Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
File: do_utqkKhqzxGHHk5Xii6n7Cgdk.mft (raw, json)
Hash identifier: +ZNpx6/Yh6IxTyYdWuqW79jJiozwSBiSGw9PN97XCOI=
Subject key identifier: BE:5F:0B:6C:4D:DD:E5:42:90:66:D5:AD:4F:49:10:C9:D1:4D:76:75
Authority key identifier: 76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
Certificate issuer: /CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Certificate serial: 019F1A566824D0190ED5C82C520FFCAD16A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
Manifest number: 0494
Signing time: Tue 30 Jun 2026 21:01:38 +0000
Manifest this update: Tue 30 Jun 2026 21:01:38 +0000
Manifest next update: Wed 01 Jul 2026 21:01:38 +0000
Files and hashes: 1: W-L9Z-et_hk_ElQE4x3JidtYxJ8.roa (hash: H+ygr+3swIT2aBvGxAFeyCAkH1uxCN9KnvrpdAVtIB8=)
2: do_utqkKhqzxGHHk5Xii6n7Cgdk.crl (hash: Mh5/ds5Ld/pcsoLZwK9VcCWgFj9KQjqRgbsGLvcszgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:56:68:24:d0:19:0e:d5:c8:2c:52:0f:fc:ad:16:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Validity
Not Before: Jun 30 21:01:38 2026 GMT
Not After : Jul 1 21:01:38 2026 GMT
Subject: CN=be5f0b6c4ddde5429066d5ad4f4910c9d14d7675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:34:42:3b:1c:cc:55:50:5f:bd:36:e4:5f:2b:
9d:12:e5:55:ca:e3:df:8e:49:80:c0:5a:a1:79:ff:
64:19:36:2d:18:28:7e:80:64:7f:af:0c:06:3f:77:
64:82:2f:cc:5f:5b:a1:23:dd:b2:5a:fa:e9:34:8e:
c3:e9:22:80:89:d0:2c:df:8c:61:d1:0c:04:21:18:
fd:69:18:00:10:7c:bb:09:cc:0a:ee:7f:1e:98:2a:
b5:39:3f:30:f4:a1:51:33:1e:10:a8:e6:cf:17:a9:
d1:e5:26:03:c6:25:41:5c:4e:70:24:97:5f:9f:09:
04:fb:6e:16:08:93:2d:a7:8d:cf:f9:db:f1:0b:a0:
b1:3e:48:75:7c:fe:0c:90:42:3f:7e:c9:26:86:6d:
e5:88:91:dc:47:e8:69:b9:80:ba:b6:59:f1:93:ed:
ee:a7:42:57:70:97:6e:a9:69:2f:74:23:0f:c3:4d:
56:40:10:b3:d0:22:2f:79:0f:19:e8:67:b5:34:23:
64:b0:23:9f:6b:4d:c9:38:29:5f:b7:1b:42:66:50:
17:d9:fc:52:b6:49:6e:36:6f:ee:48:22:73:be:a2:
3a:07:3c:26:2a:21:1c:35:cb:96:e8:05:ed:0e:52:
07:7b:c3:99:e3:e5:33:02:c9:0c:7b:1b:61:fb:cd:
21:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5F:0B:6C:4D:DD:E5:42:90:66:D5:AD:4F:49:10:C9:D1:4D:76:75
X509v3 Authority Key Identifier:
keyid:76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:c3:28:48:5f:e2:89:b5:f4:81:c5:a8:5e:11:31:05:4a:14:
bf:48:2e:33:b7:40:be:e6:9e:a2:94:d1:b6:07:e3:2a:c4:e5:
45:a3:0c:77:41:9d:1c:da:c8:2a:e3:4c:70:a9:93:df:50:3b:
25:f4:c8:5f:ec:09:13:75:54:7c:39:69:18:ab:ed:af:09:c0:
96:bf:51:b3:66:9d:c7:e7:04:9d:29:b3:7c:63:90:75:37:de:
73:8d:5f:11:59:52:e0:79:e1:e2:64:91:cb:8a:e5:7d:b8:e6:
94:26:2c:c8:87:ec:05:b0:1b:19:1e:35:a5:48:29:8f:b0:90:
44:59:2b:3d:f9:12:ed:83:d2:1a:b7:d4:94:33:cc:16:10:b5:
c9:56:8f:31:10:53:c0:e8:69:a1:20:90:b3:18:a0:da:c2:5e:
02:a5:3e:2c:da:d4:b5:b2:1a:98:0d:d3:5b:4a:db:42:7c:f5:
30:d1:45:7a:af:60:b4:76:b1:28:45:b5:ec:bf:2b:db:aa:96:
db:7e:ee:b2:d1:48:1b:9d:53:d0:6f:67:3f:50:2d:50:3d:f3:
da:d6:6c:ec:27:41:45:ed:cb:5e:80:2d:16:79:78:80:1f:b9:
21:96:18:74:d6:3f:85:6a:b3:f1:15:32:3a:00:0c:0a:b7:e1:
b7:ce:3c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:19:29 2026 by rpki-client