Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
File: dLQqbeTgH8MSUNG74yIoEEbuYao.mft (raw, json)
Hash identifier: Nu2cBuYkJz7AIDVnDe6YYbmqyeJa+g/CqlHcBL371PI=
Subject key identifier: EE:08:E7:C9:AB:CD:13:BB:0D:EE:21:EE:D1:94:F3:A1:DF:0B:D0:EF
Authority key identifier: 74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
Certificate issuer: /CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Certificate serial: 019F1A1F0EA62B1093C62C430BD9DAFF1ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
Manifest number: 142C
Signing time: Tue 30 Jun 2026 20:01:10 +0000
Manifest this update: Tue 30 Jun 2026 20:01:10 +0000
Manifest next update: Wed 01 Jul 2026 20:01:10 +0000
Files and hashes: 1: 2snz2cHxMIqDrmWpyQdj5PDHUMA.roa (hash: PDvyyYGhi1AmhDsFwKXgGPleS0592sAJ/29+42mhJtU=)
2: ck9fph3pnGBfD51d6ySumkAZbWw.roa (hash: cePM5hzSAL7gxgiyzP8i8tA4JspwG2EEsvqQZVUTIU0=)
3: dLQqbeTgH8MSUNG74yIoEEbuYao.crl (hash: 3lC1UGmVnW1upAnvM5EV9vGoQ74VBk51GYPakmHbhtw=)
4: zsYC7eTs7CKxZQzMiKBYtW02NU4.roa (hash: zfsiqu/7VESSfUyUGFpkJ4f5HeLFmZSKqmckIw2soSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:1f:0e:a6:2b:10:93:c6:2c:43:0b:d9:da:ff:1a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74b42a6de4e01fc31250d1bbe322281046ee61aa
Validity
Not Before: Jun 30 20:01:10 2026 GMT
Not After : Jul 1 20:01:10 2026 GMT
Subject: CN=ee08e7c9abcd13bb0dee21eed194f3a1df0bd0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f4:2b:04:99:42:cc:fc:20:75:17:64:b2:70:
16:fb:06:f0:ea:bb:a8:17:22:05:2f:45:e7:fa:1d:
8d:7b:08:fc:3e:48:72:e7:8b:25:79:e0:01:bb:dc:
95:3f:0c:8c:49:7d:11:c4:10:62:c8:9a:5e:9b:32:
5a:21:14:93:68:db:f8:5c:31:63:6a:66:d5:71:eb:
60:71:f5:0c:ab:50:d1:40:e9:71:e3:93:2f:c5:05:
ea:d4:1d:12:a2:23:24:93:1d:a0:e1:17:62:0a:bc:
91:7c:2c:e2:46:3c:32:f9:fc:30:cc:c9:33:01:77:
d9:b0:84:4d:aa:b0:f3:c9:2e:1c:af:8e:ef:21:7e:
0c:99:cd:d1:d9:bd:77:d7:b4:1c:93:b2:8e:7d:0e:
4e:5c:9d:6b:be:c2:44:39:16:06:1e:41:db:b1:69:
9c:88:5f:05:cd:2f:50:82:95:02:a0:f9:0e:a7:78:
09:b2:46:bd:78:66:07:63:ff:ba:3e:fe:0b:e4:a0:
ba:05:7e:84:ce:49:a9:df:bc:0d:96:62:10:16:8d:
9f:2c:29:f0:d0:80:2c:07:fa:8f:26:3c:5d:da:6f:
95:ba:27:6f:44:4c:11:b9:28:4e:bd:86:0e:c6:b0:
01:b0:a4:5b:c4:1e:39:30:94:5c:40:c0:9a:e1:ea:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:08:E7:C9:AB:CD:13:BB:0D:EE:21:EE:D1:94:F3:A1:DF:0B:D0:EF
X509v3 Authority Key Identifier:
keyid:74:B4:2A:6D:E4:E0:1F:C3:12:50:D1:BB:E3:22:28:10:46:EE:61:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dLQqbeTgH8MSUNG74yIoEEbuYao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/e5556c-cfea-4972-aaf8-17a1dcdcc6e0/1/dLQqbeTgH8MSUNG74yIoEEbuYao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:ff:9c:3b:dc:69:cb:6b:7a:b3:b1:29:be:40:2f:af:5c:1a:
6d:1f:18:b3:65:ce:31:dd:e9:20:5b:e2:03:54:ba:6d:b7:95:
87:8f:4b:fd:6a:15:e5:02:d3:14:8b:de:93:6b:8a:ac:ba:ad:
1b:b0:c1:3a:24:6d:89:7b:fb:fb:8f:32:d6:7e:1a:df:27:14:
f4:b7:25:83:9b:6b:8f:8e:c0:c0:fa:60:60:d6:83:5f:9e:d2:
25:b7:2d:2f:6d:9a:ad:70:c0:c7:c0:28:ff:6e:42:e2:81:aa:
2c:d6:b9:fd:78:d6:a2:d1:4a:d8:cc:f3:4c:8c:e7:ec:63:0b:
45:83:4d:4c:f6:d9:31:5e:de:22:c7:47:af:c1:8e:ef:dc:ad:
41:bb:0e:59:11:2f:b1:74:e1:6c:cb:78:33:0d:03:cd:11:e1:
f4:fc:82:bd:18:19:0d:ec:4c:8e:6f:16:d0:85:7d:70:13:2e:
9d:65:09:de:46:7e:09:e7:9f:52:fa:c7:64:e8:42:29:ee:14:
93:64:3d:48:5a:45:7b:f8:69:ce:5a:6c:ad:da:3d:53:6d:3e:
1f:e9:c3:cf:24:bf:ec:e1:6d:34:2b:5d:3b:54:2f:35:f2:b5:
46:6d:13:b6:1e:07:24:c7:68:57:42:a9:c3:b8:84:ad:37:5f:
d1:a5:df:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:27 2026 by rpki-client