Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
File: ks_7H6VV_DWhSvymELOBBf1cZFw.mft (raw, json)
Hash identifier: lKF09L1t4VMBmgqZVr9HAaJWktNllq+1y2XU9dD+pFk=
Subject key identifier: A0:93:46:89:E3:00:40:BE:DF:3D:BA:5B:71:62:5A:FF:3A:59:88:CD
Authority key identifier: 92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
Certificate issuer: /CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Certificate serial: 019D38655B2994DFDF52F7E1EFC054EB5C7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
Manifest number: 108C
Signing time: Sun 29 Mar 2026 07:00:59 +0000
Manifest this update: Sun 29 Mar 2026 07:00:59 +0000
Manifest next update: Mon 30 Mar 2026 07:00:59 +0000
Files and hashes: 1: ks_7H6VV_DWhSvymELOBBf1cZFw.crl (hash: y4dpmed2mXDJyT0Q34+wKj/hwvU2oaPRd8JTD/Wyg9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:5b:29:94:df:df:52:f7:e1:ef:c0:54:eb:5c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Validity
Not Before: Mar 29 07:00:59 2026 GMT
Not After : Mar 30 07:00:59 2026 GMT
Subject: CN=a0934689e30040bedf3dba5b71625aff3a5988cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:a5:48:fc:68:fa:9c:b9:5b:5f:75:fa:2a:
b1:95:bf:c9:61:d2:e5:5d:af:cd:12:e0:a6:01:b3:
8f:0f:65:cd:a0:93:ef:6a:05:0c:6c:74:39:f0:5e:
14:e2:cd:e9:e3:0b:9c:a0:82:1b:f6:e5:da:9a:0d:
3d:df:28:38:bc:8d:39:89:df:44:31:08:da:91:ec:
ce:b6:f8:7e:c0:c8:a3:c8:74:ff:65:7e:1d:91:55:
ae:4a:5b:8e:3e:68:e6:8e:ac:17:62:66:94:68:10:
f0:79:96:b6:5e:7d:3f:2d:35:ba:ff:2d:7f:7c:7e:
02:17:d9:ff:cc:b0:bf:3e:7e:03:d7:12:65:e0:61:
ae:b7:7b:8f:8e:87:09:d5:41:c5:14:6f:c9:1c:45:
f7:5a:a8:3f:24:e3:fc:39:7b:c3:3d:62:f5:2a:88:
ac:ca:c7:e9:e7:53:90:55:6b:1c:4c:66:73:42:08:
3a:03:1c:87:ff:39:e8:9a:ac:4a:f5:ce:a6:ed:d3:
71:cb:d3:bf:38:90:2f:8c:f1:6a:c3:2f:d4:93:6d:
09:c1:fc:6c:1b:98:93:23:39:6d:c0:f8:c2:ce:9f:
53:a5:b2:f6:6b:97:5e:23:8e:e3:51:73:d9:18:09:
0c:df:66:b1:8d:6c:39:7a:e1:87:a6:85:38:9f:ae:
53:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:93:46:89:E3:00:40:BE:DF:3D:BA:5B:71:62:5A:FF:3A:59:88:CD
X509v3 Authority Key Identifier:
keyid:92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:28:1a:41:65:72:88:89:f7:28:5d:6a:68:32:da:9a:bf:57:
f3:13:bf:11:8b:eb:05:15:02:6a:37:fd:a2:6f:1b:04:5e:23:
8a:87:1f:94:33:d2:89:ac:ca:96:8b:ee:46:2d:ed:a5:61:2f:
dd:bf:f0:56:23:bc:2a:a7:31:9f:73:3f:27:71:99:de:7b:de:
56:46:3f:77:67:3f:e4:f5:69:d2:50:9f:4c:24:e9:6f:bf:41:
f5:5a:6d:d5:b2:ee:2b:64:a9:2b:3f:40:e7:16:ac:97:c4:cb:
b5:ff:f0:82:9b:b0:0b:71:6b:d7:46:18:50:79:50:07:58:c3:
e8:2a:5b:29:e3:17:f0:97:91:4b:6e:0b:dd:2f:30:f6:c5:d6:
fb:e6:e2:87:ec:f9:73:03:7c:17:c9:97:f6:1a:6f:50:ee:86:
f3:0f:39:57:b8:85:24:0a:ef:85:34:6d:61:14:b7:ee:91:75:
20:0f:fb:89:3f:fb:68:ca:40:62:35:ab:18:c6:99:f9:a4:25:
de:0c:ea:18:36:e9:23:d0:fd:24:a9:e6:d8:fe:b7:a3:f3:43:
31:c0:07:94:0f:69:47:dd:a6:35:a9:46:28:32:76:f8:c1:e0:
98:a4:00:ee:5d:cd:11:1c:2d:86:6c:1e:98:a1:11:66:30:24:
08:bc:13:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:11 2026 by rpki-client