Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: Sbhz+KJRJXa1U8VdHbXfPJjE724vtqLQLJscKIavlCU=
Subject key identifier: B2:79:BF:0F:48:1E:4F:E7:1A:50:8E:F7:3C:7B:4D:BF:86:C9:67:58
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 01A0C7EAA4D6486F62D76CAA001FFD384CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 07:00:38 +0000
Manifest this update: Tue 22 Sep 2026 07:00:38 +0000
Manifest next update: Wed 23 Sep 2026 07:00:38 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: RrnlDXmiTlOhp8xyHA9mH1M4MYDy12MOIxs9QjM0Mpc=)
2: iyOoKbcuiPTHCLxMCiy7DxXr5rk.roa (hash: PXqcza2cwz/3mR448+fTEDzYFSGuytoJUnD8yJR22Mo=)
3: rjqoaksN8bIK2O4SRzuLcMffaQQ.roa (hash: YtctfngTDGfahIUPg5R6y0N3cZYKDE1Tr+6r4LZlIhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:ea:a4:d6:48:6f:62:d7:6c:aa:00:1f:fd:38:4c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Sep 22 07:00:38 2026 GMT
Not After : Sep 23 07:00:38 2026 GMT
Subject: CN=b279bf0f481e4fe71a508ef73c7b4dbf86c96758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f5:b6:17:9c:f6:05:bd:ca:8d:02:78:bb:f6:
34:b9:aa:40:aa:e4:f1:5a:3a:08:3f:56:eb:78:87:
a7:ca:2c:2c:b2:76:0b:7f:c2:a3:9d:c9:cc:ff:3d:
b6:e5:7d:2d:ee:a4:32:b2:52:b3:c2:a0:77:6f:3e:
3d:2a:98:bb:c2:ea:40:31:d4:09:6a:40:c7:b2:37:
99:a2:c3:19:30:21:d9:5e:60:63:bc:ae:31:76:85:
49:c8:1b:39:40:84:0f:4e:79:c6:ac:2b:3f:e4:88:
3d:c4:c4:83:69:b3:95:52:b6:16:65:41:d2:21:00:
8d:40:78:eb:b2:01:75:9f:d8:55:0d:bd:17:40:cf:
90:a4:dc:e0:df:81:75:0f:3a:9a:66:a3:c6:87:f5:
bc:06:a2:c8:ac:0a:5b:cb:65:b2:e3:62:97:47:9c:
ad:83:b3:54:7d:5a:4d:4e:a8:a1:e6:cd:e4:0d:71:
a3:75:ff:ed:0a:e0:fc:c3:cf:2d:7c:24:5e:f9:e0:
bb:e2:f5:c9:9e:eb:3e:67:17:99:9a:53:ea:22:b2:
ed:48:b2:5d:92:55:82:70:77:5e:28:80:b2:f9:3b:
72:65:a9:11:55:99:11:6e:8d:f4:c7:4d:0c:8f:fd:
0d:60:89:3c:69:c7:d9:f6:ab:8a:4b:10:13:62:a1:
63:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:79:BF:0F:48:1E:4F:E7:1A:50:8E:F7:3C:7B:4D:BF:86:C9:67:58
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:45:d1:e6:fc:1a:5a:7a:38:17:46:43:bb:78:e3:08:e5:35:
e2:f3:a8:59:b5:3b:58:06:25:88:97:1e:e1:e5:cf:20:a2:64:
55:37:cb:2e:62:e1:17:54:61:47:74:d0:95:8e:97:1a:d0:39:
89:56:1d:70:53:25:e6:9b:d5:16:a2:e3:fc:6c:40:0a:51:d4:
84:5f:8d:46:56:da:da:e5:2c:d1:09:16:da:61:a9:e0:34:98:
09:59:85:e9:bb:08:a4:eb:57:23:e8:ee:7c:70:a1:ab:a4:bd:
cf:1e:af:50:33:d9:69:78:6f:00:c1:34:5d:84:18:e8:56:64:
05:73:56:93:20:0b:cc:59:fb:a8:48:7a:63:0c:92:6e:c2:3d:
16:b2:0a:cb:a2:75:9f:6e:fe:7a:4e:53:a9:a4:f8:7c:4e:ea:
10:76:11:8d:c3:82:c6:69:bb:93:b7:72:12:a1:ee:83:c8:1d:
99:53:26:ea:fe:48:e4:28:79:21:17:11:5b:b2:bf:4b:4a:c5:
cf:23:2d:e5:3c:d0:e4:cf:95:3a:e8:55:1e:80:94:8f:0a:5d:
a7:83:ca:88:19:da:bd:5a:91:20:6a:7e:38:5b:86:54:2a:de:
bf:6d:80:f9:c6:67:bb:5a:9c:75:8d:99:4d:d1:b1:90:5a:11:
99:df:d0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:54:25 2026 by rpki-client