Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
File: k1uI_ryNEnURqcvxW4BJmLHNZoY.mft (raw, json)
Hash identifier: DzUjkxhRBwJQ1xeu9cZGb49NpynMwjzKq0zdXyrhJ+Q=
Subject key identifier: 70:B5:75:D4:EC:27:99:E8:58:73:66:C2:97:3D:E7:7A:43:43:C5:68
Authority key identifier: 93:5B:88:FE:BC:8D:12:75:11:A9:CB:F1:5B:80:49:98:B1:CD:66:86
Certificate issuer: /CN=935b88febc8d127511a9cbf15b804998b1cd6686
Certificate serial: 019E7E8D909BA028A40BEFA06F9EC197BBF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1uI_ryNEnURqcvxW4BJmLHNZoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
Manifest number: 34
Signing time: Sun 31 May 2026 15:01:07 +0000
Manifest this update: Sun 31 May 2026 15:01:07 +0000
Manifest next update: Mon 01 Jun 2026 15:01:07 +0000
Files and hashes: 1: Jle1Wqwc9duNEaBgl4I6cNxXpdM.roa (hash: OBFM1Q4yqKAy/JhwM152fWLO9wCkZnqGzYRwcyY0AlU=)
2: k1uI_ryNEnURqcvxW4BJmLHNZoY.crl (hash: COIlBFs924hm/pFK1Sb4kfuHcM4WKeN5gKYqKkv3u/E=)
3: tWhPmRdm-lCBfCBjSnpAIpwkHdA.asa (hash: CmYFI/mkQzMGe1+SvLrHk5OSNg13/iiannrbVF+QaMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1uI_ryNEnURqcvxW4BJmLHNZoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 01 Jun 2026 11:09:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:7e:8d:90:9b:a0:28:a4:0b:ef:a0:6f:9e:c1:97:bb:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935b88febc8d127511a9cbf15b804998b1cd6686
Validity
Not Before: May 31 15:01:07 2026 GMT
Not After : Jun 1 15:01:07 2026 GMT
Subject: CN=70b575d4ec2799e8587366c2973de77a4343c568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:13:75:c4:79:c5:46:2e:a4:43:21:e9:33:ee:
66:48:5e:7c:5e:67:85:2c:21:35:c8:f6:d7:c7:ef:
0d:1f:d4:44:1d:14:24:e9:d4:94:d9:53:fc:db:03:
0e:4f:ea:c9:c9:b0:f2:5c:0c:62:11:78:ab:0a:4d:
50:e3:90:9e:95:25:8a:5b:3f:cd:5c:14:a9:c8:74:
3e:a4:25:e4:24:67:0d:3c:11:5f:fa:82:b5:b7:54:
6c:ed:e7:b5:28:7d:65:53:67:53:b7:49:2a:9d:bb:
ef:c8:78:c6:bb:c1:2c:6f:8f:c7:1b:1a:67:cf:69:
bc:b1:cd:8f:07:68:db:5b:8e:6c:58:76:0e:3b:3d:
c5:57:4d:41:1f:1d:26:2c:18:ae:b4:d7:9c:2e:33:
80:65:a9:44:e0:6e:96:4d:66:c0:48:f0:4e:c9:f8:
b9:4f:f6:a1:9c:72:a9:07:75:80:d5:6d:1b:41:d7:
ed:47:33:53:6f:05:2c:42:02:9a:df:d0:a5:25:e6:
c1:66:b6:43:18:09:fc:c0:de:6b:81:7c:9c:c6:d7:
59:82:78:54:79:e9:ea:5d:c0:96:2e:b1:d5:e9:d5:
ae:30:fa:71:d5:9d:75:35:eb:9a:d7:6a:ad:45:b8:
99:28:4c:14:9c:c9:12:30:29:6e:5e:09:44:27:92:
7b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B5:75:D4:EC:27:99:E8:58:73:66:C2:97:3D:E7:7A:43:43:C5:68
X509v3 Authority Key Identifier:
keyid:93:5B:88:FE:BC:8D:12:75:11:A9:CB:F1:5B:80:49:98:B1:CD:66:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1uI_ryNEnURqcvxW4BJmLHNZoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:63:d9:00:ea:28:e0:af:0d:91:ac:3e:a9:60:8a:84:ca:12:
f1:29:6b:14:02:3f:dc:d2:6b:5c:74:ee:44:c8:89:3e:34:fb:
63:e8:6f:47:d5:a9:6a:d5:bd:6c:e1:c5:5d:36:51:00:17:93:
3a:23:25:31:3d:14:4b:ac:4f:c9:72:db:4f:fc:73:8e:ac:2e:
c3:70:ad:95:f2:cb:b0:7c:4d:9b:39:9a:11:0a:26:7b:11:8a:
78:9f:35:92:09:dd:6a:ad:54:0c:e2:d5:d0:6d:64:3e:e5:d2:
ba:a5:d9:86:27:7e:5f:c5:42:9a:99:62:44:26:92:45:06:45:
f3:0f:d1:5a:27:3f:64:cf:74:08:c2:7d:9a:53:56:75:5a:61:
2f:8a:06:5b:19:83:17:88:0d:43:08:e8:6a:d3:d3:6f:8c:a4:
53:1d:c2:26:b1:9c:a8:00:e0:32:0b:54:fe:69:af:cd:a7:3b:
d1:15:f1:28:36:a8:87:c1:d7:1a:6d:ae:56:05:6e:40:49:ad:
ee:19:1d:09:d5:27:2a:85:ed:be:28:b4:f0:a9:d6:aa:a0:8e:
42:0b:db:2b:44:bb:99:70:b8:43:f8:1f:3e:86:7c:96:e6:d2:
66:a5:d9:ec:df:5c:35:fc:21:11:5b:7b:7b:f0:d4:ea:81:01:
59:60:fc:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 18:52:14 2026 by rpki-client