Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: M+EmOdEzFewp3tskMwPQAZVRZtGc0+hIs3LtTfOLps8=
Subject key identifier: 11:67:A2:E5:25:57:AD:D1:5E:F0:06:DA:6A:F5:B9:82:32:55:BC:56
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 019F859FBB73ECFE3E66A2286E5ED12DBF83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 19C8
Signing time: Tue 21 Jul 2026 17:01:05 +0000
Manifest this update: Tue 21 Jul 2026 17:01:05 +0000
Manifest next update: Wed 22 Jul 2026 17:01:05 +0000
Files and hashes: 1: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: bNqxNzcUbDgRp9lYmCP1pMWXk0VlkL2jmgbI5J65xMI=)
2: f-oFGYgAScvKIY1myYftcDiH90Y.roa (hash: jXYW4bNPX8ymp0HBTNVmMzodvWsb+eQz9bU87veKdFM=)
3: lBMdn2iQdHUL-cwEEQDm3tFBaok.roa (hash: 92N+I3r+uRw8V9HIiYjj1Tx/aQGHG9DB0so6vrEW//w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 17:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:9f:bb:73:ec:fe:3e:66:a2:28:6e:5e:d1:2d:bf:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Jul 21 17:01:05 2026 GMT
Not After : Jul 22 17:01:05 2026 GMT
Subject: CN=1167a2e52557add15ef006da6af5b9823255bc56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:07:0f:aa:bb:fc:f2:fe:a0:bd:42:b2:79:8c:
ca:6f:f5:ac:3c:c1:27:d0:de:49:3e:6e:de:0b:f4:
ac:ea:78:61:c8:73:3d:25:d9:bc:1b:28:5d:9a:84:
2d:3e:76:35:97:f3:6e:91:e2:fc:e9:e2:27:1c:ad:
33:c7:30:53:e2:bb:aa:45:68:92:e9:96:d5:c1:7b:
09:70:64:f7:67:c1:4c:6c:fe:99:b2:70:c8:a7:84:
8d:41:6c:d5:78:28:3f:22:8d:9f:e9:18:21:5f:10:
40:62:34:15:86:b2:f0:2c:50:7a:42:33:96:3b:db:
37:33:6f:0e:e9:71:12:24:0e:e0:55:b6:a5:51:d3:
7a:e2:9e:b6:ff:3b:1f:9a:49:f6:83:82:0d:d6:7a:
5f:ab:9a:89:02:66:da:ad:e8:bb:ed:90:cf:09:7e:
71:e2:ee:34:20:60:1d:e6:2d:5b:6b:f6:2b:7a:68:
ec:0b:df:12:9c:6e:87:8d:85:e5:14:a6:8d:d7:24:
31:5a:76:08:8b:79:45:40:24:71:44:81:24:25:f3:
e9:b3:ec:cb:a2:ef:8b:31:95:f0:ee:25:68:81:cd:
95:f7:a2:7c:20:dd:3b:be:f3:b2:0b:ba:f7:31:9b:
71:d3:5a:42:ea:af:05:04:a1:97:a9:fc:9c:e2:e8:
0d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:67:A2:E5:25:57:AD:D1:5E:F0:06:DA:6A:F5:B9:82:32:55:BC:56
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:58:a7:ef:b6:ea:50:81:ed:87:5d:fc:c2:14:8d:5f:0d:7e:
22:be:92:9e:82:43:ba:bb:4e:44:fa:c9:1e:cd:2e:89:76:55:
71:d4:92:1c:7d:f0:89:a2:c0:f1:05:2e:fc:dd:46:91:e1:5b:
e2:d5:30:7f:26:d7:ab:e1:9f:40:a6:83:82:a9:51:00:0b:d9:
95:f1:56:b8:bd:a4:ce:3a:d3:00:79:63:c9:6a:8d:21:ed:76:
da:ff:27:02:5e:35:df:7c:45:cd:7f:77:ed:71:b7:c5:14:34:
2c:01:cc:43:ac:55:39:16:c7:cb:48:4b:0f:74:fb:df:0a:fe:
9d:d9:9e:8f:35:f0:c2:78:bd:fd:af:47:14:60:b9:b4:d8:75:
4e:30:8f:e4:4c:fc:3f:71:45:0c:74:40:4e:c4:35:1f:f2:1b:
39:58:4f:ee:f8:c8:c2:58:23:6c:12:e3:e1:59:1f:93:f5:58:
f0:f3:02:a9:14:f3:57:0c:83:95:59:93:39:72:bb:ed:e8:1a:
83:3f:9b:e0:1c:08:05:b2:13:7e:6e:b9:26:e5:f7:bd:3b:2b:
b1:8c:5c:5c:75:27:91:1b:8a:5a:c9:f3:be:a2:09:8b:59:83:
8e:d4:6b:09:8d:3a:32:6e:dd:8e:e9:20:dd:a4:b9:be:e6:d3:
1f:9b:d1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 03:05:43 2026 by rpki-client