Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
File: k7Hqu-XuDASWgOKryVU0OexkPAs.mft (raw, json)
Hash identifier: 3/9QWYMaq5wmjeUcTV7rwuEWByGjv0/o4L1nAhKPnA4=
Subject key identifier: 14:08:D0:C9:11:BC:78:94:90:65:F2:D0:BC:35:5B:10:4F:0C:CB:4B
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial: 01A08979FDD88006F79B1A2799602549C1A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
Manifest number: 13FA
Signing time: Thu 10 Sep 2026 04:01:08 +0000
Manifest this update: Thu 10 Sep 2026 04:01:08 +0000
Manifest next update: Fri 11 Sep 2026 04:01:08 +0000
Files and hashes: 1: bk8tPJ9EOMV75C2mivaFUdSxCIg.roa (hash: nYMoXp5QMpQVkLvKRSTUqVzpxbW4FhsK/wY7jqg9tKs=)
2: k7Hqu-XuDASWgOKryVU0OexkPAs.crl (hash: x0LZZk3DRgtfCupxIbQCymkv2iwkOwhHPrUfQd737W4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:79:fd:d8:80:06:f7:9b:1a:27:99:60:25:49:c1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Validity
Not Before: Sep 10 04:01:08 2026 GMT
Not After : Sep 11 04:01:08 2026 GMT
Subject: CN=1408d0c911bc78949065f2d0bc355b104f0ccb4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:08:29:97:a1:f4:8a:8c:3e:67:1c:13:45:cb:
95:f8:f4:f1:a1:2e:dd:d3:4a:eb:04:14:96:57:3c:
db:38:39:39:bf:17:8e:96:d3:5f:d9:3a:36:f2:c8:
ae:51:bb:57:6e:32:e4:24:2b:6c:67:aa:7d:4b:5f:
76:41:5a:9a:18:62:2e:47:81:cf:9f:f6:d0:cf:9c:
d8:f2:8e:30:23:33:23:91:0a:c3:71:31:9c:f3:21:
d4:6e:d4:b9:0c:79:a6:90:cc:f1:21:a1:b3:fe:80:
6d:09:64:a5:c2:8e:49:1a:8d:94:0d:1e:ba:df:ea:
79:1c:b5:fc:82:84:27:bc:13:22:c5:33:17:46:86:
70:a2:d2:b0:f5:5e:3a:e2:4d:9e:2d:15:6b:c8:34:
3d:2c:29:9b:24:1f:b1:4d:97:74:2e:94:52:db:fc:
c2:c3:b4:6e:8f:f9:43:0d:98:e6:f8:b8:62:64:fa:
15:d4:0a:38:e7:79:f4:29:ae:45:de:54:b9:2f:65:
a7:5c:ad:d1:7d:1d:17:26:aa:8d:72:ad:d1:21:91:
0f:01:1f:88:dc:43:78:11:11:c8:7f:6e:4b:4a:93:
3c:45:77:5f:7d:d9:79:52:73:8e:f0:5b:da:45:a9:
90:e7:b3:d2:75:15:24:0a:ec:fd:7a:7c:6a:8b:14:
57:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:08:D0:C9:11:BC:78:94:90:65:F2:D0:BC:35:5B:10:4F:0C:CB:4B
X509v3 Authority Key Identifier:
keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:08:eb:a7:b7:c5:55:11:08:21:8c:24:99:f0:a1:47:99:bd:
f1:e0:75:08:68:c6:a3:b6:bd:97:d8:08:78:27:29:92:8f:ba:
4f:8f:e4:c5:36:65:d0:15:93:d7:f5:97:ed:53:56:cd:fb:50:
f2:81:61:2a:41:fe:d6:cf:aa:4a:32:88:47:38:e0:fb:bd:2f:
99:d3:f3:f8:6b:90:2b:47:10:df:6c:51:08:c6:6b:06:19:b4:
97:43:54:10:4b:57:6d:02:16:df:5e:16:e9:49:df:44:fd:61:
7c:3c:0f:e8:85:42:73:c4:f3:ca:7e:45:5e:6d:05:67:1d:fc:
8f:cb:d8:3a:d4:f4:3a:b1:ba:c4:ac:42:bf:82:d1:e9:15:dd:
0f:1b:94:f4:87:f8:37:f0:9d:4c:a5:1c:12:1e:42:60:11:e2:
af:c9:b4:20:4a:d6:32:92:7b:bb:ef:1a:e1:ab:90:71:0f:a9:
07:8e:03:35:3b:ad:7c:a3:30:20:ca:2e:7b:a2:c1:dd:40:fb:
98:ac:0f:3a:46:f3:b5:6d:54:84:cb:d3:c8:5d:1f:a7:e3:d9:
21:f6:68:56:ec:00:61:28:91:56:22:1b:fa:a1:b7:05:72:96:
1e:98:aa:f8:0d:26:47:78:63:fe:66:91:d6:23:99:52:34:40:
2a:ad:9d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 08:52:54 2026 by rpki-client