Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: mNCiD9axN11nutacHTuyxm41s71nZDjq3FSBTBA9IS0=
Subject key identifier: B7:C2:63:47:91:AA:64:CD:E8:C4:FC:CC:BB:D2:D5:DD:57:51:EF:D9
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 019DA2D399BD99F0C46E575E238D37C170D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 18CE
Signing time: Sat 18 Apr 2026 23:01:09 +0000
Manifest this update: Sat 18 Apr 2026 23:01:09 +0000
Manifest next update: Sun 19 Apr 2026 23:01:09 +0000
Files and hashes: 1: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: rMZX6fe0/SH6BIOMRF9zVCzatuta8MN2fK9NGrk5mcE=)
2: f-oFGYgAScvKIY1myYftcDiH90Y.roa (hash: jXYW4bNPX8ymp0HBTNVmMzodvWsb+eQz9bU87veKdFM=)
3: lBMdn2iQdHUL-cwEEQDm3tFBaok.roa (hash: 92N+I3r+uRw8V9HIiYjj1Tx/aQGHG9DB0so6vrEW//w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:99:bd:99:f0:c4:6e:57:5e:23:8d:37:c1:70:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Apr 18 23:01:09 2026 GMT
Not After : Apr 19 23:01:09 2026 GMT
Subject: CN=b7c2634791aa64cde8c4fcccbbd2d5dd5751efd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d1:e2:9d:e3:4c:67:3e:fb:28:71:17:0e:d4:
fb:fd:19:3b:18:96:69:68:7c:8e:2e:b6:f9:48:d6:
b5:2a:76:ef:d4:a7:a1:7b:fd:48:99:ff:53:a4:8e:
14:c5:02:00:c1:5d:bd:f7:45:64:4b:64:94:30:a5:
d5:4e:10:76:cd:92:f2:df:46:b9:6e:02:3e:70:e2:
52:d4:cc:0d:67:de:26:cd:48:86:35:e4:65:e7:f2:
0d:95:52:79:47:93:df:79:6c:a2:46:4c:de:bf:60:
be:6d:eb:d7:b1:0a:fe:b4:b0:89:5f:6a:e8:29:b1:
7d:d7:18:ad:bc:21:4a:2d:fc:7a:d5:43:48:12:7d:
e1:9d:b5:44:25:cb:9c:60:9a:70:d7:c3:6a:be:85:
19:ff:2e:8a:b3:1d:69:de:93:a3:4a:f0:6d:90:42:
39:93:20:a3:e5:bd:21:93:45:8b:f5:25:c6:8d:c3:
c4:f0:18:ff:8e:a7:dc:c5:1f:63:66:6d:a8:4f:08:
50:28:bc:39:1f:10:47:90:f1:ef:9c:ad:dc:f7:87:
65:fa:79:e6:aa:e3:62:77:63:41:28:8a:1a:c7:08:
67:32:b9:3b:b5:60:fb:a1:08:96:fc:76:24:b4:b6:
29:a7:48:ef:db:01:68:2a:c0:fb:e9:c1:c0:bf:44:
bc:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C2:63:47:91:AA:64:CD:E8:C4:FC:CC:BB:D2:D5:DD:57:51:EF:D9
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:d8:05:57:5a:3a:cf:2d:9f:40:c0:1e:4c:10:75:3c:b3:f3:
56:33:b9:df:16:ce:f1:2d:b0:a2:01:65:c8:e2:57:89:df:b8:
57:36:d0:2a:3d:f1:87:b1:df:a2:e1:f0:56:59:a8:9b:f7:11:
7a:5e:08:4e:c3:d4:20:d9:88:7c:2f:97:cf:37:ca:f2:cc:37:
9c:66:83:e4:b4:56:6e:90:ea:d5:19:31:ee:1f:76:97:ab:d6:
e5:bd:d2:aa:78:84:50:94:9f:c2:79:e5:36:bd:55:ba:5d:7d:
1f:8d:00:3f:7f:47:16:68:91:07:5f:f7:7c:d7:c2:2e:9c:e6:
ed:a7:9d:42:c2:34:46:c1:75:b6:2a:bb:2f:e8:b2:c9:d4:2d:
7a:24:4e:ee:fd:b6:7e:04:08:d9:bd:54:80:cc:2d:a8:44:35:
59:dc:30:0d:3f:b5:03:21:6b:2b:09:ff:97:41:7b:10:a3:8a:
7d:d7:f6:b8:ac:fd:08:a8:01:93:a2:4f:6b:cf:35:23:c8:14:
cf:2b:f5:0b:b3:bf:89:f1:ca:86:c5:26:cc:70:1f:fa:96:24:
76:34:26:bf:65:62:80:91:f3:44:9c:db:ec:74:96:4c:fb:8c:
f5:83:58:93:af:6a:90:4f:a9:2c:d3:48:00:b7:07:1b:fe:6d:
8b:04:7e:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2i05m9mfDEbldeI403wXDQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YWViYzE1NGE1NmM4MzAyNWNiZDg2NDFhOWFjMzE1Y2I1
NTFjMDYwHhcNMjYwNDE4MjMwMTA5WhcNMjYwNDE5MjMwMTA5WjAzMTEwLwYDVQQD
EyhiN2MyNjM0NzkxYWE2NGNkZThjNGZjY2NiYmQyZDVkZDU3NTFlZmQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotHineNMZz77KHEXDtT7/Rk7GJZp
aHyOLrb5SNa1Knbv1Kehe/1Imf9TpI4UxQIAwV2990VkS2SUMKXVThB2zZLy30a5
bgI+cOJS1MwNZ94mzUiGNeRl5/INlVJ5R5PfeWyiRkzev2C+bevXsQr+tLCJX2ro
KbF91xitvCFKLfx61UNIEn3hnbVEJcucYJpw18NqvoUZ/y6Ksx1p3pOjSvBtkEI5
kyCj5b0hk0WL9SXGjcPE8Bj/jqfcxR9jZm2oTwhQKLw5HxBHkPHvnK3c94dl+nnm
quNid2NBKIoaxwhnMrk7tWD7oQiW/HYktLYpp0jv2wFoKsD76cHAv0S8bwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfCY0eRqmTN6MT8zLvS1d1XUe/ZMB8GA1UdIwQY
MBaAFHSuvBVKVsgwJcvYZBqawxXLVRwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQt
MDdhMWQ2NTU0OGJhLzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQtMDdhMWQ2NTU0OGJh
LzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJdgFV1o6
zy2fQMAeTBB1PLPzVjO53xbO8S2wogFlyOJXid+4VzbQKj3xh7HfouHwVlmom/cR
el4ITsPUINmIfC+XzzfK8sw3nGaD5LRWbpDq1Rkx7h92l6vW5b3SqniEUJSfwnnl
Nr1Vul19H40AP39HFmiRB1/3fNfCLpzm7aedQsI0RsF1tiq7L+iyydQteiRO7v22
fgQI2b1UgMwtqEQ1WdwwDT+1AyFrKwn/l0F7EKOKfdf2uKz9CKgBk6JPa881I8gU
zyv1C7O/ifHKhsUmzHAf+pYkdjQmv2VigJHzRJzb7HSWTPuM9YNYk69qkE+pLNNI
ALcHG/5tiwR+aQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 00:53:45 2026 by rpki-client