Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: TuY386khkmPXYBfkhzhhSPoOMowdRqX8Wnd8vGJFQks=
Subject key identifier: 68:C3:3F:F2:30:B8:85:4B:0C:DC:56:68:AD:4D:33:C7:EF:96:2F:92
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 019EB87CEB3B1570B27AE56869DB85401DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 195A
Signing time: Thu 11 Jun 2026 21:00:54 +0000
Manifest this update: Thu 11 Jun 2026 21:00:54 +0000
Manifest next update: Fri 12 Jun 2026 21:00:54 +0000
Files and hashes: 1: KLcO-4pnwNwQ0ENsv05vSQ934W8.roa (hash: FYOxX+97VqHTmC9VAss+Ib9pIE+EbJuTdglUDu9UfW0=)
2: dA8NWdyS0f06Erm6RVd9DfssKjU.roa (hash: IZmapnDLq3R54YRETdfjg+rEgpwO069ZWxHLiaQ38d0=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: 0UtOnB+MggKPsdo4t1g+gLCmK7nf5C8I3wP07jXNsNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:eb:3b:15:70:b2:7a:e5:68:69:db:85:40:1d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Jun 11 21:00:54 2026 GMT
Not After : Jun 12 21:00:54 2026 GMT
Subject: CN=68c33ff230b8854b0cdc5668ad4d33c7ef962f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:e9:f3:75:8f:e0:98:a7:94:df:94:73:5f:
f6:3b:ec:81:ad:5f:20:b9:85:91:44:b2:4e:08:9e:
2e:de:18:5c:99:2d:e6:0b:57:f8:81:f3:56:b3:af:
43:eb:61:7e:0f:fd:f6:c9:6b:b0:7f:6d:d0:7b:d6:
2e:88:59:b7:60:14:50:22:f5:c7:df:4b:0e:63:aa:
ac:b8:b8:e2:d5:f3:9d:6a:0d:2f:49:c8:7b:ae:83:
29:0d:2f:6a:0e:ef:0c:f6:0e:92:e6:57:cf:ed:74:
98:cc:b2:57:e6:a1:b4:ab:29:5f:27:af:cf:bb:33:
e7:fe:8b:0b:b3:52:e5:7b:aa:86:f4:23:1c:cf:6d:
11:f0:da:4b:54:39:15:31:12:b9:a9:f4:1a:f6:3d:
1d:ca:a8:95:6a:f3:7c:44:39:1a:9c:b6:37:4a:23:
fa:b8:26:06:3b:25:02:57:f7:8d:7d:a5:23:72:b2:
8c:54:f9:03:ac:33:6e:a0:44:3f:e4:ea:d2:50:c9:
a5:93:86:bc:0f:0f:d2:68:2d:b4:dc:57:f8:75:7e:
3f:d3:65:7d:78:c7:7f:ad:7c:86:a5:28:f9:bd:7f:
76:d0:59:d9:6a:bd:0c:dd:3f:42:a5:72:2f:8c:a0:
64:9c:db:e3:26:6a:f3:dd:6f:5d:a0:c6:b6:f7:0a:
29:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C3:3F:F2:30:B8:85:4B:0C:DC:56:68:AD:4D:33:C7:EF:96:2F:92
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:4e:de:b9:2c:5b:69:0a:15:5d:03:5b:42:e3:58:08:37:4c:
2e:6b:a9:9f:35:2f:16:94:b3:b2:d6:73:59:b2:1a:8e:b1:9d:
01:26:88:33:95:f2:0f:79:24:2b:b8:3f:61:02:4c:c6:8e:32:
45:34:74:f8:d7:4e:75:23:c6:75:d3:85:5e:39:4c:57:ef:11:
27:c5:af:ed:96:0a:81:e9:4b:06:87:0a:6d:bc:8b:5a:53:4d:
42:c3:dd:21:59:e7:aa:14:36:bb:15:1f:bf:ac:0f:b7:60:80:
93:65:5b:ef:1e:f0:21:3b:8d:82:ff:dd:7a:4a:46:89:bc:e7:
32:bd:6b:68:47:82:be:ae:13:31:5a:db:06:12:99:37:6f:b0:
51:c1:e6:97:f0:83:f3:59:b9:19:27:e5:a8:b1:25:77:03:7d:
90:ee:df:1a:a5:e7:e1:63:a7:85:f1:4e:b0:fa:ae:1b:a4:9f:
83:fe:8c:e2:76:1c:db:5a:3e:8e:92:db:f3:01:20:b9:17:d3:
f4:91:a3:0b:45:d5:be:c3:95:bf:73:cf:6f:09:24:7a:09:a4:
29:f0:c9:f9:28:3b:a5:38:6d:30:73:7e:1b:11:fb:79:d1:c7:
01:e9:14:db:5a:a1:b1:73:0f:37:2c:5f:39:bd:6c:17:98:66:
43:1d:f7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:17:20 2026 by rpki-client