Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
File: dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft (raw, json)
Hash identifier: jo/M06ZWjxJCBykyNy1k0T4V74XAmz15jO/FBi88plM=
Subject key identifier: 87:B7:C3:F8:D5:3A:B0:A0:B3:C0:19:99:F5:5F:D6:81:F3:7F:78:C8
Authority key identifier: 74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
Certificate issuer: /CN=74ae941a681c1586379e07247dcc19f3f41035d8
Certificate serial: 01A03E5F71563AAC555B5FC453194E205069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
Manifest number: 11BF
Signing time: Wed 26 Aug 2026 14:00:37 +0000
Manifest this update: Wed 26 Aug 2026 14:00:37 +0000
Manifest next update: Thu 27 Aug 2026 14:00:37 +0000
Files and hashes: 1: Jf9n1jU0iNZqHiPFX0khcO8APqY.asa (hash: HmCAO4LPXkIwoXgwKfzir3g7UxPnF0W1mI++hpZZWhw=)
2: OWX2u3h86crIqlZrJEDgTq1vnqE.roa (hash: LsGVcbsq1OthlSGdFhoXpBIhd+P4m0nMhxD/QuTqmCw=)
3: dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl (hash: 8DWCGXSqhjv7WqEvBujKTcq0AXmQmuSgnRW1xujxDjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:5f:71:56:3a:ac:55:5b:5f:c4:53:19:4e:20:50:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74ae941a681c1586379e07247dcc19f3f41035d8
Validity
Not Before: Aug 26 14:00:37 2026 GMT
Not After : Aug 27 14:00:37 2026 GMT
Subject: CN=87b7c3f8d53ab0a0b3c01999f55fd681f37f78c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:93:57:66:82:80:f6:51:53:e6:fa:18:58:67:
44:5a:b4:e8:c9:b3:81:50:3c:22:b4:de:59:b1:45:
bc:59:32:d8:de:0e:67:4b:43:8a:74:50:ba:ef:95:
82:ee:7e:04:bd:ba:50:54:05:d4:f9:09:82:30:a5:
52:ec:97:c1:67:07:eb:46:a8:fd:e8:1c:8d:dc:24:
e7:2a:b7:d8:a7:73:50:7e:ff:9d:25:a0:5d:f2:c2:
13:72:44:2d:21:8e:34:e0:61:d6:02:f9:c9:a0:fa:
89:dd:0b:eb:e8:33:ea:dc:05:55:05:29:f3:4c:d5:
e2:24:db:67:71:27:db:4a:d8:16:0b:b3:f1:ed:29:
07:57:1a:8f:76:00:e5:4a:95:e8:61:0d:c8:30:0b:
88:4f:42:60:71:65:d1:4c:20:99:23:cc:7c:45:31:
3a:61:7b:21:f6:a3:c1:89:91:5c:94:84:c7:2c:f5:
7b:d5:5c:aa:a5:8a:ed:94:4d:af:60:58:9c:e9:f8:
f9:4a:33:c4:ee:c9:cc:e4:0d:22:7a:dd:2f:9e:cd:
51:55:02:14:54:50:6d:04:9e:53:40:d8:77:74:f3:
85:bb:9f:f3:d8:ed:a9:25:1a:90:fa:23:ed:d0:35:
8a:b6:4b:27:eb:bd:3b:6e:a5:f3:fd:fa:e5:31:1a:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B7:C3:F8:D5:3A:B0:A0:B3:C0:19:99:F5:5F:D6:81:F3:7F:78:C8
X509v3 Authority Key Identifier:
keyid:74:AE:94:1A:68:1C:15:86:37:9E:07:24:7D:CC:19:F3:F4:10:35:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK6UGmgcFYY3ngckfcwZ8_QQNdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/14e4c2-8a98-456e-9612-9429da87bd50/1/dK6UGmgcFYY3ngckfcwZ8_QQNdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:73:98:01:19:d7:27:69:4b:26:46:0b:8d:18:66:a7:bf:48:
60:4f:9c:52:1c:d3:a1:bb:cc:5a:a3:13:a8:e3:ae:1c:0c:72:
dd:35:54:79:0b:8f:23:97:a3:1d:a7:f8:ee:5e:b5:36:be:22:
50:8e:75:4e:bb:59:84:c3:99:20:9c:77:e3:0b:bb:dd:5e:09:
eb:ad:1f:1e:be:24:c1:a5:1d:74:c0:2e:51:ed:2c:48:0a:b9:
e0:39:8d:83:5c:09:2d:69:55:5c:38:4a:90:34:29:f2:6d:24:
92:29:28:c2:42:3c:30:7d:78:1c:e0:9c:13:c2:7e:f5:68:4d:
dd:52:52:de:2d:fd:9f:86:b0:f3:9c:26:c9:9a:6b:55:3d:37:
84:62:89:9f:b5:4a:54:b6:e6:61:ff:06:05:01:e5:76:55:51:
67:89:0b:7c:51:0a:74:55:4f:8f:4d:e8:5f:5f:39:9c:34:98:
6b:4e:e6:6a:dc:49:bc:fb:c6:54:9d:03:42:40:d9:47:78:f1:
6a:07:b1:df:bf:18:99:a2:99:8c:15:1c:5d:85:ac:c9:12:fc:
94:2b:19:cf:88:a8:64:4a:56:cc:c8:48:b2:7b:8b:33:db:e6:
3d:c3:f2:24:7f:ae:49:b7:58:a6:04:4a:a2:32:9b:5f:39:7e:
af:a6:bf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 16:11:01 2026 by rpki-client