Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
File: do_utqkKhqzxGHHk5Xii6n7Cgdk.mft (raw, json)
Hash identifier: 6iiIaOOWUCp+BG+WQNROnmY9LSWdF1m1aZ3Zjj3enwY=
Subject key identifier: E0:82:86:38:25:A1:77:A8:BA:D5:6D:B5:51:A7:08:4F:75:33:23:9C
Authority key identifier: 76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
Certificate issuer: /CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Certificate serial: 019D378971FE986B249ACDD683F3A83F61F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
Manifest number: 039A
Signing time: Sun 29 Mar 2026 03:00:47 +0000
Manifest this update: Sun 29 Mar 2026 03:00:47 +0000
Manifest next update: Mon 30 Mar 2026 03:00:47 +0000
Files and hashes: 1: W-L9Z-et_hk_ElQE4x3JidtYxJ8.roa (hash: H+ygr+3swIT2aBvGxAFeyCAkH1uxCN9KnvrpdAVtIB8=)
2: do_utqkKhqzxGHHk5Xii6n7Cgdk.crl (hash: 6BYoiBNpo5EzcUpcAmwSabO3QLfuF2neQjT5nfTj7g8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:71:fe:98:6b:24:9a:cd:d6:83:f3:a8:3f:61:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Validity
Not Before: Mar 29 03:00:47 2026 GMT
Not After : Mar 30 03:00:47 2026 GMT
Subject: CN=e082863825a177a8bad56db551a7084f7533239c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:cb:b7:04:9e:7a:de:e0:da:36:a5:9e:a6:d4:
57:a2:7d:dd:99:43:35:e2:7c:98:10:99:4b:f3:5e:
f8:40:a8:b5:05:ab:14:76:fe:35:d5:5e:a6:7f:32:
3b:20:aa:09:8d:61:8b:1c:44:e0:45:1f:72:28:07:
37:b0:fc:e8:ee:79:85:92:76:32:8f:92:c3:61:ee:
b6:be:85:93:c7:9a:0e:e0:81:8f:6e:a8:a5:d8:09:
08:50:4c:10:31:78:42:79:bf:d4:da:6f:8a:d0:71:
73:bb:a8:8b:4e:47:a7:49:b5:f6:44:ec:3e:68:47:
24:5b:5a:a5:73:c3:2c:a0:60:65:e8:5a:d6:b0:54:
bc:91:f8:8e:45:2b:e9:2b:da:02:72:b5:cf:09:0c:
9b:67:6f:69:e8:be:81:61:6b:79:52:56:b9:61:bf:
b5:35:0e:42:dd:2f:1f:b4:39:2f:d2:14:80:10:65:
d2:b8:d1:d2:d5:15:08:75:5c:46:d2:b6:a4:7e:08:
25:f9:2d:e3:d4:db:94:6c:aa:90:bd:d9:96:35:19:
f7:27:e3:1b:00:5a:74:bd:65:39:9b:a3:f8:f8:66:
b8:dc:99:df:e9:f7:84:30:d8:df:af:40:3b:61:10:
ee:53:89:f1:50:6f:52:12:40:db:f4:72:1c:cc:ec:
1c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:82:86:38:25:A1:77:A8:BA:D5:6D:B5:51:A7:08:4F:75:33:23:9C
X509v3 Authority Key Identifier:
keyid:76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:9f:c3:5c:81:cd:92:eb:2d:2b:b2:d9:a8:ee:3f:c0:f4:45:
ab:54:ff:74:46:81:98:11:32:4a:1d:d7:f5:a8:a5:79:d1:8c:
57:ef:c8:1c:68:b6:ed:33:d5:aa:cd:31:93:09:77:b1:08:dc:
f5:e1:71:3a:e4:b1:2f:ff:94:a1:4c:a7:58:97:72:5d:8c:0e:
5f:bf:38:ae:74:b8:43:e4:af:f7:3a:e7:99:10:a4:7e:65:e5:
23:a1:22:6d:0a:4a:36:2a:fb:e5:70:a9:b6:31:cb:59:bd:69:
5f:2b:a4:9e:51:50:9a:04:1b:bd:0d:2b:ac:25:24:14:65:94:
c0:db:db:ca:f1:b6:f4:a7:8e:2a:d9:f7:b3:c6:f5:16:51:41:
8a:e2:2a:d1:a9:5f:68:5d:a8:b2:ea:98:ed:d3:01:d6:ea:9d:
97:e1:c7:b4:d6:56:96:56:c9:52:06:7a:c6:cd:59:91:65:70:
be:90:c2:f9:08:4a:ac:e9:60:60:a6:a2:d7:33:42:99:c2:e2:
3e:93:63:bc:6c:8a:12:67:0c:14:88:88:10:55:10:0f:b6:9e:
55:21:7a:94:39:8b:2a:04:7a:8e:34:32:45:fc:d4:75:22:72:
e2:55:e4:0d:92:c4:88:f1:53:0f:2d:07:48:b2:8d:98:df:b6:
b9:b8:1d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:02 2026 by rpki-client