Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
File: do_utqkKhqzxGHHk5Xii6n7Cgdk.mft (raw, json)
Hash identifier: aVmCnjHR3I4h3Ybo8mRVcu06sFR77+auqS+2bTprX1k=
Subject key identifier: 28:B4:85:0B:7E:2E:1C:D7:65:C2:A8:0E:0E:EB:2D:42:FA:F5:CD:0A
Authority key identifier: 76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
Certificate issuer: /CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Certificate serial: 01A0040242C61ABA4BDB075BECAFD40421D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
Manifest number: 050D
Signing time: Sat 15 Aug 2026 06:00:51 +0000
Manifest this update: Sat 15 Aug 2026 06:00:51 +0000
Manifest next update: Sun 16 Aug 2026 06:00:51 +0000
Files and hashes: 1: W-L9Z-et_hk_ElQE4x3JidtYxJ8.roa (hash: H+ygr+3swIT2aBvGxAFeyCAkH1uxCN9KnvrpdAVtIB8=)
2: do_utqkKhqzxGHHk5Xii6n7Cgdk.crl (hash: rNtvKjZPUCIMM8nN8tH1sjFRpSBsMT0R7WBn6bUqo9I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:02:42:c6:1a:ba:4b:db:07:5b:ec:af:d4:04:21:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Validity
Not Before: Aug 15 06:00:51 2026 GMT
Not After : Aug 16 06:00:51 2026 GMT
Subject: CN=28b4850b7e2e1cd765c2a80e0eeb2d42faf5cd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:20:61:68:40:5a:9a:ab:43:ac:3f:3c:89:
c7:53:a6:20:49:eb:1c:c5:d0:3c:e7:d5:96:e3:fd:
17:93:86:31:ef:52:4b:c1:f1:72:78:97:f7:5f:30:
2f:9e:96:92:e7:95:b8:86:3c:1b:e1:c2:b7:f7:93:
a9:a0:43:51:29:6a:ad:ee:15:68:79:87:36:36:06:
8b:47:dc:24:05:80:ea:f3:c8:48:3a:ab:10:27:9b:
d0:8a:8e:4d:51:86:c9:7f:64:74:45:32:c4:e4:3b:
08:2f:6f:36:b5:7f:cc:61:91:01:91:66:6b:07:2c:
ae:81:fb:97:b5:b7:33:95:11:c1:82:bb:7d:c9:d2:
8e:fa:df:20:2c:9e:f6:9c:44:6a:ae:64:fe:27:3e:
43:cc:f7:7f:b0:37:49:27:b6:6a:96:d1:9e:4c:39:
4f:b7:77:ad:58:f4:f1:98:b6:00:33:cb:20:38:26:
59:75:3e:ee:fb:d1:3b:65:9b:22:30:ef:74:a8:0d:
a4:bb:77:f4:26:ba:d0:32:0b:f5:f7:86:5f:d6:d8:
34:3c:df:1a:e1:8c:e8:f4:77:f0:15:59:90:c8:87:
16:54:6b:ad:93:b6:e9:f2:59:45:15:39:e3:f3:58:
fb:13:05:65:a1:10:5c:16:b9:e4:24:18:35:ea:48:
1b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:B4:85:0B:7E:2E:1C:D7:65:C2:A8:0E:0E:EB:2D:42:FA:F5:CD:0A
X509v3 Authority Key Identifier:
keyid:76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:e1:54:e4:7c:76:4b:c3:5f:e0:c1:2b:d0:af:84:4d:3c:0d:
ac:1b:07:d7:ba:53:c9:72:32:c1:a1:4e:a0:76:75:28:cc:33:
8f:69:bb:23:4a:04:81:19:ea:28:cd:99:a2:4c:ca:d0:23:51:
89:76:25:e9:2f:4f:a7:92:6e:b0:04:5f:ff:dd:80:59:28:37:
92:46:ba:ca:dc:dc:3a:fe:9e:08:42:64:d5:ca:df:97:df:c6:
34:f8:95:20:a8:eb:d1:91:bc:22:2b:b8:00:7c:57:7f:b9:ca:
59:fe:2c:d2:53:62:0d:38:f5:0f:44:16:21:87:ce:f4:41:bd:
df:53:3b:10:a5:6a:cf:94:0c:43:c3:f1:d5:ae:e0:55:66:0f:
81:2f:0a:dd:c6:cc:2b:41:06:25:7d:14:dc:31:b1:9b:6d:62:
06:19:9f:31:d2:81:bf:62:cc:6c:c6:b9:da:24:a2:31:d7:f5:
ff:39:94:72:24:1e:fa:f8:3b:7d:54:be:7d:ef:fd:d7:65:df:
42:57:f1:cb:aa:9d:98:a3:15:4d:8d:7e:fb:ff:b4:e3:06:72:
18:37:4d:9a:5d:d1:f8:07:a0:f0:9c:53:73:b7:02:95:32:da:
5c:c7:f9:57:27:c8:54:ab:b8:c4:95:7f:31:55:24:41:b2:41:
c8:74:f7:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 08:42:03 2026 by rpki-client