Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: 7wWQIbrTH94D1wDYSiYxERe4PMxJo+Jz7ef6WbBzG5k=
Subject key identifier: 4A:00:53:E0:0B:C5:C5:F5:8C:C4:C8:D7:74:8D:E1:E2:03:27:C6:53
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 019DA0E4C3E0F977F015B3DB7C9D6D86EFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 18CD
Signing time: Sat 18 Apr 2026 14:00:40 +0000
Manifest this update: Sat 18 Apr 2026 14:00:40 +0000
Manifest next update: Sun 19 Apr 2026 14:00:40 +0000
Files and hashes: 1: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: WZwBITBQCfFBBB08xLJ5h8ehZPSLwsgORd9JjR+2WZw=)
2: f-oFGYgAScvKIY1myYftcDiH90Y.roa (hash: jXYW4bNPX8ymp0HBTNVmMzodvWsb+eQz9bU87veKdFM=)
3: lBMdn2iQdHUL-cwEEQDm3tFBaok.roa (hash: 92N+I3r+uRw8V9HIiYjj1Tx/aQGHG9DB0so6vrEW//w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a0:e4:c3:e0:f9:77:f0:15:b3:db:7c:9d:6d:86:ef:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Apr 18 14:00:40 2026 GMT
Not After : Apr 19 14:00:40 2026 GMT
Subject: CN=4a0053e00bc5c5f58cc4c8d7748de1e20327c653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:5a:5a:04:6e:45:ab:58:17:22:5c:cf:9a:9b:
23:fe:a9:3b:52:da:5d:02:b4:4c:0e:6f:9e:06:cd:
e1:a3:d2:b1:a4:4e:49:04:69:90:cf:07:f5:b8:98:
40:79:53:10:e1:1c:d3:7b:e7:3c:5e:a4:4c:9e:93:
53:49:1b:14:36:1e:fa:4f:0e:19:e8:5f:02:65:03:
7f:52:42:35:03:6d:9b:82:8d:8b:ee:1e:d2:e2:fb:
2a:df:4d:aa:26:cf:2f:b5:22:70:49:59:23:aa:3d:
5e:66:8f:f9:7f:09:c5:86:ba:ad:b7:d7:e9:c3:b0:
4d:eb:74:77:7e:11:6b:be:b5:d7:0e:f4:c3:06:17:
40:76:8b:13:5c:54:40:fd:ec:f1:5e:55:c4:b0:1d:
7a:52:9a:96:95:8e:9b:4b:e5:9c:31:76:43:d7:4d:
66:0d:32:60:bd:d9:06:90:9d:3e:b9:af:78:e7:ce:
5b:6a:1b:44:a5:c6:b1:04:15:4c:6e:cb:d4:6c:3c:
76:53:59:09:8e:40:96:f9:2d:48:98:b7:e9:d4:da:
b6:79:1a:e6:57:81:24:86:91:78:a2:5f:eb:4e:8e:
62:74:ca:a2:f9:02:99:92:aa:c7:d6:17:a9:21:02:
2b:c5:f4:f1:40:cb:e1:d9:b0:91:ec:47:0c:d1:b8:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:00:53:E0:0B:C5:C5:F5:8C:C4:C8:D7:74:8D:E1:E2:03:27:C6:53
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:11:45:72:a9:07:7a:43:1f:50:fe:e7:79:36:39:6c:32:b5:
cf:51:1d:71:1a:a7:9d:46:05:0b:3d:69:cd:e8:c2:c5:24:24:
8f:7a:ec:3a:74:72:6e:2d:e1:e3:d7:44:61:fa:ce:54:86:0e:
d2:07:fd:9d:05:de:e2:9d:62:77:ed:67:b2:95:3d:cb:e3:e9:
fe:76:fc:e2:2e:97:a7:49:39:22:2f:13:16:95:fc:5c:f2:fa:
b3:0f:cd:e1:59:cb:e9:65:2b:b7:2d:a2:9d:69:f8:5d:bd:83:
56:cb:da:6a:dd:56:f3:a1:52:b0:7a:89:10:85:48:e9:59:12:
0d:08:27:75:55:be:72:ff:c4:d0:15:86:e2:4e:f5:40:48:d4:
c1:a3:74:4c:0e:4d:f0:eb:3b:a9:ef:fd:c8:72:14:c0:ec:66:
9b:7c:ee:78:19:6f:08:13:78:c0:84:7d:ab:9d:b1:95:b1:16:
54:e7:14:95:aa:0c:32:cd:ee:4a:fb:28:f9:b6:d8:04:17:df:
1c:b4:04:0f:93:8c:f0:26:b5:5a:6e:fc:1f:ba:9c:22:08:2b:
dc:fb:38:7c:98:58:df:fb:c5:a7:99:00:f4:0a:81:c5:66:75:
95:2c:31:e3:c5:82:1e:ad:72:cf:a9:eb:2b:58:04:d7:fe:a4:
73:fd:fb:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 23:44:24 2026 by rpki-client