Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: Fc8J4U29jVeKS7yOq2tfSRM/c4RiJuFoFTzVmyIXes4=
Subject key identifier: 84:DA:D5:99:9A:F5:0A:42:E5:3A:8E:19:FD:71:89:99:25:56:C6:D5
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 019E2926D898B8E9009D83409D765274CC87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 10AA
Signing time: Fri 15 May 2026 01:01:12 +0000
Manifest this update: Fri 15 May 2026 01:01:12 +0000
Manifest next update: Sat 16 May 2026 01:01:12 +0000
Files and hashes: 1: DvoMmaNQLR-F0c_ZQLqJj27XJNw.asa (hash: mEX2A8L8N6B6jxBchbjmo4MApYmBl5md4ZvzoDkGIHk=)
2: OWX2u3h86crIqlZrJEDgTq1vnqE.roa (hash: LsGVcbsq1OthlSGdFhoXpBIhd+P4m0nMhxD/QuTqmCw=)
3: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: 77jGIlGkN6v+ragtXwbpiuZmrMeO6txUPEwp1TSHayI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:26:d8:98:b8:e9:00:9d:83:40:9d:76:52:74:cc:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: May 15 01:01:12 2026 GMT
Not After : May 16 01:01:12 2026 GMT
Subject: CN=84dad5999af50a42e53a8e19fd7189992556c6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e2:a1:b7:35:f1:55:8b:78:dd:0c:ec:2a:30:
c4:8b:d9:3e:58:31:37:1e:63:2c:22:2f:9d:c7:c7:
3d:8c:21:c3:15:a3:64:5d:04:ba:03:04:28:b5:3d:
7a:b7:a6:a9:de:71:d3:a0:93:f9:ae:7d:bf:ea:79:
70:21:49:d2:10:98:56:c5:be:41:b9:d0:43:64:dd:
34:89:4a:f8:24:50:b4:61:2f:c2:b4:c6:36:d5:d2:
ba:e7:a8:fe:8d:de:de:e2:b1:af:d8:77:34:4b:2e:
2b:39:b2:d9:1e:bc:4b:2a:42:f9:c4:dd:e2:bc:aa:
90:e9:01:53:75:d2:e0:fb:8e:46:a9:77:86:1c:a0:
65:5a:8b:7e:ac:70:8f:b3:cc:31:02:3a:28:25:9e:
1f:99:86:e9:3a:0e:52:54:89:79:a4:5c:89:3e:43:
40:32:25:ac:0a:be:7f:1f:a4:66:84:b8:a3:9a:9c:
9e:c4:c1:68:b7:b6:c6:65:ed:22:fa:42:05:9e:49:
14:c9:92:28:b3:90:7f:47:99:4c:52:38:0f:10:3a:
67:ad:13:1c:94:65:9f:04:5d:76:19:cb:41:60:60:
57:13:97:0b:2d:91:54:7a:ac:8d:90:18:38:01:7b:
04:4c:f9:c9:30:a3:b4:4a:10:8a:08:1b:16:2e:23:
6c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DA:D5:99:9A:F5:0A:42:E5:3A:8E:19:FD:71:89:99:25:56:C6:D5
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6a:1e:51:f4:ae:be:0c:f2:a2:55:d0:66:dd:06:84:45:4c:
80:65:8a:07:71:cd:27:6a:99:47:4e:fe:3f:fe:c8:d4:ad:fd:
9f:2a:49:74:41:77:43:7f:41:fc:fd:94:9b:4e:1c:c6:98:67:
84:47:3e:de:56:6c:d0:f5:05:06:de:0a:54:c3:6c:b7:b0:ee:
8c:98:88:9d:36:bc:55:a6:12:72:dc:ec:41:df:c8:a2:d7:29:
6f:3d:78:61:1f:8f:51:ca:a9:dc:83:07:15:ba:0b:fa:69:dc:
77:f6:99:71:90:02:64:93:cd:2f:7e:dc:f7:dd:31:6d:cc:b9:
30:d8:2c:2e:fe:36:91:b4:c4:1f:0e:6d:b3:66:94:eb:70:3a:
3c:cb:70:29:aa:2d:09:0a:46:d2:08:dd:b3:8b:14:fe:32:75:
26:ad:df:73:fb:d0:c3:4f:f5:95:cc:bb:16:17:88:de:c4:d4:
02:3a:ac:f0:b6:6d:70:14:ae:f6:b6:e3:0f:a0:ef:3a:08:23:
aa:d5:1f:86:bc:4f:5f:26:64:8d:32:ec:6c:6e:4c:5e:44:5e:
a2:20:d3:c2:e5:7f:83:a7:33:dc:39:84:92:c3:a4:54:38:ec:
55:0d:7c:9f:40:f0:18:89:e8:f2:f9:39:14:5b:bc:33:2a:0e:
09:26:f9:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:19:52 2026 by rpki-client