
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
File: do_utqkKhqzxGHHk5Xii6n7Cgdk.mft (raw, json)
Hash identifier: 5EIBOhmAJFzcrUWN7Mz2RxC8BJFT668encO4d8upce8=
Subject key identifier: F9:AE:5B:D1:8B:18:41:E0:BE:EC:F4:2A:94:38:50:F8:6C:03:FC:53
Authority key identifier: 76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
Certificate issuer: /CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Certificate serial: 019FAD1AF9AB3865E54C5C0B0650F2631732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
Manifest number: 04E0
Signing time: Wed 29 Jul 2026 09:00:53 +0000
Manifest this update: Wed 29 Jul 2026 09:00:53 +0000
Manifest next update: Thu 30 Jul 2026 09:00:53 +0000
Files and hashes: 1: W-L9Z-et_hk_ElQE4x3JidtYxJ8.roa (hash: H+ygr+3swIT2aBvGxAFeyCAkH1uxCN9KnvrpdAVtIB8=)
2: do_utqkKhqzxGHHk5Xii6n7Cgdk.crl (hash: 8n8Qy6KGzp2lECEtb1PV6oWJKP5Z4KBBY9xCDgj5Kw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:f9:ab:38:65:e5:4c:5c:0b:06:50:f2:63:17:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Validity
Not Before: Jul 29 09:00:53 2026 GMT
Not After : Jul 30 09:00:53 2026 GMT
Subject: CN=f9ae5bd18b1841e0beecf42a943850f86c03fc53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:13:73:36:b2:2f:bd:a7:38:35:09:73:90:78:
3d:36:4d:bc:01:61:49:25:54:46:35:1e:d4:05:31:
d4:63:af:d2:31:3b:e4:17:3b:77:4b:98:71:ce:d5:
62:e9:4b:97:73:89:6c:82:14:80:3d:8a:8f:13:70:
ad:22:d6:e3:0e:e9:32:26:41:9b:4e:5b:f7:db:cb:
05:af:8e:03:39:f2:de:b8:c1:11:d1:36:04:95:7c:
eb:ae:a9:e8:66:3e:12:15:65:01:22:18:82:b5:a0:
b3:e5:e9:0e:7c:cc:a4:79:06:3a:1b:d1:62:dd:58:
a9:81:35:84:30:23:fb:db:9e:3f:fa:2b:02:2a:6b:
e1:f5:89:f0:a2:75:f0:d5:80:b4:15:fc:1f:0c:f9:
3b:6b:75:f8:ee:34:26:94:94:8c:b6:8e:2a:6d:92:
ac:3c:9d:06:b8:ea:7d:70:73:24:f1:39:35:4f:d9:
14:7a:0e:a6:cf:3d:f6:0e:7b:5e:67:35:b6:cb:63:
74:6d:b4:20:cb:f7:ec:83:38:a0:bb:30:e0:ca:b0:
b4:d4:67:3e:75:5a:d7:56:f8:97:2b:39:95:23:31:
70:c8:e6:15:c7:ad:27:63:cc:a3:78:28:82:81:8f:
45:fb:da:4a:57:dd:bb:30:b0:63:53:7f:be:3d:e7:
89:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:AE:5B:D1:8B:18:41:E0:BE:EC:F4:2A:94:38:50:F8:6C:03:FC:53
X509v3 Authority Key Identifier:
keyid:76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:81:d1:60:6b:a6:bc:d1:48:13:eb:99:9c:c2:3c:0c:51:b5:
bc:40:ca:02:bb:64:3c:95:24:06:d5:0c:2b:0d:a8:91:df:13:
c7:89:85:8a:07:57:c7:9f:1f:02:02:f0:94:e1:10:30:64:23:
56:1c:4f:ea:26:23:41:cd:7b:67:6d:b8:18:06:dc:36:43:e7:
e2:1a:16:94:9c:05:a9:69:70:5a:1c:42:ff:61:81:8d:43:57:
79:83:39:1a:6e:39:63:01:e3:ef:ef:a5:ff:7f:57:c4:24:54:
10:f7:88:5d:30:d4:a4:5c:c3:8e:92:4e:6b:75:cd:78:09:ae:
1c:17:e1:64:7d:59:61:14:50:e5:db:6f:18:d0:b6:4c:18:52:
6b:15:17:e9:5b:e1:d8:29:50:c2:72:b2:1a:2b:a8:c4:dc:ed:
b7:0c:92:60:83:2c:eb:cf:b3:88:52:4a:7e:ef:30:81:ec:a2:
0a:86:0b:83:67:77:91:e6:51:d0:e4:02:cb:c2:13:f0:9d:e8:
c1:ad:ea:2f:d7:ff:0e:90:54:df:82:c3:88:e6:7e:11:1c:15:
7a:05:cd:81:66:5f:f4:9f:fa:35:2a:8a:c0:6c:83:0a:84:75:
90:e4:8d:a7:57:93:61:cc:41:24:19:36:e2:03:1e:73:a5:31:
e3:fb:4c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:00:40 2026 by rpki-client