Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: 0cYwuFwdUNB7EKZ8skjkDpG4pQAzErr87/4Ks36GXhs=
Subject key identifier: 86:6E:21:B2:E2:BA:14:CE:59:DF:FF:55:B1:74:58:77:E9:7C:8C:C9
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 019F10E58180199ED94C9B1C20EB44BB5BDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 1122
Signing time: Mon 29 Jun 2026 01:01:44 +0000
Manifest this update: Mon 29 Jun 2026 01:01:44 +0000
Manifest next update: Tue 30 Jun 2026 01:01:44 +0000
Files and hashes: 1: DvoMmaNQLR-F0c_ZQLqJj27XJNw.asa (hash: mEX2A8L8N6B6jxBchbjmo4MApYmBl5md4ZvzoDkGIHk=)
2: OWX2u3h86crIqlZrJEDgTq1vnqE.roa (hash: LsGVcbsq1OthlSGdFhoXpBIhd+P4m0nMhxD/QuTqmCw=)
3: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: tPJWlJ8v3j2jH8A8tTmnw967sB0OfjhA2pj8JJkDk5o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 01:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:e5:81:80:19:9e:d9:4c:9b:1c:20:eb:44:bb:5b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Jun 29 01:01:44 2026 GMT
Not After : Jun 30 01:01:44 2026 GMT
Subject: CN=866e21b2e2ba14ce59dfff55b1745877e97c8cc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:8e:71:5f:8f:7d:e6:0c:0f:68:bd:75:dd:
1b:9f:91:d7:48:23:25:2c:95:ab:ad:43:31:c8:ce:
e3:7c:50:dd:76:13:79:83:a9:8b:0f:c6:f2:4c:cf:
73:3f:15:82:41:c1:01:64:f5:5d:3d:fc:df:31:77:
3f:51:9b:11:c8:36:a7:04:1d:8e:3d:cd:f0:f1:50:
eb:e4:8a:bb:e6:2d:71:d1:2c:ad:0c:04:63:5c:58:
5b:3d:04:64:72:42:95:35:80:5a:39:0a:96:0e:f2:
16:73:cf:6e:54:35:4e:18:01:3f:d4:6b:04:da:7a:
16:d9:ec:df:09:5f:81:d2:8c:00:ea:d6:09:45:ca:
ed:58:27:6f:8a:ac:dc:95:de:71:cf:d1:be:ec:53:
fd:01:7e:17:52:80:ed:56:6f:9c:03:df:36:00:45:
33:96:8a:01:02:c0:97:b7:e0:86:ae:6f:8e:2d:86:
93:dc:89:c6:ef:be:81:5e:14:a1:5c:29:eb:c1:cd:
61:14:52:1a:72:f3:c4:08:6d:d1:20:22:58:fa:bf:
e2:61:68:5c:d0:73:d3:63:26:56:6e:44:2f:0c:d8:
3e:64:e0:7a:0c:cf:b3:ab:1f:ea:27:e2:25:c4:72:
8f:df:93:d2:99:26:38:b7:a7:56:b8:5a:fe:f6:a4:
7b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:6E:21:B2:E2:BA:14:CE:59:DF:FF:55:B1:74:58:77:E9:7C:8C:C9
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:9a:07:c8:ca:c3:77:db:a6:91:ca:ad:b6:e9:4d:b9:2f:59:
ba:cd:35:a5:69:ae:2c:3f:37:d1:44:82:d0:c1:ed:9d:80:5c:
15:85:17:a6:27:ec:d7:82:dc:ac:0f:0e:70:52:19:40:d7:4e:
