Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: WgWKCkaerMOfNaifANa9/L29yWf2Ypco5k1+bmBnkt8=
Subject key identifier: 05:AD:8E:3E:8F:E2:5B:D5:CA:A5:B1:BB:A9:EA:F1:52:8A:43:60:17
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 01A18751DC086DBE6802E93E21471429E721
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 1AD2
Signing time: Thu 29 Oct 2026 11:00:51 +0000
Manifest this update: Thu 29 Oct 2026 11:00:51 +0000
Manifest next update: Fri 30 Oct 2026 11:00:51 +0000
Files and hashes: 1: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: C9Aw01i+n9Oc52onhEa/VN0sR5TqnmJfPtrWF14aXas=)
2: f-oFGYgAScvKIY1myYftcDiH90Y.roa (hash: jXYW4bNPX8ymp0HBTNVmMzodvWsb+eQz9bU87veKdFM=)
3: lBMdn2iQdHUL-cwEEQDm3tFBaok.roa (hash: 92N+I3r+uRw8V9HIiYjj1Tx/aQGHG9DB0so6vrEW//w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 11:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:51:dc:08:6d:be:68:02:e9:3e:21:47:14:29:e7:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Oct 29 11:00:51 2026 GMT
Not After : Oct 30 11:00:51 2026 GMT
Subject: CN=05ad8e3e8fe25bd5caa5b1bba9eaf1528a436017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:49:7c:e7:e4:97:f4:41:14:fd:c2:1f:7a:a7:
01:70:ad:71:95:08:56:d6:80:45:6c:f6:b6:ba:47:
de:c6:cd:54:01:f9:f5:95:1d:36:08:a6:10:9f:2f:
34:13:8d:cd:81:98:5b:35:11:e3:c6:2d:23:ea:96:
56:2a:d0:a9:59:d9:92:21:06:7b:11:65:81:cd:81:
cf:68:08:3d:70:80:6a:19:7f:d1:7a:17:fc:d2:92:
95:09:08:52:66:ed:13:85:05:fb:92:01:53:f6:20:
c3:b1:3a:9c:b0:10:fb:94:19:d7:89:31:3a:72:28:
59:29:bc:48:25:5b:9c:a2:76:46:44:d1:29:6f:ed:
d9:b8:f8:f7:e0:2c:f0:c0:ba:59:9f:e6:68:a7:d6:
12:db:ea:82:d0:a6:0b:70:5c:f4:fe:63:4a:8d:d1:
b1:f3:ce:c4:77:9b:b8:7f:14:ae:b6:31:e3:61:e3:
2c:6d:a1:86:58:31:a6:1d:3a:ac:48:62:61:24:cd:
5c:65:3e:d3:d3:e2:75:d9:fe:0e:7d:a7:7d:ec:a8:
19:20:96:9c:41:75:78:51:6d:1b:27:83:82:ff:c6:
b4:4b:8a:bb:8d:33:f1:0b:38:12:f1:b9:06:7e:23:
ff:cd:1a:bb:af:12:a9:3d:f1:ae:f0:1c:3c:14:d3:
6e:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:AD:8E:3E:8F:E2:5B:D5:CA:A5:B1:BB:A9:EA:F1:52:8A:43:60:17
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:97:5b:ee:19:af:34:7b:af:58:92:10:71:d0:a6:d8:bb:8b:
53:c8:85:82:ee:15:1c:80:6a:06:d5:f7:d5:2d:e5:1b:0e:77:
8b:66:89:d4:2b:ea:cf:30:ed:7f:6b:50:79:66:45:25:91:99:
e4:33:31:ae:eb:a4:6a:f7:ac:7b:10:ba:95:ab:38:ba:45:2b:
55:0d:68:ad:7d:7f:3d:76:0c:8a:35:b7:33:5b:94:32:82:11:
95:25:2f:a6:f5:a3:fc:f1:63:ec:28:67:54:93:50:62:52:58:
b6:a8:4c:1d:d3:71:c5:43:b7:0a:f9:72:f0:a4:b7:69:1f:95:
ad:aa:b4:0c:57:c1:5f:f7:b3:a1:3d:4d:eb:f0:67:c5:eb:d6:
89:75:47:fe:30:d7:d3:d5:fc:ae:08:46:71:58:01:64:02:1a:
10:43:47:01:cd:22:fe:7f:da:82:a0:e3:41:06:56:36:ad:72:
a0:42:57:2d:4d:df:54:02:84:bc:c6:7e:53:17:01:d5:94:34:
c3:a1:ea:c2:77:3b:8f:41:e5:f2:2c:08:bf:e7:d1:bf:81:9e:
d7:9d:f7:32:88:ab:a1:54:ab:07:a0:b8:29:33:f2:c3:43:29:
1f:8f:4c:b4:47:e8:b2:0f:98:98:e7:10:ab:60:b4:28:b5:ee:
3c:56:b0:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 22:19:48 2026 by rpki-client