Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: 6xZNhRig/IEWUKSv3o+/UOkpRZqlktUJoHUItZPzGD0=
Subject key identifier: B6:E0:E4:FC:15:20:22:27:46:25:71:1A:14:1F:B0:09:5B:A2:3E:8C
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 01A06CB8E46FC00ADF89D121055B638DBB67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 111D
Signing time: Fri 04 Sep 2026 14:00:51 +0000
Manifest this update: Fri 04 Sep 2026 14:00:51 +0000
Manifest next update: Sat 05 Sep 2026 14:00:51 +0000
Files and hashes: 1: AUxe3iOnW0R9FRzl8aepQlk_j-s.roa (hash: F/5QY2qH/5oxR7eNEMu85fTdScF+CggMDUwObVNbh98=)
2: XwZeP_FjPRrGyxH7if_auVWhw38.roa (hash: 4bEVXi89j8g7Wnq/i2v5YpIAVxtMtfePuFt8ghONBAw=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: DZo5IoijCtnSVs6Ir3zc+b2IqYge+/7la/d0LBE8j9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6c:b8:e4:6f:c0:0a:df:89:d1:21:05:5b:63:8d:bb:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Sep 4 14:00:51 2026 GMT
Not After : Sep 5 14:00:51 2026 GMT
Subject: CN=b6e0e4fc152022274625711a141fb0095ba23e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:32:d2:60:09:f1:91:37:97:20:31:d3:73:
38:1a:36:c1:ca:b2:4e:f4:9e:55:85:f9:2c:ec:b1:
63:4f:69:94:9a:65:1f:46:b1:3e:27:0e:e1:65:79:
f6:77:b7:43:97:bd:76:39:d9:4d:cd:fb:d1:7d:a2:
67:c3:ad:e2:74:d6:42:e8:b4:33:14:14:ab:c8:a6:
a2:97:01:58:82:4d:ff:85:91:aa:d6:02:c5:d1:b3:
2b:4b:95:73:5a:47:73:5a:9b:59:e4:86:b0:c4:2b:
2b:8f:33:56:48:98:da:13:f5:c1:2f:c3:75:0b:13:
d8:9a:2b:dd:08:ac:4f:96:a6:e7:87:98:7d:40:27:
82:bd:e7:0e:98:2f:62:94:36:b9:35:2c:5b:33:3a:
6e:c6:b3:7e:e4:5d:d9:0a:89:bd:9b:28:aa:36:4e:
1d:38:d3:5b:57:b4:60:9d:c3:3b:b6:f2:19:db:a1:
3c:e6:91:7e:2c:c9:50:a9:e3:85:97:ea:bf:ee:d1:
c9:0d:cf:e9:f5:fc:54:df:f0:db:07:d0:9b:ab:cf:
52:3c:62:0f:52:ec:2a:ab:dd:03:fc:87:7f:36:25:
17:b5:d3:f4:28:de:ba:62:99:9c:a8:d1:8e:2d:0b:
cf:09:18:f6:8c:e6:3a:76:53:fd:63:da:22:72:64:
e9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:E0:E4:FC:15:20:22:27:46:25:71:1A:14:1F:B0:09:5B:A2:3E:8C
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:85:64:e4:a4:3d:3a:8d:92:a2:b8:6d:52:1b:fc:5a:72:e2:
a6:fa:c9:07:b1:b7:5f:8a:99:36:ab:cc:bd:b3:98:ed:38:a3:
d1:0b:8f:3b:44:83:a8:b4:62:aa:f8:9d:d6:e9:52:71:71:5a:
d4:08:b9:24:69:94:0b:81:2e:b1:2d:c1:ad:98:3c:7f:14:67:
e9:21:38:3b:ba:29:46:c8:98:22:97:59:d8:b8:5a:07:c9:55:
49:f1:4f:a0:80:5a:c7:e5:5f:81:6a:63:6d:80:db:b8:b3:f4:
c5:54:11:26:40:24:5f:06:f3:a6:d9:50:f8:ee:6c:77:5c:ad:
f6:fb:56:5e:4b:18:51:61:15:44:db:09:9b:16:47:27:51:1a:
c0:90:92:16:a4:e1:28:c6:dc:a6:4b:99:c1:e9:c0:ff:01:9b:
99:b3:68:8c:f3:87:21:25:d7:23:48:1f:49:bd:e8:34:da:4d:
77:a9:4f:c6:42:30:a1:fa:40:75:97:a9:24:4d:20:bb:12:7e:
a9:e9:a7:e2:e2:62:a6:b7:3f:ff:12:94:62:ff:25:8a:1a:13:
9a:99:57:2c:6f:f4:26:b3:10:26:12:4d:b2:f2:68:57:bf:42:
51:47:6a:0d:08:0d:f9:6b:8d:fa:f9:ca:c5:f1:e2:a6:62:63:
d4:91:a8:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:53:50 2026 by rpki-client