Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
File: 14pJFNlgCbaCLRaKDtU-k206Qfg.mft (raw, json)
Hash identifier: lcpY5Jv3ccGrXzmFLdbLTYKehFFJdQ2Vae3hyhBbDdo=
Subject key identifier: 64:03:BB:60:D9:8A:FE:1B:4F:6F:A3:D3:7B:D1:54:53:F3:BF:38:1A
Authority key identifier: D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
Certificate issuer: /CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Certificate serial: 01A0C2561C39B571703E9C84439CDD9126F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
Manifest number: 1A68
Signing time: Mon 21 Sep 2026 05:00:18 +0000
Manifest this update: Mon 21 Sep 2026 05:00:18 +0000
Manifest next update: Tue 22 Sep 2026 05:00:18 +0000
Files and hashes: 1: 14pJFNlgCbaCLRaKDtU-k206Qfg.crl (hash: aWA4/GjfXPcYfwVmP2xFjamt75lXSzGW1bhQ7IUCnPc=)
2: 6x5ILUSvgOTagvvtbHogSJvWkOQ.roa (hash: 3keZkVBi5zBSOFwHxOvIQC7c9jGWchJViw/DIikVTLE=)
3: DE55FjmHnYMUufPcVQkSgEdNQF0.roa (hash: sZ+5mTZ98nXRCWaNrvUzsUkg+0v1Fty74PKR7nx8ZI0=)
4: _ksG3kvAnj4QER34bGf9CzKZfqA.roa (hash: hZjpPAvNf63FW5do/xOQrnx1Z9N5hBMWnbPukfeUVvA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c2:56:1c:39:b5:71:70:3e:9c:84:43:9c:dd:91:26:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78a4914d96009b6822d168a0ed53e936d3a41f8
Validity
Not Before: Sep 21 05:00:18 2026 GMT
Not After : Sep 22 05:00:18 2026 GMT
Subject: CN=6403bb60d98afe1b4f6fa3d37bd15453f3bf381a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:1f:2a:9c:28:2e:7d:25:84:8f:30:31:b2:
2c:6a:73:2d:09:dc:a6:01:fa:6d:2f:2a:24:16:b9:
ae:b1:29:52:1b:83:7b:80:b0:61:39:3c:78:1a:75:
91:c5:c2:37:14:ef:24:2e:4f:cc:3a:00:0a:b3:a3:
63:bf:81:77:70:da:60:85:6b:12:ee:92:2c:cb:61:
1d:de:29:ff:52:0a:ef:58:28:ec:3f:c7:3c:60:cd:
1d:ac:84:61:1e:83:53:d6:3b:38:be:8e:ca:f6:7c:
56:c8:8e:07:f9:56:f5:c6:6f:45:a7:51:db:d9:93:
7c:ea:da:98:c0:96:59:88:85:e0:63:e7:6e:9a:26:
95:32:f2:07:ca:07:cb:35:b1:73:97:8e:70:d3:b4:
4f:d8:19:36:e2:6d:b1:cc:fc:f8:89:a3:61:be:cb:
46:77:26:cc:47:18:3a:39:85:8f:d5:f6:9b:2a:8c:
50:0f:20:fc:63:6f:2b:d9:4a:9b:c6:d0:f8:1f:a6:
a7:5f:48:e9:de:ee:94:9c:6c:d5:dd:aa:88:00:5f:
bd:65:3d:e4:38:34:65:b2:c7:16:6f:11:74:c8:66:
e5:53:4f:9a:9b:29:48:e5:b4:21:7d:c3:d0:6c:90:
57:52:dc:5e:80:5d:41:51:f4:0d:df:90:e4:a4:dc:
6a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:03:BB:60:D9:8A:FE:1B:4F:6F:A3:D3:7B:D1:54:53:F3:BF:38:1A
X509v3 Authority Key Identifier:
keyid:D7:8A:49:14:D9:60:09:B6:82:2D:16:8A:0E:D5:3E:93:6D:3A:41:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14pJFNlgCbaCLRaKDtU-k206Qfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/7cf43d-8c85-4817-bd75-230fda66abcb/1/14pJFNlgCbaCLRaKDtU-k206Qfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:e9:56:63:fe:ab:3f:d9:2b:85:c8:d7:36:01:b4:3b:15:3d:
d2:a2:05:92:c8:2e:34:35:91:6d:0a:7f:be:28:d2:7b:06:23:
c0:92:f0:33:36:2e:d8:9a:33:77:87:15:89:d0:14:a5:a3:99:
47:6e:40:4f:16:2c:7e:a5:14:ca:15:e4:7a:21:0a:3b:16:e6:
00:d7:e7:cd:de:1a:17:a7:6c:24:1e:ed:5f:f8:20:6c:a3:9b:
bb:56:08:c1:0a:00:c9:7a:19:60:0a:dc:bd:49:45:5b:10:fe:
35:b6:98:4b:fa:89:ba:95:17:ca:3b:76:e9:eb:80:1a:d7:e9:
a4:e2:42:23:51:04:05:e7:78:f6:0e:5c:26:77:88:75:41:15:
42:ab:3d:5c:32:a1:c6:73:55:c8:c9:ba:c0:c3:bf:a1:c2:2e:
ae:d5:e8:8b:ed:ae:46:f9:ae:c1:9a:94:68:05:10:1c:cc:77:
55:06:cf:ce:48:de:84:2a:f3:9b:2c:82:b2:9d:8f:8d:d9:5c:
ee:61:66:e3:f2:48:48:9a:a3:ed:c6:d6:11:01:2a:97:9e:91:
91:2b:99:7b:e5:92:d6:01:8c:2c:1b:04:a4:ba:b2:68:fb:63:
df:f2:dc:c9:02:dc:d0:19:d5:1f:b3:d8:b6:85:4d:46:b5:b0:
99:ae:63:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:27:48 2026 by rpki-client