Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: bw/+5poYvNxjJ1CU49EntYur2HXJt8xeQOxPDabnoco=
Subject key identifier: 90:A3:64:C8:87:8E:52:17:15:7A:C9:09:6B:8E:B1:A9:5D:9D:A2:18
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 01A06F4C55941461A347211432A36B017ECB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 1A41
Signing time: Sat 05 Sep 2026 02:01:08 +0000
Manifest this update: Sat 05 Sep 2026 02:01:08 +0000
Manifest next update: Sun 06 Sep 2026 02:01:08 +0000
Files and hashes: 1: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: Pa2BCznQpqIPCej/F53Qx9RDhc905odwoOisea6BYjM=)
2: f-oFGYgAScvKIY1myYftcDiH90Y.roa (hash: jXYW4bNPX8ymp0HBTNVmMzodvWsb+eQz9bU87veKdFM=)
3: lBMdn2iQdHUL-cwEEQDm3tFBaok.roa (hash: 92N+I3r+uRw8V9HIiYjj1Tx/aQGHG9DB0so6vrEW//w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:4c:55:94:14:61:a3:47:21:14:32:a3:6b:01:7e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Sep 5 02:01:08 2026 GMT
Not After : Sep 6 02:01:08 2026 GMT
Subject: CN=90a364c8878e5217157ac9096b8eb1a95d9da218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:ea:3d:d2:fa:0c:b7:ea:30:33:7c:e6:8c:
b0:9d:08:30:c4:24:af:0a:7f:f2:c8:21:ba:bf:00:
68:7c:22:d4:a6:6f:7b:fa:2d:0f:9b:a6:88:b8:a7:
08:99:a0:46:5b:31:9a:d0:95:10:14:f2:a2:07:95:
b1:45:30:a1:3b:e3:dd:78:8f:7b:16:c3:e5:97:7b:
a3:80:4a:58:da:e2:b9:8e:70:b7:b3:24:ed:45:ea:
4d:05:61:24:21:3f:ab:c0:95:0e:32:fc:ab:e3:97:
99:bf:ca:dd:6a:5d:92:2e:70:11:1f:a9:74:0c:01:
ff:b8:f1:c3:90:a9:15:ff:8a:2f:6b:4c:91:98:c3:
91:e1:cb:e3:d1:94:11:83:c8:cb:b4:e5:11:c6:c2:
6f:7a:c2:07:4e:d7:8a:c1:33:5d:72:f1:be:96:08:
87:b6:9f:e2:32:37:ca:7d:63:13:c7:67:4e:b2:80:
33:41:9f:44:88:ab:fb:6b:bc:3c:09:d7:01:c5:39:
c5:9d:90:72:5a:05:9f:2a:4c:73:e7:ca:d4:ab:50:
c8:b3:c0:a7:d6:03:2b:83:91:9a:3d:be:b2:e2:47:
40:4d:8e:5a:b5:31:3f:cd:72:c4:1a:5b:96:f9:4f:
15:9c:f9:d5:7c:82:79:e3:c8:2b:55:90:38:1f:d3:
2f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:A3:64:C8:87:8E:52:17:15:7A:C9:09:6B:8E:B1:A9:5D:9D:A2:18
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b6:6e:2b:2c:a9:e1:c0:64:91:0b:f1:60:4e:59:51:71:ee:
11:49:cd:da:1e:50:8b:d1:46:8b:c5:ca:a9:70:40:ed:86:54:
71:03:7b:72:c4:13:28:3a:2e:09:fb:9c:1b:56:ba:7c:48:d3:
a6:00:ab:41:6d:0d:2b:d5:94:31:46:f4:63:ad:80:e2:cf:2d:
f5:d0:17:d0:e6:75:14:7a:fb:27:ae:34:21:70:77:54:33:e5:
5f:df:ce:b1:43:8b:29:ad:ad:fb:05:6f:1e:10:da:d8:7c:6d:
f9:3a:12:70:63:46:15:f3:c7:6f:92:7e:5d:51:22:69:0f:79:
a6:2a:11:90:56:83:b0:23:6e:25:a4:ae:b1:51:01:03:78:ba:
59:df:9b:36:7b:d1:58:2f:38:dd:8c:f7:10:da:42:2d:a2:23:
3d:50:37:83:64:39:da:9a:f2:ef:b3:c5:a6:b2:8d:61:43:34:
54:4e:cd:1c:d6:83:6d:a6:a5:4e:0d:cb:88:39:84:b5:4a:b5:
04:da:1c:0b:97:89:06:4f:02:4c:55:ba:fd:83:5c:e7:ee:85:
66:e5:de:dd:0c:57:19:28:d0:2c:e3:81:5f:ba:5d:e7:80:a7:
ca:1d:fa:6a:5e:61:c6:92:c3:95:d0:de:21:16:0a:36:65:91:
58:e2:c4:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBvTFWUFGGjRyEUMqNrAX7LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YWViYzE1NGE1NmM4MzAyNWNiZDg2NDFhOWFjMzE1Y2I1
NTFjMDYwHhcNMjYwOTA1MDIwMTA4WhcNMjYwOTA2MDIwMTA4WjAzMTEwLwYDVQQD
Eyg5MGEzNjRjODg3OGU1MjE3MTU3YWM5MDk2YjhlYjFhOTVkOWRhMjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsHqPdL6DLfqMDN85oywnQgwxCSv
Cn/yyCG6vwBofCLUpm97+i0Pm6aIuKcImaBGWzGa0JUQFPKiB5WxRTChO+PdeI97
FsPll3ujgEpY2uK5jnC3syTtRepNBWEkIT+rwJUOMvyr45eZv8rdal2SLnARH6l0
DAH/uPHDkKkV/4ova0yRmMOR4cvj0ZQRg8jLtOURxsJvesIHTteKwTNdcvG+lgiH
tp/iMjfKfWMTx2dOsoAzQZ9EiKv7a7w8CdcBxTnFnZByWgWfKkxz58rUq1DIs8Cn
1gMrg5GaPb6y4kdATY5atTE/zXLEGluW+U8VnPnVfIJ548grVZA4H9Mv9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCjZMiHjlIXFXrJCWuOsaldnaIYMB8GA1UdIwQY
MBaAFHSuvBVKVsgwJcvYZBqawxXLVRwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQt
MDdhMWQ2NTU0OGJhLzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQtMDdhMWQ2NTU0OGJh
LzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQLZuKyyp
4cBkkQvxYE5ZUXHuEUnN2h5Qi9FGi8XKqXBA7YZUcQN7csQTKDouCfucG1a6fEjT
pgCrQW0NK9WUMUb0Y62A4s8t9dAX0OZ1FHr7J640IXB3VDPlX9/OsUOLKa2t+wVv
HhDa2Hxt+ToScGNGFfPHb5J+XVEiaQ95pioRkFaDsCNuJaSusVEBA3i6Wd+bNnvR
WC843Yz3ENpCLaIjPVA3g2Q52pry77PFprKNYUM0VE7NHNaDbaalTg3LiDmEtUq1
BNocC5eJBk8CTFW6/YNc5+6FZuXe3QxXGSjQLOOBX7pd54Cnyh36al5hxpLDldDe
IRYKNmWRWOLEFg==
-----END CERTIFICATE-----
Generated at Sat Sep 5 06:00:18 2026 by rpki-client