Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
File: k7Hqu-XuDASWgOKryVU0OexkPAs.mft (raw, json)
Hash identifier: 6JzOjiSu8q7GO7HWkFGr3WH3rSWCQI7NM/VA+uNZLVs=
Subject key identifier: 8A:5D:DE:05:2A:61:0F:B1:E7:17:E5:3F:3B:09:30:87:13:D5:B7:36
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial: 01A17EBD182F7FBF4A34D27C2D4700D3699F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
Manifest number: 1479
Signing time: Tue 27 Oct 2026 19:01:24 +0000
Manifest this update: Tue 27 Oct 2026 19:01:24 +0000
Manifest next update: Wed 28 Oct 2026 19:01:24 +0000
Files and hashes: 1: bk8tPJ9EOMV75C2mivaFUdSxCIg.roa (hash: nYMoXp5QMpQVkLvKRSTUqVzpxbW4FhsK/wY7jqg9tKs=)
2: k7Hqu-XuDASWgOKryVU0OexkPAs.crl (hash: duZvziiNTwuYnoxRqVvliLtXkfEg+t7ZaSkySvgRoHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:18:2f:7f:bf:4a:34:d2:7c:2d:47:00:d3:69:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Validity
Not Before: Oct 27 19:01:24 2026 GMT
Not After : Oct 28 19:01:24 2026 GMT
Subject: CN=8a5dde052a610fb1e717e53f3b09308713d5b736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:79:70:42:41:c8:f7:78:2d:c3:5e:27:2e:fd:
55:d5:95:91:76:7d:8d:e9:46:17:b7:39:65:e0:fb:
5c:db:8c:5b:5e:3b:6c:2b:62:39:9d:9e:c8:9e:94:
04:a6:a3:7e:dd:dc:1d:14:59:8c:d8:ef:e3:12:bd:
35:87:47:5e:31:03:26:33:0c:c6:25:ae:5a:93:9d:
b9:4d:db:7e:bd:7e:3b:6e:3d:eb:b7:f3:1a:78:e7:
02:86:8a:ba:c2:7a:f2:af:84:14:d7:1b:27:2f:26:
5e:1c:bc:0a:40:3f:4c:2f:ec:56:ac:48:87:fd:d1:
19:3d:a7:83:45:2c:9a:0d:cb:cf:e4:e4:1a:87:5e:
fa:02:3b:5f:71:40:63:75:43:8d:71:f5:59:fe:11:
4b:1a:46:20:11:d8:92:21:8a:2c:0a:2d:78:21:d7:
cb:9a:f4:5b:52:cc:ce:40:4f:5b:d3:71:24:f9:c5:
4d:e2:fa:46:8b:da:f2:22:e7:8a:39:cb:74:48:7b:
dd:8c:b8:3b:b8:96:ee:3d:71:ce:47:00:02:84:24:
95:a2:84:b1:43:00:9a:f3:a6:99:f1:9d:31:ef:37:
9a:c7:7c:62:81:8f:a9:9f:5c:52:23:df:cc:8d:0f:
18:1c:ed:fb:55:a8:c1:da:c4:c3:c2:79:29:60:5c:
a1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:5D:DE:05:2A:61:0F:B1:E7:17:E5:3F:3B:09:30:87:13:D5:B7:36
X509v3 Authority Key Identifier:
keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:de:54:bc:f7:7c:37:d5:87:50:53:8c:e4:d7:f2:35:09:88:
c0:79:9e:0e:7c:1e:bc:b6:8b:8c:0f:d4:46:8b:c8:13:36:04:
3b:e6:9d:ef:3b:3d:a4:56:80:88:61:51:06:1e:bf:1d:7f:ff:
4e:f6:d1:e7:03:a8:da:ee:f1:22:a6:18:ab:d3:75:2a:af:07:
cf:a9:4d:84:5e:6e:61:71:f5:7f:60:44:ad:8c:cf:89:b5:1c:
fe:30:e9:8f:75:6b:2d:b7:47:67:ce:fc:01:8c:d4:61:1d:9b:
df:6c:b6:ac:28:72:46:73:c9:52:db:7e:f0:d7:4b:1a:eb:f4:
82:a2:85:07:ff:be:a6:8e:62:69:80:34:83:2b:df:84:2b:8d:
33:1b:ef:4c:7d:a7:aa:30:63:51:d7:a9:ee:1a:1c:da:64:91:
3e:d8:c7:d1:a7:c3:5e:89:ca:89:6d:90:2d:be:f4:08:bf:8c:
4a:b4:28:af:7f:a8:21:c7:c9:f0:53:f5:f9:68:8a:89:b3:c2:
45:57:fd:39:90:73:0e:41:97:6d:87:09:e8:1f:16:01:74:fa:
d3:77:91:ff:a9:d9:c6:0d:33:6c:38:e8:17:f1:1b:23:43:84:
67:b4:2a:05:73:f3:23:28:97:3f:47:12:b5:ae:a0:65:1f:c8:
ea:33:c2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:30:50 2026 by rpki-client