51:80:4c:61:07:c8:b8:8a:3c:13:b0:23:8e:1e:59:cd:9f:60:
89:57:7c:e3:5d:f1:59:cf:2d:0b:34:e3:53:08:16:50:0a:55:
e6:b0:b3:00:b4:ff:15:70:57:ff:08:eb:b1:ae:5d:18:ad:7c:
c0:57:f8:79:14:f9:a6:f5:e9:39:be:69:f6:31:5b:39:ec:3d:
57:9b:66:17:b1:e3:73:56:ba:47:a1:bc:c2:c9:80:ff:21:9b:
91:f5:6b:33:05:75:e5:cb:c1:dd:0d:8a:ad:bc:78:ae:09:ee:
ac:9e:bd:53:dc:95:f2:ac:dd:ae:d1:f1:46:79:ca:36:3f:63:
b4:bd:64:d3:63:02:8c:f2:84:cc:bf:4b:14:8b:c5:57:b1:c4:
fb:a2:ba:15:b5:40:6f:6c:7f:a9:5c:1a:d5:25:1e:42:b2:a4:
81:3d:30:a0:c9:44:0d:3b:3b:ea:f5:b5:37:a0:98:26:0c:d6:
96:9d:8c:bc:e2:5f:c3:46:a3:49:41:e3:b5:0f:7e:52:02:61:
00:26:d3:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8Q5YGAGZ7ZTJscIOtEu1vbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YWU5NDFhNjgxYzE1ODYzNzllMDcyNDdkY2MxOWYzZjQx
MDM1ZDgwHhcNMjYwNjI5MDEwMTQ0WhcNMjYwNjMwMDEwMTQ0WjAzMTEwLwYDVQQD
Eyg4NjZlMjFiMmUyYmExNGNlNTlkZmZmNTViMTc0NTg3N2U5N2M4Y2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2quOcV+PfeYMD2i9dd0bn5HXSCMl
LJWrrUMxyM7jfFDddhN5g6mLD8byTM9zPxWCQcEBZPVdPfzfMXc/UZsRyDanBB2O
Pc3w8VDr5Iq75i1x0SytDARjXFhbPQRkckKVNYBaOQqWDvIWc89uVDVOGAE/1GsE
2noW2ezfCV+B0owA6tYJRcrtWCdviqzcld5xz9G+7FP9AX4XUoDtVm+cA982AEUz
looBAsCXt+CGrm+OLYaT3InG776BXhShXCnrwc1hFFIacvPECG3RICJY+r/iYWhc
0HPTYyZWbkQvDNg+ZOB6DM+zqx/qJ+IlxHKP35PSmSY4t6dWuFr+9qR7QQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZuIbLiuhTOWd//VbF0WHfpfIzJMB8GA1UdIwQY
MBaAFHSulBpoHBWGN54HJH3MGfP0EDXYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEs2VUdtZ2NGWVkzbmdja2Zjd1o4X1FRTmRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8xNGU0YzItOGE5OC00NTZlLTk2MTIt
OTQyOWRhODdiZDUwLzEvZEs2VUdtZ2NGWVkzbmdja2Zjd1o4X1FRTmRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8xNGU0YzItOGE5OC00NTZlLTk2MTItOTQyOWRhODdiZDUw
LzEvZEs2VUdtZ2NGWVkzbmdja2Zjd1o4X1FRTmRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5oHyMrD
d9umkcqttulNuS9Zus01pWmuLD830USC0MHtnYBcFYUXpifs14LcrA8OcFIZQNdO
UYBMYQfIuIo8E7Ajjh5ZzZ9giVd8413xWc8tCzTjUwgWUApV5rCzALT/FXBX/wjr
sa5dGK18wFf4eRT5pvXpOb5p9jFbOew9V5tmF7Hjc1a6R6G8wsmA/yGbkfVrMwV1
5cvB3Q2Krbx4rgnurJ69U9yV8qzdrtHxRnnKNj9jtL1k02MCjPKEzL9LFIvFV7HE
+6K6FbVAb2x/qVwa1SUeQrKkgT0woMlEDTs76vW1N6CYJgzWlp2MvOJfw0ajSUHj
tQ9+UgJhACbTFw==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:39:25 2026 by rpki-client