Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: uU3oAc4pum/UXUfW4PL8pffFzviQ9+fRS5YcKd6oqiI=
Subject key identifier: 0E:E3:58:21:DF:BE:D4:33:AE:3C:04:7B:BB:61:5E:E3:42:13:8E:FF
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 019E905C61A5462FE7764D8B6A996401474D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 1949
Signing time: Thu 04 Jun 2026 02:00:33 +0000
Manifest this update: Thu 04 Jun 2026 02:00:33 +0000
Manifest next update: Fri 05 Jun 2026 02:00:33 +0000
Files and hashes: 1: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: OPhloAVPO46ATiheOKRTvTVRNZTyjW3/hkVDOmD+ous=)
2: f-oFGYgAScvKIY1myYftcDiH90Y.roa (hash: jXYW4bNPX8ymp0HBTNVmMzodvWsb+eQz9bU87veKdFM=)
3: lBMdn2iQdHUL-cwEEQDm3tFBaok.roa (hash: 92N+I3r+uRw8V9HIiYjj1Tx/aQGHG9DB0so6vrEW//w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 02:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:90:5c:61:a5:46:2f:e7:76:4d:8b:6a:99:64:01:47:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Jun 4 02:00:33 2026 GMT
Not After : Jun 5 02:00:33 2026 GMT
Subject: CN=0ee35821dfbed433ae3c047bbb615ee342138eff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:26:b3:0c:30:ad:c0:ac:05:bc:a3:2e:cd:a8:
5c:10:56:a7:57:29:7e:e8:a2:b0:5f:c8:d9:a0:18:
d0:9d:b8:95:51:b9:d6:d3:91:18:c0:a5:54:74:ab:
30:11:0c:3a:09:4d:f4:a1:54:b4:46:09:ff:f2:3b:
6e:2c:b9:5a:e0:39:98:6a:c0:ca:9d:fd:15:82:6e:
3c:d2:1b:45:e0:c9:b9:5c:7d:e9:42:de:87:bc:e5:
3b:81:c8:05:03:d0:c4:2e:87:c2:71:90:e3:f5:5e:
1e:c5:2b:ee:80:47:6b:7a:7d:6b:fe:69:6e:60:c1:
40:02:f9:75:39:72:31:2c:96:72:14:67:92:f2:a4:
aa:4d:42:81:56:7d:bd:67:6a:4a:0f:a9:ab:71:99:
5b:91:bc:e3:97:a8:31:c0:5e:6e:ab:5a:fb:10:a2:
51:11:63:2a:60:a6:e0:91:5f:af:65:c8:91:f7:99:
b3:cb:c7:44:e8:08:42:e8:c8:e1:1c:a1:d3:7a:0e:
76:54:a2:20:14:27:9e:09:ff:50:54:54:73:f8:4f:
69:44:34:9a:0a:44:aa:75:d7:21:98:6c:86:14:15:
ef:75:2f:89:73:0a:42:f5:db:10:d5:de:ee:0f:b9:
78:c2:47:0e:09:5a:cc:51:b9:39:ab:c4:ad:29:7f:
97:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:E3:58:21:DF:BE:D4:33:AE:3C:04:7B:BB:61:5E:E3:42:13:8E:FF
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c7:7a:c1:ee:17:9f:b2:86:02:16:78:0b:e8:0d:fc:c2:56:
c3:14:de:e6:be:e4:ba:ba:b8:68:79:ab:03:46:5d:1e:a1:22:
9d:7d:b3:29:1d:0d:07:77:15:93:f2:e4:a0:c1:f3:2c:6b:d7:
8f:d2:9e:2c:24:06:3c:7a:5e:19:96:ed:d4:1f:2d:1a:e8:8a:
81:d0:06:42:a2:a2:49:0a:62:48:f1:49:fc:94:52:c3:e5:3c:
26:70:e2:93:e1:17:ba:59:ce:fe:17:df:f5:6d:ab:a9:a3:ed:
1b:b0:d9:38:c1:3c:93:eb:42:b6:2c:d0:70:15:28:69:f8:bc:
30:e3:17:00:5f:05:49:3b:b8:de:b0:3d:af:a0:2b:57:9b:17:
b8:2c:fc:19:d6:1a:89:dd:01:c4:e6:ae:4f:e1:33:65:e3:96:
d0:07:f9:cf:25:5c:55:f1:32:48:2f:40:b6:c2:ac:0a:eb:b9:
17:e3:c6:e8:9d:16:5a:75:f0:6a:b5:9c:4e:0c:ab:66:8f:bf:
d0:49:c3:1b:3a:ec:b0:5a:3d:39:3f:08:eb:22:6a:85:32:d7:
f8:70:5d:08:9d:7c:0e:86:a5:63:94:47:2a:9c:21:8d:b9:69:
04:b2:77:e6:7a:3e:14:b4:07:e0:ea:b9:a4:d2:3b:15:d4:82:
66:f6:62:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6QXGGlRi/ndk2LaplkAUdNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YWViYzE1NGE1NmM4MzAyNWNiZDg2NDFhOWFjMzE1Y2I1
NTFjMDYwHhcNMjYwNjA0MDIwMDMzWhcNMjYwNjA1MDIwMDMzWjAzMTEwLwYDVQQD
EygwZWUzNTgyMWRmYmVkNDMzYWUzYzA0N2JiYjYxNWVlMzQyMTM4ZWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyazDDCtwKwFvKMuzahcEFanVyl+
6KKwX8jZoBjQnbiVUbnW05EYwKVUdKswEQw6CU30oVS0Rgn/8jtuLLla4DmYasDK
nf0Vgm480htF4Mm5XH3pQt6HvOU7gcgFA9DELofCcZDj9V4exSvugEdren1r/mlu
YMFAAvl1OXIxLJZyFGeS8qSqTUKBVn29Z2pKD6mrcZlbkbzjl6gxwF5uq1r7EKJR
EWMqYKbgkV+vZciR95mzy8dE6AhC6MjhHKHTeg52VKIgFCeeCf9QVFRz+E9pRDSa
CkSqddchmGyGFBXvdS+JcwpC9dsQ1d7uD7l4wkcOCVrMUbk5q8StKX+XQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7jWCHfvtQzrjwEe7thXuNCE47/MB8GA1UdIwQY
MBaAFHSuvBVKVsgwJcvYZBqawxXLVRwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQt
MDdhMWQ2NTU0OGJhLzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQtMDdhMWQ2NTU0OGJh
LzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVcd6we4X
n7KGAhZ4C+gN/MJWwxTe5r7kurq4aHmrA0ZdHqEinX2zKR0NB3cVk/LkoMHzLGvX
j9KeLCQGPHpeGZbt1B8tGuiKgdAGQqKiSQpiSPFJ/JRSw+U8JnDik+EXulnO/hff
9W2rqaPtG7DZOME8k+tCtizQcBUoafi8MOMXAF8FSTu43rA9r6ArV5sXuCz8GdYa
id0BxOauT+EzZeOW0Af5zyVcVfEySC9AtsKsCuu5F+PG6J0WWnXwarWcTgyrZo+/
0EnDGzrssFo9OT8I6yJqhTLX+HBdCJ18DoalY5RHKpwhjblpBLJ35no+FLQH4Oq5
pNI7FdSCZvZiHw==
-----END CERTIFICATE-----
Generated at Thu Jun 4 12:20:48 2026 by rpki-client