:21:b3:1d:
33:81:e0:30:54:93:93:b4:c9:4f:7f:78:f3:fb:a5:10:36:dd:
94:e8:03:7f:0f:3d:e7:43:48:f9:1c:0e:49:05:8a:73:c7:c0:
05:b7:61:7f:a0:ed:34:e8:66:d3:86:ed:d2:30:3b:9f:52:84:
68:46:54:a3:52:e3:fb:18:68:00:bd:dc:48:32:6e:f7:55:e1:
26:70:35:72:f0:67:56:e2:d2:82:c8:4e:40:4c:32:96:96:0e:
89:02:fd:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:51:01 2026 by rpki-client