Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: aDLmPaCKqQ1Pi4Pc77WI2d7gWv4ikAu/K5HdXXz47Yg=
Subject key identifier: D7:A8:9C:5A:42:E0:FD:6C:7B:00:87:39:D8:A5:61:CB:5A:BB:30:75
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 01A18E9D664D9E019259CE65774061B3FE30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 1AD2
Signing time: Fri 30 Oct 2026 21:00:42 +0000
Manifest this update: Fri 30 Oct 2026 21:00:42 +0000
Manifest next update: Sat 31 Oct 2026 21:00:42 +0000
Files and hashes: 1: KLcO-4pnwNwQ0ENsv05vSQ934W8.roa (hash: FYOxX+97VqHTmC9VAss+Ib9pIE+EbJuTdglUDu9UfW0=)
2: dA8NWdyS0f06Erm6RVd9DfssKjU.roa (hash: IZmapnDLq3R54YRETdfjg+rEgpwO069ZWxHLiaQ38d0=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: 1ZvJqBpxrj1SfX8SO54ivLOBdnIxUrmQ10EubN4si2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8e:9d:66:4d:9e:01:92:59:ce:65:77:40:61:b3:fe:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Oct 30 21:00:42 2026 GMT
Not After : Oct 31 21:00:42 2026 GMT
Subject: CN=d7a89c5a42e0fd6c7b008739d8a561cb5abb3075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:28:84:cf:c0:75:b8:72:1f:76:7b:f2:2d:8d:
d0:e6:cd:2e:f7:0d:e0:d6:d5:2c:70:67:9a:2c:f1:
ed:65:27:52:21:d3:a3:21:9a:fc:a3:62:a0:57:2d:
76:16:c2:c2:cd:60:a7:42:35:e1:99:f3:75:bf:3f:
d8:95:93:9f:42:99:03:20:07:a7:32:8c:59:58:31:
c6:d6:88:60:c5:86:e3:39:84:7b:0c:8c:22:80:98:
da:2d:75:73:76:7c:bc:23:23:2b:39:62:e4:21:23:
ca:df:8e:e2:1d:cd:07:b0:cf:02:8c:e7:55:61:80:
91:b7:2e:5b:e4:16:f5:17:bc:f9:01:e0:c0:82:ff:
57:b3:9e:a2:56:78:54:1d:10:41:d0:a6:7b:87:f5:
b5:6a:ba:16:53:ed:2c:47:83:b9:79:cf:6c:25:a0:
9d:a1:e0:04:06:04:a3:97:57:cd:b8:d6:18:34:a6:
c7:81:f3:07:27:91:ac:5a:62:b4:8e:ae:92:0b:62:
61:84:91:12:4f:91:d2:c9:b5:1d:9f:6c:59:f3:6b:
8b:de:35:4c:77:3f:69:da:8f:45:04:5a:c2:1b:4b:
e6:94:36:46:7e:33:4a:94:e2:e2:c4:75:02:88:0a:
1b:d7:c5:0e:7e:3e:2f:19:fd:5e:6f:96:14:39:41:
09:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:A8:9C:5A:42:E0:FD:6C:7B:00:87:39:D8:A5:61:CB:5A:BB:30:75
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:04:e6:02:81:3f:0d:47:99:4d:23:32:a0:cd:63:2c:43:cc:
8d:ec:f4:9d:25:0e:ce:54:51:a7:26:32:87:01:a5:e2:98:e8:
77:69:a2:ad:f1:b4:70:67:81:d3:2c:9c:a0:09:12:20:0c:c1:
f5:b1:05:97:55:1d:23:cc:9b:07:28:2c:ec:95:4a:65:24:59:
1b:bf:48:55:e9:4d:8f:17:26:72:36:47:6d:2a:4e:9a:62:4c:
c8:e5:f4:51:d1:e2:04:c1:8a:84:1c:8d:85:74:3f:16:ba:4b:
93:e3:0e:70:70:84:b8:72:78:17:53:6a:a6:bb:7c:ba:54:ed:
40:0e:5e:e6:00:09:0d:8f:f4:77:62:5c:34:44:ec:8f:89:46:
46:7e:14:33:ae:db:0f:6d:f0:50:88:4d:b0:8a:6b:90:02:c6:
ab:05:84:ea:b1:f4:e4:3b:8f:ee:3f:df:55:3b:a6:4e:f2:f4:
6e:b3:9d:49:27:5f:4b:70:07:bb:12:dd:bd:07:e5:41:1a:d0:
5a:ba:63:ce:29:01:2a:7d:c3:0e:a7:58:5c:05:62:1e:7b:a6:
6f:57:4e:b7:ce:d8:98:bd:a8:64:71:89:8b:62:37:3a:b0:5f:
d1:7a:83:fb:13:f6:4f:0f:d0:8e:71:52:91:6a:c8:ee:00:75:
dc:fc:2f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 05:17:30 2026 by rpki-client