Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: 6cXm1X2IvNYMZbZ684310tWx9doyrVHVMPxyz1FOrPM=
Subject key identifier: D5:E0:2A:EE:CD:83:66:62:F4:95:04:33:02:34:5F:6D:4E:50:17:75
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 019F118984D9E0AE88FA588F1DDF704874AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 1985
Signing time: Mon 29 Jun 2026 04:00:52 +0000
Manifest this update: Mon 29 Jun 2026 04:00:52 +0000
Manifest next update: Tue 30 Jun 2026 04:00:52 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: T0sOoUIIl6akGF7+IHbQSTtSVadSPNd7Oj9Bl17SuDE=)
2: iyOoKbcuiPTHCLxMCiy7DxXr5rk.roa (hash: PXqcza2cwz/3mR448+fTEDzYFSGuytoJUnD8yJR22Mo=)
3: rjqoaksN8bIK2O4SRzuLcMffaQQ.roa (hash: YtctfngTDGfahIUPg5R6y0N3cZYKDE1Tr+6r4LZlIhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:89:84:d9:e0:ae:88:fa:58:8f:1d:df:70:48:74:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Jun 29 04:00:52 2026 GMT
Not After : Jun 30 04:00:52 2026 GMT
Subject: CN=d5e02aeecd836662f495043302345f6d4e501775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7a:0f:7a:cd:8a:60:f5:75:09:21:e9:dd:fa:
e3:7e:c3:f5:96:7d:9d:65:0a:ed:d6:c3:bf:24:ef:
1b:7e:00:c0:b3:44:6b:42:b6:33:eb:36:e2:97:07:
28:76:d5:5c:46:ce:8b:11:c4:d5:07:d8:a6:4d:82:
1b:b6:44:c3:1d:03:f1:32:78:ee:d0:2f:2f:4e:ed:
f7:3f:65:8a:23:aa:73:dd:d3:48:dc:c2:72:16:85:
09:3f:0b:a5:45:65:a9:68:66:a3:5b:a6:de:df:13:
46:90:6e:1d:73:e5:cf:b5:ee:b3:0a:40:db:6c:ea:
67:7c:d3:a9:03:1b:cd:30:fd:eb:78:48:f9:04:ca:
cb:e5:c0:2b:07:b3:a3:59:eb:09:58:7d:cc:9b:87:
ac:4c:8a:c7:68:36:f9:a4:3e:69:77:1f:44:d8:c2:
37:45:e3:d1:e7:5d:ff:d1:e2:fa:50:43:70:b8:20:
05:d9:0e:f3:6a:9e:2d:b2:cf:1c:9b:3f:cd:46:2a:
96:90:84:a5:cb:cb:4a:e6:d2:5a:11:c3:2e:72:72:
9a:6c:38:3f:0e:05:9e:e1:55:26:47:87:f0:32:35:
14:13:0b:17:6b:ca:e9:8c:85:7e:85:a2:ec:61:82:
6e:1b:f7:01:08:8d:74:c7:d2:77:38:d8:15:02:8c:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E0:2A:EE:CD:83:66:62:F4:95:04:33:02:34:5F:6D:4E:50:17:75
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:21:86:2b:99:45:a0:ed:e4:c3:5f:75:22:f0:d3:6f:2f:2d:
4c:99:2b:3a:74:83:60:ee:f4:e3:dc:ce:6f:14:61:a5:ad:b5:
20:a9:7a:57:1b:cc:ca:18:46:22:0c:2b:b5:b8:c6:0f:b4:14:
e6:56:10:bc:42:93:6a:8f:c0:87:e6:59:e0:64:61:4b:a2:f8:
48:d9:47:b6:bf:25:b5:aa:84:31:41:d7:a7:af:7e:94:9d:7e:
f6:44:c2:28:99:89:d2:66:4d:88:03:af:d8:b5:51:97:36:cd:
74:ac:9c:40:b3:3a:c3:ae:81:64:06:39:57:f7:ad:b4:49:a4:
ed:d9:3b:a1:16:d9:c4:ac:c9:e3:65:f9:7d:7b:6b:92:97:2c:
4b:2e:b7:4a:b6:fd:f5:fb:ac:f6:8f:5d:29:b1:54:11:24:42:
44:10:ba:91:44:85:2c:d4:a4:16:01:61:cb:79:1a:d0:a5:de:
ab:62:1b:90:1f:65:47:74:42:94:a8:15:08:b4:df:f7:2f:cb:
55:2f:82:60:b9:dc:80:b2:e5:a0:8e:05:ac:f8:3a:5b:18:d8:
07:c0:9d:ba:49:d6:ce:af:c0:f1:e5:36:72:62:d4:95:8f:58:
0f:46:4e:93:1c:0f:b4:8f:ae:4c:07:6d:76:68:a9:83:0a:33:
5b:b4:49:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:37:08 2026 by rpki-client