Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: SIwCMUT8tDXy1ZPVeBmOl3047Hc2NSaGleHGXDbPzs4=
Subject key identifier: 4A:B1:18:64:E7:6E:2D:A0:80:15:54:C0:52:33:C4:62:C8:8E:77:6E
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 01A0C1B1DBEDD733ABC97990073908359341
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 1203
Signing time: Mon 21 Sep 2026 02:00:53 +0000
Manifest this update: Mon 21 Sep 2026 02:00:53 +0000
Manifest next update: Tue 22 Sep 2026 02:00:53 +0000
Files and hashes: 1: Jf9n1jU0iNZqHiPFX0khcO8APqY.asa (hash: HmCAO4LPXkIwoXgwKfzir3g7UxPnF0W1mI++hpZZWhw=)
2: OWX2u3h86crIqlZrJEDgTq1vnqE.roa (hash: LsGVcbsq1OthlSGdFhoXpBIhd+P4m0nMhxD/QuTqmCw=)
3: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: PzJDqtIv87K06rt/+Ph1du3WCarlCO/ykkcD8lWMEDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:db:ed:d7:33:ab:c9:79:90:07:39:08:35:93:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Sep 21 02:00:53 2026 GMT
Not After : Sep 22 02:00:53 2026 GMT
Subject: CN=4ab11864e76e2da0801554c05233c462c88e776e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:0c:d4:ee:91:9a:b8:1d:f0:3f:5b:c5:a9:a6:
f4:fc:b1:b5:b2:70:43:60:8d:3c:f9:95:cf:77:99:
4f:73:a5:1b:3d:46:a5:fa:89:a9:0d:60:ad:1f:3a:
50:b8:74:0f:68:cb:ec:5c:4f:7c:b8:5b:46:56:bc:
01:9f:35:60:fe:45:51:a2:a8:d2:c1:d7:ee:33:0e:
36:e1:a1:18:74:c4:4b:0c:52:e7:1c:74:b7:c6:94:
66:de:7a:6a:3e:6f:32:bc:99:db:59:ad:1c:3c:d5:
f3:58:6b:5e:74:18:67:ed:e7:59:84:29:49:1e:03:
32:35:ec:68:4e:f3:cc:f9:b5:ed:9a:bc:60:e1:c2:
c8:f7:08:21:5a:c9:92:5e:71:06:d4:d3:74:30:1b:
ea:a2:d0:ad:64:bb:cc:a4:6c:d9:60:0c:ed:19:8a:
a0:96:c6:f0:06:01:ad:95:a2:55:78:5b:94:fe:17:
02:31:da:8e:14:ff:5d:6f:66:e8:02:fd:92:a5:96:
f3:ca:0a:ed:eb:02:3c:34:66:0f:41:47:24:8c:12:
d6:0d:81:ae:c6:63:87:ea:e9:11:05:d9:0b:40:f3:
c7:0d:8e:d0:19:2e:8b:69:64:bc:71:d5:a5:e5:34:
ae:78:8b:e0:4c:b3:af:e2:93:e1:37:72:ad:72:fc:
c4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B1:18:64:E7:6E:2D:A0:80:15:54:C0:52:33:C4:62:C8:8E:77:6E
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:fd:bb:79:bf:e5:ec:d2:77:2e:1c:26:9f:14:8c:a8:c9:ac:
da:3e:3a:fc:b9:09:c3:44:a1:3d:38:12:14:23:32:da:4f:d2:
9f:1c:ac:14:73:26:ce:35:f7:46:c3:ac:55:f9:ad:04:0e:66:
3a:e2:3c:a5:cd:e2:ca:77:9c:90:4b:37:65:47:61:fc:cb:90:
19:a0:19:d1:b2:85:4a:24:14:0d:63:ee:c5:e9:dd:22:52:5d:
8c:78:e0:d2:52:be:d0:77:e7:5f:18:ae:1f:59:35:6b:c2:5c:
71:db:84:24:e3:17:c7:dc:b4:8e:fb:32:c2:c9:df:47:d6:94:
9a:95:0e:c7:ea:18:fb:bf:af:a1:33:e8:64:35:d5:83:05:67:
11:b7:3c:b4:37:79:2f:2b:de:57:a9:e1:81:4a:85:8e:79:cc:
38:66:92:ea:42:9c:60:69:32:73:99:ed:8e:38:62:5b:11:23:
13:ea:7d:f5:df:3a:0e:ea:ec:d3:d5:dd:05:85:40:f9:14:6c:
5e:89:fa:c7:d2:de:08:1a:da:fb:47:36:30:ac:0b:f4:8f:43:
e6:61:1e:8f:02:c5:ac:17:80:06:cf:2f:7e:d8:98:cc:65:24:
3a:63:d5:f9:d2:c3:c5:ed:2e:e1:e2:e3:d3:16:95:fc:07:84:
ab:35:1e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:14:31 2026 by rpki-client