Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
File: k1uI_ryNEnURqcvxW4BJmLHNZoY.mft (raw, json)
Hash identifier: Fzb1bvTTFhpIbw7y2mwOyetlr6lJIAqiFIIYcF00NU0=
Subject key identifier: C9:C3:97:B8:0A:80:4C:1A:84:BE:8D:7B:C6:06:AF:D9:18:A2:0C:5B
Authority key identifier: 93:5B:88:FE:BC:8D:12:75:11:A9:CB:F1:5B:80:49:98:B1:CD:66:86
Certificate issuer: /CN=935b88febc8d127511a9cbf15b804998b1cd6686
Certificate serial: 01A0E66346A51FAB24E3AAE5AEDF24343493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1uI_ryNEnURqcvxW4BJmLHNZoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
Manifest number: 0173
Signing time: Mon 28 Sep 2026 05:01:00 +0000
Manifest this update: Mon 28 Sep 2026 05:01:00 +0000
Manifest next update: Tue 29 Sep 2026 05:01:00 +0000
Files and hashes: 1: Jle1Wqwc9duNEaBgl4I6cNxXpdM.roa (hash: OBFM1Q4yqKAy/JhwM152fWLO9wCkZnqGzYRwcyY0AlU=)
2: k1uI_ryNEnURqcvxW4BJmLHNZoY.crl (hash: C9PcBRwe0D8zWYCiudzcJqrX33gklnPxk6XT2ffgMnI=)
3: tWhPmRdm-lCBfCBjSnpAIpwkHdA.asa (hash: CmYFI/mkQzMGe1+SvLrHk5OSNg13/iiannrbVF+QaMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1uI_ryNEnURqcvxW4BJmLHNZoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:63:46:a5:1f:ab:24:e3:aa:e5:ae:df:24:34:34:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935b88febc8d127511a9cbf15b804998b1cd6686
Validity
Not Before: Sep 28 05:01:00 2026 GMT
Not After : Sep 29 05:01:00 2026 GMT
Subject: CN=c9c397b80a804c1a84be8d7bc606afd918a20c5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dc:12:c9:70:7a:90:4f:0c:02:62:76:2e:b7:
f2:ad:35:96:99:43:55:0e:5f:f3:63:04:1f:a6:43:
cd:90:4d:79:a8:0f:29:2d:d4:7d:03:69:2b:8e:c3:
97:bc:5d:45:62:15:7e:3c:8e:25:fc:a9:c0:c3:4b:
e9:8e:ad:0e:44:22:d8:20:91:75:01:08:e3:57:16:
c3:50:f8:43:05:6a:62:7f:99:4a:26:5c:fb:35:04:
94:35:f2:e9:55:ac:cb:bb:61:41:57:fa:45:cd:50:
09:84:15:b5:6e:9b:48:ed:81:d2:fb:7b:54:36:dd:
8d:72:15:a4:07:91:88:dd:9f:d3:b0:64:de:8d:10:
3b:4b:17:0b:ae:7d:b2:cd:f8:63:85:0c:2c:7b:3e:
62:d1:eb:74:0b:24:64:a9:88:a9:14:61:41:c4:ec:
4c:40:6b:82:d9:18:23:a8:fb:51:49:9c:df:84:ce:
fe:75:3d:b1:32:d4:bd:3b:9f:2b:72:70:48:f1:dd:
22:61:71:71:29:5a:fd:44:1c:59:ca:d4:c3:dd:5d:
f0:ef:87:f8:0f:be:f8:53:27:05:1e:4d:dd:a3:99:
20:15:a2:07:1c:06:9f:ad:87:c2:55:86:72:2c:94:
e3:e4:22:8f:48:e7:cf:98:ed:e6:8f:9b:e5:37:c6:
10:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:C3:97:B8:0A:80:4C:1A:84:BE:8D:7B:C6:06:AF:D9:18:A2:0C:5B
X509v3 Authority Key Identifier:
keyid:93:5B:88:FE:BC:8D:12:75:11:A9:CB:F1:5B:80:49:98:B1:CD:66:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1uI_ryNEnURqcvxW4BJmLHNZoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6f:aa:aa:d1:ec:42:75:5b:d4:a8:4c:31:69:14:53:ba:cb:
5f:5d:74:83:7c:e8:c8:8d:67:9e:ae:20:5d:ad:09:05:0b:e9:
2b:7b:e3:74:fd:a6:0d:b4:3a:45:6c:33:a9:1c:74:6e:f6:22:
0f:fd:af:bf:b3:99:85:8a:9a:5a:b3:f3:7b:9d:a7:1c:17:09:
2e:ba:a2:0d:f9:0a:98:fa:62:89:3e:aa:2f:5c:98:1e:4d:e3:
41:f0:b6:8e:6f:1f:8d:db:3d:8a:e3:11:68:d8:c2:a3:f1:40:
69:94:41:95:07:75:89:51:50:dd:2e:d6:2e:ce:a3:c2:56:aa:
ca:6f:33:a1:e6:b2:f5:b8:e9:c7:f8:8d:d8:15:aa:04:cd:b1:
9d:33:bb:05:1a:0b:12:13:16:8d:3c:58:47:68:29:f1:e6:79:
01:b5:3d:30:e4:20:0c:ce:ef:f2:2c:b5:9e:8c:78:e3:d1:cd:
47:48:9b:ac:66:a1:50:03:f0:d7:a3:8d:84:a7:28:96:d4:3d:
4e:f1:ad:36:2d:c4:36:9d:3f:94:45:ae:63:d0:88:2d:bf:20:
45:b1:95:fb:c4:03:af:8c:d3:73:7e:18:76:57:08:52:58:bb:
38:8e:5f:0c:2f:1c:d2:de:17:17:81:cc:3a:d8:1a:f5:d0:43:
e6:90:4f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 12:56:00 2026 by rpki-client