Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
File: mK9kDIIO61-8kigcYRRPEae9cH4.mft (raw, json)
Hash identifier: sa+KEvuJNIMlNv8ER7zI+4W+gYwceFdwDbg5qU38JzU=
Subject key identifier: 6E:0A:55:FF:56:19:C1:CF:F0:D0:35:89:61:FD:34:0E:B2:C5:1F:2D
Authority key identifier: 98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
Certificate issuer: /CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Certificate serial: 019F84FAE47C613262FA60D93D9A488460D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
Manifest number: 0717
Signing time: Tue 21 Jul 2026 14:01:02 +0000
Manifest this update: Tue 21 Jul 2026 14:01:02 +0000
Manifest next update: Wed 22 Jul 2026 14:01:02 +0000
Files and hashes: 1: L314PIS9EZuLIllvbYG4hWHPUco.roa (hash: oCRJ7CpfVca9XR76mJtqFGhJ4HnpliA09q5+Ns2Ex/4=)
2: mK9kDIIO61-8kigcYRRPEae9cH4.crl (hash: ilDFzPfAVlIfK9zai+yOiB2vyOHlY+n4lcPGVAzX4jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:e4:7c:61:32:62:fa:60:d9:3d:9a:48:84:60:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98af640c820eeb5fbc92281c61144f11a7bd707e
Validity
Not Before: Jul 21 14:01:02 2026 GMT
Not After : Jul 22 14:01:02 2026 GMT
Subject: CN=6e0a55ff5619c1cff0d0358961fd340eb2c51f2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:29:07:3a:e7:78:5a:11:65:e7:43:56:35:69:
9c:14:db:bc:42:62:69:4c:6c:8c:c5:c4:25:7c:d0:
57:8f:96:c4:d5:01:f0:d0:45:d5:4e:36:f0:a5:9b:
13:bb:95:41:6c:6f:33:08:68:1d:87:14:33:20:d1:
9c:68:e8:bf:3b:65:60:8b:6e:de:4d:a4:57:2d:e9:
db:b4:ba:e9:9b:a5:53:11:60:d1:4f:40:a8:21:bb:
c1:6a:2a:5d:cd:af:ce:55:9d:b5:63:73:ce:4c:20:
9c:ed:97:df:10:99:07:13:9a:7f:18:1b:c1:0d:f5:
51:ea:02:8a:dd:90:0b:90:4e:1a:88:7c:91:62:c4:
4a:46:77:59:c5:f1:76:a8:6e:89:7e:3a:e8:27:fe:
0f:f0:98:17:50:5f:3d:53:0c:b9:f6:57:ff:28:1d:
36:69:bb:76:ac:25:55:f1:bd:66:cc:d7:1c:1c:e2:
83:0e:94:a9:e1:ab:b0:96:9e:98:6a:ff:a6:0d:04:
df:a3:d7:ac:73:0e:ef:76:34:ac:f7:75:eb:bd:7c:
54:1c:5c:0e:ff:a9:9f:e7:de:1b:d4:6d:8e:80:d2:
26:b1:fc:a5:05:dc:08:08:fa:62:f5:40:23:c7:28:
34:60:2f:78:01:cc:d1:48:db:fb:ec:47:83:1d:fd:
ac:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0A:55:FF:56:19:C1:CF:F0:D0:35:89:61:FD:34:0E:B2:C5:1F:2D
X509v3 Authority Key Identifier:
keyid:98:AF:64:0C:82:0E:EB:5F:BC:92:28:1C:61:14:4F:11:A7:BD:70:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mK9kDIIO61-8kigcYRRPEae9cH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/122ff4-c4a7-4698-879f-ecab70ef32da/1/mK9kDIIO61-8kigcYRRPEae9cH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:87:d9:e9:09:0f:e4:9e:6a:f7:bb:cf:4b:cc:65:7f:22:66:
14:91:89:76:73:79:54:b3:a0:ed:de:cd:92:c9:1d:b8:58:7c:
fb:ad:9c:be:91:8e:df:25:28:81:68:d4:f6:56:59:bd:b3:29:
a6:d7:74:1c:fb:e7:0f:c4:79:48:38:11:f9:3e:e6:15:18:a8:
ce:ec:25:4e:b5:97:1c:7b:c2:d2:17:b0:c6:8c:e3:bc:0e:dd:
18:45:12:59:ae:53:bd:88:bf:44:52:92:85:40:91:df:4d:a1:
33:d2:59:aa:47:cd:14:2d:37:41:26:c6:e4:73:50:2d:43:09:
bb:19:ef:b5:71:9d:5d:5b:ab:49:89:ac:fe:2f:95:56:cb:0d:
cd:12:1d:ce:bb:59:0e:be:b4:6c:c0:d9:cc:67:c1:0d:c6:c1:
d5:c1:34:21:78:60:24:e2:d4:36:89:46:f5:4f:da:8f:59:5b:
7a:cf:ce:28:22:59:c9:b0:d4:cc:a0:e6:33:f4:c6:0b:8c:bf:
4e:e4:ea:05:f2:c7:30:94:0f:00:cc:f7:c3:4b:1d:e9:8e:f2:
88:8b:92:e0:c6:df:f3:bb:94:90:7b:cb:92:0f:d4:19:ce:ad:
b6:5f:03:8e:39:07:dd:16:59:d3:b3:56:0b:2d:57:ff:3b:11:
35:c2:71:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:13:29 2026 by rpki-client