Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
File: dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft (raw, json)
Hash identifier: AP0E0Tqm3ZZ/WhK7UTLSRnK127+kxmf62eAD1cK8vlc=
Subject key identifier: C6:6C:E8:20:B4:49:B3:EF:43:38:0B:1E:C8:FF:1F:8F:8C:D4:C5:13
Authority key identifier: 74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
Certificate issuer: /CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Certificate serial: 019EB7D83E5970B8C5A6D9F86A546B05D639
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
Manifest number: 14DC
Signing time: Thu 11 Jun 2026 18:01:02 +0000
Manifest this update: Thu 11 Jun 2026 18:01:02 +0000
Manifest next update: Fri 12 Jun 2026 18:01:02 +0000
Files and hashes: 1: PQzuHXy5L5b0_yyO6eHIjUH6mi4.roa (hash: V23nZz7mLpe9717HDXLwPI/8HSc0dvBjnJ7WCHyFfwE=)
2: ZigwfFDMTq9p3ufVtUZkAGSvOE8.roa (hash: hCk1IHYdcTCr5kX9GXFGk1z+A8RaamqdMUb21r4V0lQ=)
3: dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl (hash: veoUtKLPkA+Q1JlInSsk7mMRaR/MvcdBZihpimQuSZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:d8:3e:59:70:b8:c5:a6:d9:f8:6a:54:6b:05:d6:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aa9312af4c3d9cee082c9541a6b65ada569b3c
Validity
Not Before: Jun 11 18:01:02 2026 GMT
Not After : Jun 12 18:01:02 2026 GMT
Subject: CN=c66ce820b449b3ef43380b1ec8ff1f8f8cd4c513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:34:ba:66:90:34:09:39:a1:d6:3d:9f:18:
32:63:a4:d6:44:32:80:b2:80:8f:26:fd:91:27:f2:
21:cf:f6:b5:bf:0b:35:8c:3d:b9:b6:a1:3a:2b:f8:
57:54:4f:bb:1f:03:56:f9:08:91:f5:ba:b7:5e:df:
54:41:ac:2b:3c:a9:0b:f8:ed:d2:30:b2:40:74:9c:
05:64:65:8f:56:d5:56:49:d7:42:fd:ab:26:a6:55:
65:1a:c7:68:84:41:7e:f0:40:41:f1:1a:53:38:8b:
92:1b:3c:a1:9e:83:c4:b6:ca:34:39:f2:39:22:c0:
d4:bf:43:88:99:8a:01:55:ce:ff:b6:08:35:0f:87:
82:5d:69:b9:b4:f0:bb:a2:34:55:e5:15:00:18:48:
f6:c0:bd:db:a2:01:2d:6d:a0:32:73:4e:3c:ce:56:
7c:7a:09:4e:b2:c4:b5:a5:8a:af:3e:cb:0a:7b:6c:
27:6b:c9:10:f0:7f:b8:27:ac:5d:2f:ac:78:a4:f0:
15:51:29:35:5f:d7:dd:f8:94:5e:50:1d:ff:14:68:
63:7f:a2:31:c2:a6:c1:de:af:16:22:e7:52:7b:45:
b7:e1:7d:a5:62:37:57:8a:ee:e6:b4:ca:e5:a8:6c:
6c:03:8e:54:c7:ec:b2:6d:04:8d:af:fc:f5:14:a3:
6b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6C:E8:20:B4:49:B3:EF:43:38:0B:1E:C8:FF:1F:8F:8C:D4:C5:13
X509v3 Authority Key Identifier:
keyid:74:AA:93:12:AF:4C:3D:9C:EE:08:2C:95:41:A6:B6:5A:DA:56:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dKqTEq9MPZzuCCyVQaa2WtpWmzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/0a415a-c728-42e9-be45-98a1d65cfe6f/1/dKqTEq9MPZzuCCyVQaa2WtpWmzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a2:a3:0e:cc:11:96:b3:28:5b:20:4f:53:e6:5e:80:04:39:
12:dc:bb:c1:a1:15:09:e0:9a:5e:f9:82:aa:00:f0:b8:5b:5f:
61:4e:7d:a4:10:56:c1:7c:80:67:8a:af:16:bc:dd:b9:16:94:
a9:24:67:83:27:92:0c:36:49:c3:7b:ff:8f:2c:da:fe:63:8d:
c8:70:ef:a9:1b:16:03:53:f2:8f:ba:42:93:62:b8:47:7f:b4:
92:51:f8:48:53:c1:d5:a5:9b:ff:98:0f:65:3a:88:54:5d:3f:
de:8b:30:5a:f6:92:50:6c:cc:32:05:6b:fe:20:03:ad:56:e9:
91:d9:1d:7b:ef:69:75:bf:3a:67:d9:f4:ec:56:9d:6e:9c:cd:
71:3c:aa:02:ee:f4:8c:f4:e0:e1:68:d6:07:90:6e:a9:e7:4f:
40:ca:39:46:f0:2d:39:8d:f9:4a:86:a5:62:7d:3c:6a:65:4c:
fb:60:42:78:17:30:d2:bd:90:60:09:55:b3:7b:84:ee:ef:11:
ac:2e:ed:68:25:de:13:bb:86:c6:2f:83:50:66:c9:58:30:ee:
a3:17:b5:bc:b0:33:6f:59:ca:2a:47:4d:81:52:05:a1:e4:a8:
cd:ff:7b:5d:53:e1:b5:0b:90:df:42:fd:2d:f2:71:1f:10:32:
cc:09:62:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:40:39 2026 by rpki-client