Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
File: k8JEvms6_7bU5Ufy4ePF6sGyarI.mft (raw, json)
Hash identifier: 6RA/rWCn/aGiaD8vmpDOTuiyYuJbJZBJfWg2TK2H9C4=
Subject key identifier: D1:F1:49:B6:97:02:DD:C0:F9:FE:4D:93:DA:CF:AF:8D:3A:AC:5B:2B
Authority key identifier: 93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
Certificate issuer: /CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Certificate serial: 019F83E787ED6AF020236A48B98068DFB58C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
Manifest number: 10D2
Signing time: Tue 21 Jul 2026 09:00:16 +0000
Manifest this update: Tue 21 Jul 2026 09:00:16 +0000
Manifest next update: Wed 22 Jul 2026 09:00:16 +0000
Files and hashes: 1: 81Tn4UOT-STQR0S2LKi1Fkeb39A.roa (hash: H9vhMh1yOq8AyMCdWdyT5N1VPH5W7KOnfH94i52sBpM=)
2: cHz2VTRQ9RWkxftbKU-kXqLP1GE.roa (hash: Tjz6f7FaWUDdbc5zyvKrfzNZTUHB4msYRQvxnsJef0Q=)
3: k8JEvms6_7bU5Ufy4ePF6sGyarI.crl (hash: qdotVfRr13t4mttZMTfTunvP8Tj2lZKlWMQzBjO+0Sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:e7:87:ed:6a:f0:20:23:6a:48:b9:80:68:df:b5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c244be6b3affb6d4e547f2e1e3c5eac1b26ab2
Validity
Not Before: Jul 21 09:00:16 2026 GMT
Not After : Jul 22 09:00:16 2026 GMT
Subject: CN=d1f149b69702ddc0f9fe4d93dacfaf8d3aac5b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:97:96:47:f9:3d:e0:96:3e:c7:78:13:db:80:
4a:29:c8:86:d6:8d:e1:e0:59:96:80:55:4d:4e:1d:
34:a7:e6:b0:84:c8:99:e8:7c:c2:7d:34:4d:72:6a:
a7:14:f3:68:af:a1:a4:9f:f0:8d:a1:22:10:a7:8b:
a4:ca:08:8b:9d:7b:5e:7e:37:04:ab:01:93:8b:e6:
86:fe:5a:6f:fe:cc:59:a8:4a:04:12:fa:b1:f1:86:
a3:2b:29:09:e2:a3:fa:5b:c2:66:c3:05:f3:00:ca:
67:34:a1:f4:ff:97:ae:40:71:bb:3c:c7:d3:fa:8b:
7a:13:80:9c:be:69:1a:1e:b4:be:eb:b9:e6:3d:49:
af:75:84:ff:b3:d7:03:fb:bb:4d:31:6c:58:00:8d:
3b:19:b6:9a:a2:1d:a4:8f:78:96:2d:c7:ce:c4:3b:
ab:88:76:ec:d3:60:90:8b:a6:8e:86:d3:22:fb:7f:
ca:9f:1b:70:18:d1:db:a6:9d:b7:5c:a2:71:ae:d2:
5e:32:93:a4:1f:f9:83:af:cd:11:29:1d:72:c9:80:
72:fc:ef:5e:d7:3c:16:4b:fa:92:01:fd:79:bd:6f:
17:5c:c2:99:b7:c0:5d:c6:72:89:3d:ed:43:11:d5:
34:3a:d8:1f:ea:3d:08:e6:d4:70:ac:43:84:26:4a:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:F1:49:B6:97:02:DD:C0:F9:FE:4D:93:DA:CF:AF:8D:3A:AC:5B:2B
X509v3 Authority Key Identifier:
keyid:93:C2:44:BE:6B:3A:FF:B6:D4:E5:47:F2:E1:E3:C5:EA:C1:B2:6A:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8JEvms6_7bU5Ufy4ePF6sGyarI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/501e8f-c7e1-4aa4-8583-66d74e73f254/1/k8JEvms6_7bU5Ufy4ePF6sGyarI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:f0:f7:95:d9:66:60:e0:3c:b0:eb:67:94:b7:94:6b:a9:d4:
5e:39:de:b8:89:0d:ff:f4:18:53:5f:64:1c:bb:4a:bc:6a:7e:
a2:b9:6d:81:c2:3b:d7:28:37:65:79:5d:02:1a:dd:1d:5e:6d:
80:ea:5b:25:b2:14:93:da:98:f3:dc:98:13:2c:ca:b6:ef:8f:
ce:a0:0a:9b:75:d9:38:da:b6:3a:93:7c:01:a8:1b:fd:ee:cc:
a8:f5:c2:34:73:c5:23:a2:1f:e0:c6:e4:ce:d6:a5:92:ba:37:
4a:4d:b8:40:32:bb:e6:e6:00:6b:de:f0:7b:f3:d7:52:6f:3f:
34:d0:d7:7a:a3:b4:48:96:a8:e7:a8:cf:d2:39:06:ee:97:f7:
50:56:27:28:2e:31:bc:57:e4:d7:8a:53:e8:6e:55:1f:39:8c:
ee:96:a3:e8:cb:e0:a1:30:a2:90:86:b4:50:5d:9b:10:22:68:
40:cb:b5:03:22:b5:8a:e4:6d:8a:b5:da:44:26:85:b8:b1:8a:
ea:12:bb:41:22:19:ab:85:74:dc:30:23:33:0e:bc:a7:30:8a:
db:d0:76:a5:92:f0:04:6e:92:d7:d3:d4:11:49:db:8f:84:fb:
e0:c8:aa:92:81:f4:bb:75:27:e6:53:fb:30:7f:32:de:8a:72:
b0:40:a5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:21:19 2026 by rpki-client