Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: uXMcoqczTfZT3nNh3jdD5LI+FRNBAWbsK1XOu6aC0Nw=
Subject key identifier: 82:05:0E:A2:09:F8:D0:5E:A2:12:21:6C:C1:E1:AE:FE:94:0C:49:03
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 019EBDDAB6D4DE11C417FDBC55446120F600
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 10F7
Signing time: Fri 12 Jun 2026 22:01:27 +0000
Manifest this update: Fri 12 Jun 2026 22:01:27 +0000
Manifest next update: Sat 13 Jun 2026 22:01:27 +0000
Files and hashes: 1: DvoMmaNQLR-F0c_ZQLqJj27XJNw.asa (hash: mEX2A8L8N6B6jxBchbjmo4MApYmBl5md4ZvzoDkGIHk=)
2: OWX2u3h86crIqlZrJEDgTq1vnqE.roa (hash: LsGVcbsq1OthlSGdFhoXpBIhd+P4m0nMhxD/QuTqmCw=)
3: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: wxDikt8L4dJKHXvRBUson1h7qC5RmH3sfBrFsbcoFDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 13 Jun 2026 22:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bd:da:b6:d4:de:11:c4:17:fd:bc:55:44:61:20:f6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Jun 12 22:01:27 2026 GMT
Not After : Jun 13 22:01:27 2026 GMT
Subject: CN=82050ea209f8d05ea212216cc1e1aefe940c4903
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4e:e9:e9:68:fb:f1:20:80:ae:25:8f:b9:85:
ae:aa:63:c0:24:a5:34:37:56:42:3b:51:c8:eb:e7:
41:61:c3:97:39:a5:6f:26:01:52:c8:0a:a5:d5:2d:
5c:85:37:a1:40:01:88:0c:42:36:28:d6:7a:59:ef:
fe:80:50:6b:41:00:74:65:04:f7:f2:3b:c1:e5:a7:
04:52:84:70:c1:a6:55:7b:86:94:aa:16:7e:47:c8:
dc:12:84:6e:e0:06:6b:a0:62:2b:a4:0c:13:99:69:
cb:11:b0:96:48:31:b8:33:98:12:3f:11:36:4b:66:
af:02:56:d2:20:6b:78:2d:b4:69:db:b2:5b:c3:f9:
49:29:18:15:68:27:f4:ae:4e:72:3a:a1:f6:0b:e0:
22:ef:a2:90:b8:dd:bf:c0:12:2c:a1:24:56:3b:4c:
40:7c:47:05:1b:e7:24:4a:0d:6b:31:6a:60:f9:e7:
cc:45:9c:c9:7f:47:6f:56:ea:cd:2e:c5:7d:02:d7:
a3:c5:ae:87:56:98:80:f4:45:21:b6:16:5d:78:5a:
e5:21:c0:9d:74:91:bc:1b:57:d1:91:a8:4b:2d:25:
4b:80:e5:f0:bb:76:ae:8c:4d:15:2c:60:b9:83:c5:
c5:7a:cb:13:4b:84:15:ad:0b:c3:50:f2:22:97:d4:
a2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:05:0E:A2:09:F8:D0:5E:A2:12:21:6C:C1:E1:AE:FE:94:0C:49:03
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:74:33:ce:86:e4:c7:63:e5:8b:b3:1d:21:5b:62:2e:a4:36:
05:b8:55:48:15:00:0a:60:e4:84:9f:cb:b5:82:cb:3a:19:9c:
4f:e6:bd:b8:aa:df:59:db:1d:ae:c3:00:4f:ba:fb:3d:62:24:
2e:75:f2:b6:dc:fb:a3:30:52:15:5e:a4:dd:c7:3d:f2:02:1f:
04:36:f3:73:85:61:c6:b1:1c:cf:8c:b0:26:83:0c:aa:ff:d2:
c0:69:a2:1d:6b:13:20:b9:90:ab:20:d8:13:df:00:a4:8b:2b:
c8:af:71:f5:28:f9:56:63:79:e7:38:d1:79:53:53:27:40:fe:
10:8c:82:ac:31:cc:5f:95:35:65:b4:19:06:31:e3:1c:5a:69:
2b:21:9d:e6:1e:6e:30:df:19:a2:22:71:17:0d:f4:71:04:a5:
55:b3:65:0f:15:c6:1c:d7:26:04:1e:67:dd:fa:f4:3a:dc:57:
27:ed:9b:72:8f:68:71:c5:11:92:35:8f:d2:73:e1:59:9e:d8:
3d:27:f9:67:ed:5e:b7:92:31:4e:e8:04:60:f9:d6:97:83:71:
11:84:7d:44:28:74:ed:27:73:db:15:85:43:bd:9d:11:6d:d9:
cd:c7:cf:c1:46:e7:b5:be:e2:9f:6d:2b:dc:39:c3:5e:7d:3e:
13:87:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:31:22 2026 by rpki-client