Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: 7IHtXGYJr5h9rH8ccSHMOgUE1Ct2f/2t4HwQQPNlCdE=
Subject key identifier: BE:8F:FE:E0:C7:2C:71:AE:8E:3E:72:53:9F:7B:6E:10:BF:C2:48:F3
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 01A08BD5D2ED9CE1BE3C1CC37504525AEE64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 1A4C
Signing time: Thu 10 Sep 2026 15:00:41 +0000
Manifest this update: Thu 10 Sep 2026 15:00:41 +0000
Manifest next update: Fri 11 Sep 2026 15:00:41 +0000
Files and hashes: 1: KLcO-4pnwNwQ0ENsv05vSQ934W8.roa (hash: FYOxX+97VqHTmC9VAss+Ib9pIE+EbJuTdglUDu9UfW0=)
2: dA8NWdyS0f06Erm6RVd9DfssKjU.roa (hash: IZmapnDLq3R54YRETdfjg+rEgpwO069ZWxHLiaQ38d0=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: rXRFJ2kfdFwRPxVYCzlzYVSu0mHGtWiRSLaC37dnZd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:d2:ed:9c:e1:be:3c:1c:c3:75:04:52:5a:ee:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Sep 10 15:00:41 2026 GMT
Not After : Sep 11 15:00:41 2026 GMT
Subject: CN=be8ffee0c72c71ae8e3e72539f7b6e10bfc248f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:97:f0:90:86:33:6e:17:bf:21:3b:d3:b1:9a:
ce:bc:9e:31:39:e6:76:ed:57:ee:cc:82:0c:7e:0f:
d2:63:2f:55:60:e2:ca:db:d9:7d:d1:47:9a:84:b1:
6f:80:0b:de:05:4a:a2:e3:d0:ac:98:c8:39:4a:3e:
0a:b8:18:f6:a8:e1:5f:37:a4:63:24:5d:8d:09:bc:
7a:31:39:e5:44:dc:49:9d:91:90:c9:03:85:64:f5:
f4:76:97:f7:2f:09:4f:50:5e:2e:2c:18:ec:19:29:
df:44:3e:a1:4f:c1:37:2f:b9:ff:46:4d:32:95:2a:
c7:53:3d:a5:cd:85:11:62:de:a5:d6:86:f1:7d:96:
5d:6b:55:b0:46:89:10:ef:58:6f:90:e0:a8:ab:65:
d6:05:66:7d:96:26:32:35:f2:1c:5e:06:d0:94:e0:
d7:cb:be:7f:b6:16:ac:cf:c5:82:a9:dd:1e:84:dc:
9a:76:be:5c:0f:29:b7:a5:09:90:ff:73:cc:3b:7f:
8b:0a:cc:f3:77:86:66:b9:c2:b6:bf:0e:2e:37:ec:
58:f3:aa:24:a9:2f:f1:26:5e:a1:fb:fa:da:00:cb:
dc:26:38:28:c9:cb:e5:6c:8b:36:6f:1d:99:98:1a:
85:95:09:58:64:fa:d9:de:f5:8f:1e:c3:9c:49:a2:
b7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:8F:FE:E0:C7:2C:71:AE:8E:3E:72:53:9F:7B:6E:10:BF:C2:48:F3
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:72:a8:a0:d3:52:5f:ff:cd:b2:74:8c:d0:23:51:d8:4f:37:
3a:0f:85:dc:7c:64:4d:9f:c9:42:16:61:76:cf:da:89:44:01:
60:07:11:8b:3c:e0:fb:de:4a:f1:44:02:b8:4c:a3:60:34:97:
5d:36:f9:38:44:11:fb:44:b6:87:67:d5:89:29:97:91:32:d6:
ed:88:9d:38:a5:3b:8a:ed:cf:7c:90:31:23:fe:fb:7b:37:40:
f2:08:5e:c6:4d:5a:75:94:58:4a:3a:68:9e:28:83:c5:17:06:
88:cb:0f:2b:4f:23:d5:8b:d8:8c:87:44:f1:60:7d:a1:86:74:
ed:aa:f1:f4:43:78:21:02:12:7f:c5:50:0a:07:27:a4:70:aa:
c7:c4:19:71:a2:10:e1:b4:52:1d:77:e9:a5:54:57:c4:9b:96:
98:72:1c:9d:c3:89:f7:cf:80:bb:5a:f7:d9:72:0d:b1:8b:69:
8c:ac:6b:4c:2d:17:26:30:fc:9a:69:d4:dd:1b:1c:1c:96:19:
db:93:c3:44:41:f7:6f:85:36:8b:cf:d9:27:d2:07:0d:9e:5e:
7e:c7:bc:f1:ee:02:1b:65:c9:34:b5:0d:f4:64:80:fb:51:af:
28:5d:ef:cd:fd:23:c4:8d:9c:1e:63:10:46:6f:4a:42:3b:2e:
fa:55:37:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1dLtnOG+PBzDdQRSWu5kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjI5ODE5Nzg4ODU2OTZjZTFjMmJiZjRhZjk5ZGFkYzJj
NjE4ZWIwHhcNMjYwOTEwMTUwMDQxWhcNMjYwOTExMTUwMDQxWjAzMTEwLwYDVQQD
EyhiZThmZmVlMGM3MmM3MWFlOGUzZTcyNTM5ZjdiNmUxMGJmYzI0OGYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJfwkIYzbhe/ITvTsZrOvJ4xOeZ2
7VfuzIIMfg/SYy9VYOLK29l90UeahLFvgAveBUqi49CsmMg5Sj4KuBj2qOFfN6Rj
JF2NCbx6MTnlRNxJnZGQyQOFZPX0dpf3LwlPUF4uLBjsGSnfRD6hT8E3L7n/Rk0y
lSrHUz2lzYURYt6l1obxfZZda1WwRokQ71hvkOCoq2XWBWZ9liYyNfIcXgbQlODX
y75/thasz8WCqd0ehNyadr5cDym3pQmQ/3PMO3+LCszzd4ZmucK2vw4uN+xY86ok
qS/xJl6h+/raAMvcJjgoycvlbIs2bx2ZmBqFlQlYZPrZ3vWPHsOcSaK3mQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6P/uDHLHGujj5yU597bhC/wkjzMB8GA1UdIwQY
MBaAFJOymBl4iFaWzhwrv0r5na3CxhjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83OTg2YTktNGU0Ni00YzMzLTkyYzkt
MzFjOTVlMmExZDZmLzEvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83OTg2YTktNGU0Ni00YzMzLTkyYzktMzFjOTVlMmExZDZm
LzEvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANHKooNNS
X//NsnSM0CNR2E83Og+F3HxkTZ/JQhZhds/aiUQBYAcRizzg+95K8UQCuEyjYDSX
XTb5OEQR+0S2h2fViSmXkTLW7YidOKU7iu3PfJAxI/77ezdA8ghexk1adZRYSjpo
niiDxRcGiMsPK08j1YvYjIdE8WB9oYZ07arx9EN4IQISf8VQCgcnpHCqx8QZcaIQ
4bRSHXfppVRXxJuWmHIcncOJ98+Au1r32XINsYtpjKxrTC0XJjD8mmnU3RscHJYZ
25PDREH3b4U2i8/ZJ9IHDZ5efse88e4CG2XJNLUN9GSA+1GvKF3vzf0jxI2cHmMQ
Rm9KQjsu+lU35w==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:11:26 2026 by rpki-client