Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: RaCVS5LUjr+BY50gHaTjXoh357MjOcNWb6LpjFlrEnM=
Subject key identifier: 83:F3:D2:64:EC:8D:96:E0:FB:EC:1B:03:6F:AA:27:0D:CE:5E:19:5D
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 019EBFC93DD3B4786E18A2A0BF28FF369F50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 10F8
Signing time: Sat 13 Jun 2026 07:01:37 +0000
Manifest this update: Sat 13 Jun 2026 07:01:37 +0000
Manifest next update: Sun 14 Jun 2026 07:01:37 +0000
Files and hashes: 1: DvoMmaNQLR-F0c_ZQLqJj27XJNw.asa (hash: mEX2A8L8N6B6jxBchbjmo4MApYmBl5md4ZvzoDkGIHk=)
2: OWX2u3h86crIqlZrJEDgTq1vnqE.roa (hash: LsGVcbsq1OthlSGdFhoXpBIhd+P4m0nMhxD/QuTqmCw=)
3: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: p6xmz74MR/NLC9/ntsZUV4vSFdXHohJBqgj4aKxK7AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c9:3d:d3:b4:78:6e:18:a2:a0:bf:28:ff:36:9f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Jun 13 07:01:37 2026 GMT
Not After : Jun 14 07:01:37 2026 GMT
Subject: CN=83f3d264ec8d96e0fbec1b036faa270dce5e195d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:05:f1:cf:d2:19:de:4d:5d:df:86:02:65:80:
13:9d:3c:18:68:ed:7f:29:8c:db:24:cc:d3:ff:83:
a1:bb:57:53:25:58:bc:ac:b9:8d:1b:57:4a:0f:ef:
23:60:e0:b2:81:b2:c8:22:cb:b9:4b:98:df:df:37:
5c:26:d5:f1:78:97:8f:71:4f:ac:f1:74:5a:26:15:
ed:fe:c7:a6:36:a9:de:27:86:a4:05:50:39:c6:d9:
6a:2d:f8:7f:5e:9a:37:7b:1a:f3:84:a0:a2:5d:b5:
08:4d:a9:e9:20:fa:d5:ad:d3:33:a8:c3:ac:96:9e:
42:41:71:ae:c3:52:b5:28:16:d0:b2:e4:be:4d:83:
33:1b:a2:82:26:1a:73:e9:55:84:92:11:4f:51:8e:
fb:b1:d4:6d:02:4a:55:3f:0e:5e:65:6a:58:ba:c2:
26:43:fc:b4:dd:83:99:6a:2d:c1:51:39:be:83:44:
20:a5:69:01:7a:06:ad:c7:cc:b2:6a:91:ab:9d:bd:
6e:77:31:f2:d7:a7:d6:f3:ae:b7:8e:5f:a5:ae:bb:
b9:30:a8:b6:b9:89:24:02:7e:48:04:72:f4:1e:7f:
a7:5f:9d:61:d5:24:a3:cb:70:a2:6f:a0:01:41:a7:
c3:07:a0:0c:53:c2:b6:d3:ba:f1:c2:69:2c:14:a8:
b7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:F3:D2:64:EC:8D:96:E0:FB:EC:1B:03:6F:AA:27:0D:CE:5E:19:5D
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c2:3f:04:b0:3a:73:81:f9:97:c1:c2:94:e3:9a:88:bc:60:
d7:19:ca:f5:30:fe:d1:45:f6:11:5c:00:42:7e:11:ee:fb:5e:
01:86:2e:df:51:2a:f2:77:1c:88:e4:af:e9:f8:03:d9:74:de:
8a:9c:5e:4b:1e:2c:7e:fc:b8:22:7e:38:92:5e:a6:e0:f2:1c:
45:2a:39:aa:bf:a0:91:2b:2a:9e:2f:3a:a0:dd:7d:a6:e1:75:
82:03:7e:7a:ac:74:7a:9e:1c:46:c7:53:12:1e:6e:a6:48:4d:
a7:91:bf:56:2d:57:39:75:08:6f:ce:76:ce:77:fb:f0:56:ca:
d6:19:82:85:b0:81:7b:b8:96:98:1d:58:91:4c:5d:e3:49:de:
3b:e7:a0:0c:2a:f9:bc:b1:52:46:bf:4b:66:e6:52:fe:95:7a:
1a:70:6d:a7:af:be:9d:77:52:60:0b:6b:62:04:81:54:41:5e:
20:85:ba:8d:5b:91:98:e1:f1:ac:87:5d:f2:9f:2e:a0:c5:12:
81:df:11:32:37:18:06:e6:40:e7:de:76:12:8d:cf:f6:86:0e:
a0:ba:73:f5:14:3f:9d:48:90:39:f3:db:d7:e1:fa:c2:b6:b8:
a9:92:01:ce:bc:16:51:5a:34:68:e3:50:2a:47:60:61:b5:e3:
ce:2f:4c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:50:45 2026 by rpki-client