Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier: gkjD+Sp6hbWIxMZBiDzKUQap+jfl6qWVD2evPymAMRQ=
Subject key identifier: F7:1A:AE:39:73:85:02:86:89:A9:68:7D:11:C2:03:E2:2F:A3:F1:99
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 019EB98F22BD0CAC2D579A7DC813F1E6A032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number: 0868
Signing time: Fri 12 Jun 2026 02:00:25 +0000
Manifest this update: Fri 12 Jun 2026 02:00:25 +0000
Manifest next update: Sat 13 Jun 2026 02:00:25 +0000
Files and hashes: 1: S_Jp9m9blIUps0OicsJ0YR9eOvE.roa (hash: Be16CYxyexdW5EkOG7OmNRTbUwOGD3q//e7OhhleAMQ=)
2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: CM90msO6XfdsD7jcUEQPY9hr3hRL35ZpcJJrU2ALyTw=)
3: yIOWYvs8zmXxlBajX3odsYxOM8Y.roa (hash: d8ux5xGWiDuWJb9M/rhcfhWw34lH4Et949GrjMpaIAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:22:bd:0c:ac:2d:57:9a:7d:c8:13:f1:e6:a0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Jun 12 02:00:25 2026 GMT
Not After : Jun 13 02:00:25 2026 GMT
Subject: CN=f71aae397385028689a9687d11c203e22fa3f199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:cf:1c:e3:e7:36:44:ec:ef:97:f4:62:5a:
78:da:1c:b2:46:1d:40:6a:fb:ac:55:b9:52:3d:5b:
84:91:2d:58:c0:9b:2d:83:1b:21:92:98:93:3d:81:
93:45:f2:6a:fc:e9:2d:f9:aa:42:a7:b1:32:79:0a:
c2:36:f8:17:04:e8:f5:56:d5:6a:a6:0a:0f:0c:bd:
9a:60:97:6e:b9:41:d4:f3:75:fb:0e:5a:f6:cf:3b:
39:c3:d1:73:38:2e:90:e4:c8:c0:70:9e:b1:b4:39:
0b:4b:10:17:7a:3b:27:a2:fc:85:9b:ee:e8:ac:c7:
f9:84:13:19:36:58:70:10:8a:1e:90:d4:3f:5c:ac:
3b:64:a8:38:d4:bf:2b:7c:da:31:26:8a:a9:48:cb:
7b:6f:9b:a6:2d:85:8d:62:0e:50:6b:f3:80:b3:0e:
ca:5a:b9:30:49:11:f3:85:10:21:ab:95:9b:c3:8c:
3c:84:12:f8:b2:5a:70:53:7c:22:92:f7:42:c9:22:
67:a7:c5:50:75:f5:5a:53:69:8f:c0:81:77:a9:36:
8f:51:50:35:be:54:9a:73:d6:6b:57:9b:01:2b:b3:
5a:54:59:ca:2f:04:75:df:da:4c:22:03:cf:e3:bb:
49:af:e1:f1:d5:39:5d:42:63:5e:f3:1f:a5:4c:1d:
60:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1A:AE:39:73:85:02:86:89:A9:68:7D:11:C2:03:E2:2F:A3:F1:99
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:50:61:21:cd:d0:19:ea:1d:c9:f7:0f:0a:1f:9e:38:29:87:
0a:bf:00:f7:3d:ad:a0:dd:7c:7e:74:1e:06:d2:bd:e3:bc:e1:
2c:29:ec:08:d3:04:cd:83:43:97:51:b2:16:83:55:34:f7:c7:
be:55:7f:5e:17:ad:65:33:35:9f:7f:b7:0e:2c:94:fe:e0:be:
40:30:d6:4f:7f:00:99:bd:09:35:43:b3:a0:cd:f5:31:4a:ab:
89:d1:34:7d:f2:19:ad:c0:25:9d:f3:34:ca:ed:e9:24:15:70:
f8:5d:ba:45:34:0a:9b:cb:dc:9f:72:fe:0a:5c:37:c0:d9:19:
1d:96:ed:25:9f:18:9c:d0:67:1d:c6:3f:11:99:e1:6b:7a:41:
8f:f3:c3:a8:6e:99:35:e8:22:da:3c:f8:40:54:51:6b:c8:d2:
92:c1:89:f7:30:3e:94:38:be:5b:e9:89:82:f8:b4:ee:9d:2d:
f8:3a:67:ce:43:f2:9f:92:df:ca:33:89:39:ef:5e:6f:1c:a7:
58:38:36:a7:df:b9:56:d7:7d:76:00:90:46:17:5f:31:fc:4a:
c1:fc:72:dd:76:a9:99:c3:84:7e:5b:10:d0:71:5b:45:c9:14:
81:7f:e4:d2:9a:71:01:00:10:5c:33:ba:ae:94:8b:44:c8:e2:
09:6c:d5:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:58 2026 by rpki-client