Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: aQBldKJSJzgEP5BcPkAxC0ENNo0Dc7gOx5iTnb0B0Ng=
Subject key identifier: 48:64:FD:59:03:D7:F9:5A:0C:FF:36:39:77:9C:84:8C:AF:D2:E0:A6
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 019FA229A60FA89F18C6D249661FDB490A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 19D3
Signing time: Mon 27 Jul 2026 06:01:06 +0000
Manifest this update: Mon 27 Jul 2026 06:01:06 +0000
Manifest next update: Tue 28 Jul 2026 06:01:06 +0000
Files and hashes: 1: KLcO-4pnwNwQ0ENsv05vSQ934W8.roa (hash: FYOxX+97VqHTmC9VAss+Ib9pIE+EbJuTdglUDu9UfW0=)
2: dA8NWdyS0f06Erm6RVd9DfssKjU.roa (hash: IZmapnDLq3R54YRETdfjg+rEgpwO069ZWxHLiaQ38d0=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: cTuJZNOM8Dv0afCC5IxR/jVsFWQ6m//Un1D1WcNYDCg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:a6:0f:a8:9f:18:c6:d2:49:66:1f:db:49:0a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Jul 27 06:01:06 2026 GMT
Not After : Jul 28 06:01:06 2026 GMT
Subject: CN=4864fd5903d7f95a0cff3639779c848cafd2e0a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:45:9f:1d:e1:3e:ab:c5:bc:90:a8:03:b9:ad:
f4:78:39:9e:8d:c3:55:90:b2:49:14:04:8e:9a:14:
af:67:1d:1c:05:02:bd:1f:4c:98:90:ed:81:90:c2:
ec:a3:8c:8c:36:e6:65:50:44:8d:9e:ca:b8:b4:0a:
86:4e:8a:fe:cc:1d:fe:36:de:e6:bf:95:8c:a1:b3:
1f:9b:01:00:75:b4:86:54:6b:38:06:5d:36:ac:a3:
b2:c9:21:28:fc:95:db:7c:98:27:b1:af:5b:8e:d9:
11:fe:83:73:c7:5b:bc:2d:84:2d:bc:44:bf:ee:8f:
dc:0d:2b:30:b2:18:1a:56:54:56:3e:05:f9:b1:71:
74:ff:6f:2e:14:a9:21:a1:51:29:a8:37:25:e8:08:
f0:0b:0a:63:84:29:7e:55:4c:7a:82:bd:87:ce:2b:
fa:cf:0a:ff:5e:6d:ab:50:a8:35:0c:db:0d:97:38:
1b:83:65:c3:29:2c:d1:6e:14:02:b9:2b:41:36:a5:
1f:2b:cd:53:61:94:e4:e9:0b:05:02:99:80:1f:5a:
3c:c5:2c:ae:09:b7:ce:dc:0c:be:94:1c:3e:2a:76:
92:84:a2:79:de:ec:57:ff:8c:5c:df:32:f1:af:68:
97:d3:ed:bf:8b:7c:95:34:f8:ed:91:53:9a:f8:51:
22:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:64:FD:59:03:D7:F9:5A:0C:FF:36:39:77:9C:84:8C:AF:D2:E0:A6
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:24:c2:b6:ed:7f:a0:a0:1b:69:06:b6:f0:d5:6a:38:84:b3:
99:26:07:76:42:a6:ea:8d:40:b0:82:8c:88:30:89:48:cc:a4:
58:c6:8e:78:7b:38:7e:2e:c4:da:38:92:4d:1e:17:4e:3d:93:
1a:5f:17:17:7c:c7:9b:22:21:89:54:c5:e6:4c:12:d9:71:b4:
48:c5:8f:69:71:0b:7e:ec:52:1a:17:95:f2:71:cc:93:3c:77:
85:83:f5:f1:45:88:c4:d9:57:78:2d:98:8e:fe:aa:77:ff:42:
44:91:75:dc:69:f5:aa:01:da:b4:d6:a3:ce:3b:b1:c6:8b:73:
6f:b0:90:0f:e8:69:d7:78:91:e5:54:a4:57:2e:9c:66:44:20:
d3:2f:e2:fd:0a:c7:61:86:88:f3:57:a6:fe:d8:a8:ce:0f:c8:
f6:b6:cb:6d:fc:eb:a4:75:72:d5:4c:83:cb:76:c7:f0:69:58:
d4:e2:82:3a:d4:a7:36:75:e3:d2:dd:14:b6:cc:f1:fc:69:49:
6b:f6:76:ee:41:95:b1:94:ef:89:dd:73:46:a9:fc:bc:3b:c0:
0e:54:a8:ad:6d:73:c5:fa:ef:c7:bc:b0:a3:d4:1a:17:41:8b:
e2:ea:e2:72:30:a6:cd:0a:6c:e7:76:e0:fc:cc:9b:61:0d:5f:
8d:a3:5f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:27:25 2026 by rpki-client