Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: ZFW5Y/pEG9ezGZDI3LfTrdVgab/zTwIpsovczBCzU9A=
Subject key identifier: 58:9C:B0:8D:6C:D7:28:70:E8:55:FA:68:70:9A:66:5E:66:53:7C:0C
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 019CB926E7EC4B55C0881EB91BB02D914519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 1855
Signing time: Wed 04 Mar 2026 14:01:00 +0000
Manifest this update: Wed 04 Mar 2026 14:01:00 +0000
Manifest next update: Thu 05 Mar 2026 14:01:00 +0000
Files and hashes: 1: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: 4DkONGa+DL9tM7iFF+u13UC6nfMrSev1jj/F6kDONik=)
2: f-oFGYgAScvKIY1myYftcDiH90Y.roa (hash: jXYW4bNPX8ymp0HBTNVmMzodvWsb+eQz9bU87veKdFM=)
3: lBMdn2iQdHUL-cwEEQDm3tFBaok.roa (hash: 92N+I3r+uRw8V9HIiYjj1Tx/aQGHG9DB0so6vrEW//w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b9:26:e7:ec:4b:55:c0:88:1e:b9:1b:b0:2d:91:45:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Mar 4 14:01:00 2026 GMT
Not After : Mar 5 14:01:00 2026 GMT
Subject: CN=589cb08d6cd72870e855fa68709a665e66537c0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:35:76:6d:85:d2:13:c0:39:8b:e8:7c:79:47:
75:31:c3:25:91:57:14:23:4e:7f:fc:9e:18:6a:5a:
7d:62:20:ec:4e:e0:7f:ab:2c:96:2e:f9:4d:55:2f:
3c:71:8f:98:d5:65:37:0a:dc:8c:8d:bd:3b:7c:cc:
62:ec:1d:e7:e4:87:b7:a2:ce:b0:ff:f7:7c:c2:9c:
18:f8:4b:2d:34:46:1c:81:86:21:b9:d3:f8:b3:20:
2e:13:32:c7:99:7e:15:ef:fe:1a:45:fe:23:40:ea:
0f:91:e0:e3:62:c1:c4:94:d3:95:94:b9:ef:04:05:
49:8e:0a:81:4c:74:04:1c:4c:56:12:3b:cd:a8:fe:
a6:d8:4e:bf:fa:b2:af:fe:a8:4e:37:97:6a:be:a0:
40:bb:df:75:e9:c2:4c:61:31:b8:48:26:9b:a6:02:
f5:d7:27:34:d7:91:80:a7:0a:d7:78:64:52:4f:ad:
b7:80:29:e1:25:01:bf:8a:5c:9d:57:a7:3f:9d:f5:
12:cd:d7:6d:02:a7:26:7d:30:a3:5f:eb:1c:ce:41:
2b:1b:65:ff:a7:3e:7b:ed:0d:af:9a:5f:1b:f7:38:
cd:9a:5a:4e:5e:d4:8e:32:b7:d8:d0:e7:f2:bb:5c:
be:86:84:36:f0:85:fd:cb:bd:c0:01:50:f4:2a:08:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:9C:B0:8D:6C:D7:28:70:E8:55:FA:68:70:9A:66:5E:66:53:7C:0C
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:55:37:ad:f9:59:d0:cf:11:3c:66:89:6e:4b:8f:e5:1d:41:
fb:34:55:98:10:d4:3d:18:20:fb:ac:60:23:6b:bd:be:aa:23:
4c:52:bb:fb:87:b4:2f:a4:c8:63:13:6d:c7:65:c0:c9:f4:28:
61:af:a5:7b:83:44:2f:29:7c:bf:35:74:c6:e8:5f:4b:3f:2d:
e4:0c:5b:20:6e:cd:6c:f0:bc:fd:c6:a8:36:3b:ed:87:32:71:
31:3d:5b:32:6c:37:07:5c:74:88:ec:e8:7f:6a:59:b5:b2:25:
43:36:f0:3b:fd:7c:5d:5a:79:7e:3a:99:ff:84:7e:b0:04:26:
2b:9d:6d:fe:1c:56:dc:89:a5:81:08:75:da:db:e7:3f:07:b9:
ab:d8:72:a4:69:ea:74:d4:74:cd:3b:85:e5:1b:b5:4f:30:8c:
e6:cb:d2:ec:14:51:7a:72:a6:ff:37:03:32:75:8f:f5:d9:f4:
03:71:12:ad:31:87:e4:37:34:05:af:8e:3e:29:4d:0d:34:e3:
98:0f:49:af:1a:88:ce:5e:28:89:6e:0c:1b:03:e6:7a:da:1a:
b8:14:33:51:e6:c3:dd:b6:7f:a2:17:bd:65:49:3f:d8:2d:02:
7f:48:8b:82:1c:2c:e1:e8:02:21:d3:0f:18:9c:6f:94:3b:d2:
bd:ab:c1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:54:05 2026 by rpki-client