Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
File: do_utqkKhqzxGHHk5Xii6n7Cgdk.mft (raw, json)
Hash identifier: tR6L34opqd1jLydKc5naeDCrryAjwWgbx9Dd4F5VHZg=
Subject key identifier: 3C:99:CB:80:BB:DD:D5:32:86:08:95:13:1C:C1:ED:1B:82:50:F1:E9
Authority key identifier: 76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
Certificate issuer: /CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Certificate serial: 01A17C97BEEDD6BBCF9BB8AA0E319BD644E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
Manifest number: 05D0
Signing time: Tue 27 Oct 2026 09:01:21 +0000
Manifest this update: Tue 27 Oct 2026 09:01:21 +0000
Manifest next update: Wed 28 Oct 2026 09:01:21 +0000
Files and hashes: 1: W-L9Z-et_hk_ElQE4x3JidtYxJ8.roa (hash: H+ygr+3swIT2aBvGxAFeyCAkH1uxCN9KnvrpdAVtIB8=)
2: do_utqkKhqzxGHHk5Xii6n7Cgdk.crl (hash: 8/SHrek0heVB9T4haGVYqfgqBAIDUZsE7m3lKRIBAKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:97:be:ed:d6:bb:cf:9b:b8:aa:0e:31:9b:d6:44:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768feeb6a90a86acf11871e4e578a2ea7ec281d9
Validity
Not Before: Oct 27 09:01:21 2026 GMT
Not After : Oct 28 09:01:21 2026 GMT
Subject: CN=3c99cb80bbddd532860895131cc1ed1b8250f1e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a6:1b:cc:9d:6a:81:d1:1a:77:be:a5:85:73:
33:d5:f9:8e:42:17:5c:29:4e:34:98:33:6e:7c:02:
bd:b4:20:c3:33:d7:03:49:f3:7b:06:a4:ac:ff:ac:
63:34:88:5c:ce:d2:9c:b6:29:c5:6a:65:aa:12:a1:
f2:9e:f5:b0:ca:62:56:62:14:97:d5:be:bd:74:f8:
8e:9e:51:ae:45:0c:72:1a:99:b6:f5:a3:1f:6d:3a:
b5:f9:99:22:5f:93:f5:30:54:b1:bf:19:ff:b2:5d:
5e:37:92:23:9c:ff:d7:14:e4:66:1d:c0:e8:b6:fe:
58:63:43:34:ce:95:9b:6c:c0:1d:c9:77:79:fb:25:
c3:28:ae:57:d9:f8:71:3b:45:9f:ce:e7:3d:1c:94:
e5:df:93:fe:ea:3d:a1:f3:54:d6:1e:56:48:8e:14:
1f:ea:1d:75:98:f7:68:13:05:51:3e:1b:99:69:a5:
15:65:ff:1f:53:b3:92:24:2e:1c:7f:7f:ad:3c:32:
2f:30:a1:82:40:49:bc:4b:46:cf:ea:a0:c7:3c:8a:
26:64:59:9d:23:b2:ba:ca:50:77:ab:20:7f:80:5b:
ed:01:6f:73:0e:c4:8d:eb:51:06:3a:2a:4a:ef:5e:
0f:4b:10:50:f2:c6:84:cb:fb:83:72:e5:c7:9f:eb:
13:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:99:CB:80:BB:DD:D5:32:86:08:95:13:1C:C1:ED:1B:82:50:F1:E9
X509v3 Authority Key Identifier:
keyid:76:8F:EE:B6:A9:0A:86:AC:F1:18:71:E4:E5:78:A2:EA:7E:C2:81:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do_utqkKhqzxGHHk5Xii6n7Cgdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/66663a-eaf1-4a89-804c-0c1f4d33783e/1/do_utqkKhqzxGHHk5Xii6n7Cgdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:26:cf:d8:40:4d:7b:ee:0c:9e:6b:e1:2e:9a:4b:df:41:89:
ec:9f:22:e2:b3:6e:d0:b1:f4:f0:a2:21:3d:43:69:34:98:09:
ef:c7:48:6b:8e:e3:17:44:51:a7:69:89:ad:c9:be:7e:95:d0:
93:9c:f0:03:8d:1b:14:4f:8b:61:3a:4e:23:e0:25:f1:2b:dc:
f9:e4:7f:49:ed:78:53:b6:0f:c7:3a:69:b6:f3:2e:16:a8:25:
65:3d:54:4c:92:85:dc:90:6e:ac:cd:35:9a:ca:49:21:15:cd:
ff:67:80:56:32:e2:73:c5:73:90:de:9e:36:b1:61:07:c2:30:
f0:21:3e:dc:43:63:d9:e1:19:d2:0a:53:7b:8f:a0:0a:2a:9a:
3b:b8:5f:38:bd:20:b6:0b:47:ae:b5:c7:57:6e:8b:ab:44:c7:
6a:3d:c1:6b:ba:3a:b6:c8:b9:34:8a:61:3c:6f:d5:2b:d6:e3:
d5:27:a4:ef:85:c7:aa:47:bb:3f:44:fc:ef:a2:bd:de:8d:cd:
72:33:c1:b7:e0:de:98:8f:3b:fd:64:58:00:9c:0a:76:46:0f:
16:8f:f9:b8:24:9c:e8:7d:b9:f4:81:dc:3d:48:84:84:95:72:
cc:37:a6:50:c1:e7:49:4d:7b:87:42:73:e1:96:61:f8:48:35:
ed:0d:1d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:03:55 2026 by rpki-client