Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
File: K67n6kgtYqZxBj6sg3ia8585C3Q.mft (raw, json)
Hash identifier: eLubsh2Bokiozf+h1wxS6PWlWTINw7yVaoTTsoqTNRs=
Subject key identifier: 69:EE:16:95:D1:B1:E6:95:CE:C8:02:4C:D6:41:9B:C2:72:E0:B7:16
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Certificate issuer: /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial: 019F1189A37D09DC42332FC959BD58DAD0CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
Manifest number: 0B42
Signing time: Mon 29 Jun 2026 04:01:00 +0000
Manifest this update: Mon 29 Jun 2026 04:01:00 +0000
Manifest next update: Tue 30 Jun 2026 04:01:00 +0000
Files and hashes: 1: 57OxBTF4X7lyr00PQWTLC_7l0LM.roa (hash: Qu9Cp0fGN2f6UG2Bu1+rVSKBmfLjLGmUIUXyj9DRqEM=)
2: K67n6kgtYqZxBj6sg3ia8585C3Q.crl (hash: y6apne4v7A3y2dSOxFjlQF1ifev04WXuHK+g2HO3140=)
3: wLKTHNAi_SKjDTW74BcesnX-WQQ.asa (hash: j48nzI6JGxErzvih/a7iFeEhyD9lYuYhcQYuQ7FCZgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:89:a3:7d:09:dc:42:33:2f:c9:59:bd:58:da:d0:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
Validity
Not Before: Jun 29 04:01:00 2026 GMT
Not After : Jun 30 04:01:00 2026 GMT
Subject: CN=69ee1695d1b1e695cec8024cd6419bc272e0b716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:e8:f3:80:66:1a:71:2a:24:69:db:5c:ff:
88:cc:c4:1f:6d:aa:30:0f:af:8b:b5:6e:bb:53:59:
87:32:a0:92:1a:b6:ec:c7:cb:fb:50:a5:1e:3c:12:
38:53:d6:af:d0:0f:58:a5:10:e6:0c:7e:49:c3:91:
b9:3e:72:8b:e4:8f:9f:1a:96:3a:0b:1d:35:a7:67:
08:3f:58:03:86:ec:6c:18:9e:e4:c7:4a:13:3d:17:
cc:f5:06:d5:20:d2:63:96:69:67:a4:b4:f0:76:5f:
d2:3f:f8:fd:68:fd:f9:7a:55:cd:b5:e2:dd:da:d9:
6f:ea:85:1c:ad:da:1b:ca:f9:53:2f:82:ed:7d:c1:
28:20:97:be:24:46:d2:91:ec:c0:44:1a:00:59:51:
0c:23:9c:94:c7:64:ff:59:bc:96:99:78:d1:be:d3:
6f:a9:59:76:2b:3f:59:d9:8a:98:52:3a:3d:a2:e7:
70:d6:4e:62:f8:02:8c:0d:9f:fa:32:6d:ac:f5:12:
f9:5a:fc:6c:c6:00:e9:49:a7:10:a2:79:d3:10:f8:
c0:0c:84:68:e8:3f:3c:67:98:9f:1b:d7:26:9a:fe:
17:a5:0e:e9:c3:20:e5:67:8a:6e:93:f4:31:06:d8:
de:16:6b:7e:95:cb:38:7a:74:0e:7b:ed:ac:84:11:
7c:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:EE:16:95:D1:B1:E6:95:CE:C8:02:4C:D6:41:9B:C2:72:E0:B7:16
X509v3 Authority Key Identifier:
keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:12:ef:52:a9:f3:7c:a0:6b:ba:6c:d5:12:46:5c:b7:17:95:
19:4b:ea:f3:2b:5e:93:b8:a2:9d:f5:f1:be:0a:90:01:11:33:
77:db:a8:22:d2:5a:1e:1b:ad:8c:85:ea:6a:86:44:af:a0:53:
fd:7c:b2:66:a6:5f:ab:7d:53:b4:80:5d:ad:4e:e6:07:fc:5a:
f5:2e:22:c6:28:cb:19:a1:b0:8e:12:1e:06:af:80:32:c6:cb:
a5:14:e9:60:c6:c2:ec:1c:b3:dd:06:83:dd:ff:69:4c:18:a4:
e3:34:61:86:83:21:4e:2c:40:ac:92:73:1f:09:5f:3b:44:5f:
2e:de:1e:8a:7f:7c:bb:ca:7f:2d:28:c8:1e:7c:c1:39:e8:f5:
2d:0b:4c:63:40:42:91:04:0f:39:dc:79:54:dd:18:d8:50:54:
fb:40:2d:57:fe:70:41:4e:ac:62:2b:03:0b:95:7a:4d:59:1a:
34:2c:9e:cb:f5:b0:a3:a2:17:b7:1f:be:ed:41:06:46:b0:7f:
25:36:be:f9:b4:de:1b:f6:de:af:b9:a7:ac:be:c2:4e:37:b6:
2c:30:12:0e:20:56:5c:e9:9d:06:98:15:2c:a5:65:fc:2c:05:
e2:06:fa:cd:0d:29:78:d5:13:4e:5d:01:c1:bd:2e:7a:86:b8:
c6:51:83:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:44:13 2026 by rpki-client