Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: GBeeGdoaCYq5B+knlLdGVuizM5HQvd2VXkVx0jMncCs=
Subject key identifier: 5D:CD:0A:78:55:3F:34:FE:EA:53:87:43:7D:62:B0:2A:EC:42:5B:30
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 019D382E4231B9F092FE445FCD42FFFD947F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 06:00:48 +0000
Manifest this update: Sun 29 Mar 2026 06:00:48 +0000
Manifest next update: Mon 30 Mar 2026 06:00:48 +0000
Files and hashes: 1: KLcO-4pnwNwQ0ENsv05vSQ934W8.roa (hash: FYOxX+97VqHTmC9VAss+Ib9pIE+EbJuTdglUDu9UfW0=)
2: dA8NWdyS0f06Erm6RVd9DfssKjU.roa (hash: IZmapnDLq3R54YRETdfjg+rEgpwO069ZWxHLiaQ38d0=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: DGoJ6xfVMhK7pOjNqT0PoUszlNmS03Ty+iNGB+z5mw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:42:31:b9:f0:92:fe:44:5f:cd:42:ff:fd:94:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Mar 29 06:00:48 2026 GMT
Not After : Mar 30 06:00:48 2026 GMT
Subject: CN=5dcd0a78553f34feea5387437d62b02aec425b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fc:ca:77:4a:b5:8f:d2:69:d0:ec:a9:96:fa:
7f:c2:b1:95:a7:92:1c:8d:50:3d:39:d8:45:05:d5:
ad:33:78:d4:78:08:ac:9a:93:97:52:26:bb:1a:10:
91:fa:e9:6c:99:fc:20:8e:d4:f5:d1:6e:1f:78:a2:
94:80:0b:3a:bc:c6:42:48:f0:10:9c:e6:97:72:61:
d5:35:c9:59:4e:f3:4a:7c:60:fd:50:c1:b8:ba:05:
2c:95:ca:df:35:3a:b6:b5:ef:9f:13:bf:fa:0a:6b:
f8:26:7d:ee:d6:57:cb:ab:79:0a:75:89:85:23:68:
4c:3e:23:34:1d:0a:68:c5:98:58:93:8a:77:25:5b:
a9:41:58:ee:33:74:df:a4:07:ca:4e:e8:7c:8b:ad:
81:50:dd:09:5a:21:af:ed:e0:73:b6:3c:f4:ff:1d:
7c:31:85:da:18:f0:56:01:2e:cc:26:1e:1a:0a:f0:
c9:89:a3:5d:61:c8:79:e0:f4:93:e4:8e:6d:a4:96:
b4:bb:39:fc:0b:e5:29:ec:f0:7d:f3:01:a0:90:4a:
d6:52:8b:a6:5c:92:1d:cf:dd:06:74:91:db:b2:f2:
a6:fc:94:fc:b3:27:1c:86:74:f9:a8:49:6b:2e:f1:
c3:2d:99:58:5d:a2:a5:65:ff:aa:c3:4d:a2:af:e3:
7a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:CD:0A:78:55:3F:34:FE:EA:53:87:43:7D:62:B0:2A:EC:42:5B:30
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:01:21:5a:c9:be:c0:84:ee:3b:0d:e4:a6:96:4c:d7:00:c2:
8c:d9:75:26:56:eb:7c:1d:d2:4e:7a:13:34:79:dd:93:2b:36:
55:ae:75:1e:01:3e:88:b5:0e:54:ef:31:33:70:8f:01:a4:f9:
37:d4:b8:35:a2:5e:86:a2:f5:b1:32:b9:72:80:f7:e7:7f:08:
56:33:0e:68:4e:28:cd:01:8e:cf:f2:3a:56:e4:46:6e:68:d8:
af:cf:32:9f:18:87:51:83:6f:72:70:de:01:6f:74:9b:b8:73:
42:9f:8d:56:2e:f2:de:76:3c:1b:01:40:78:e8:aa:71:be:1a:
9c:2e:74:3e:10:5e:88:79:0e:33:f2:87:95:26:f0:48:b8:3b:
61:48:d9:95:88:38:4f:ae:bb:c6:14:58:92:84:fe:60:2b:52:
9c:39:c8:61:65:03:1e:fb:50:dc:9b:58:1c:65:ac:f2:fe:86:
36:d0:fa:7f:89:aa:21:6d:93:50:0b:be:83:b0:3b:66:b1:9a:
91:13:d2:a8:ce:89:16:d3:d6:df:96:52:68:86:da:49:7f:0f:
4c:2b:90:c9:85:ec:83:73:35:38:1c:8c:af:09:32:ec:49:19:
3c:0d:4f:e5:8f:73:81:c8:7d:1f:22:33:06:84:83:d3:d8:5e:
7a:b7:b3:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:25:15 2026 by rpki-client