Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: mzZvjr7pf8cblOrOO+ph9wp3OVqbA9ouu6IeODbU0bk=
Subject key identifier: 83:11:6E:63:0F:28:9E:73:09:61:9F:2C:DC:F2:67:6D:9E:F8:3C:C6
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 01A15A4202FD46DA08DCA2618DDEDF0EA37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 1198
Signing time: Tue 20 Oct 2026 17:00:37 +0000
Manifest this update: Tue 20 Oct 2026 17:00:37 +0000
Manifest next update: Wed 21 Oct 2026 17:00:37 +0000
Files and hashes: 1: AUxe3iOnW0R9FRzl8aepQlk_j-s.roa (hash: F/5QY2qH/5oxR7eNEMu85fTdScF+CggMDUwObVNbh98=)
2: XwZeP_FjPRrGyxH7if_auVWhw38.roa (hash: 4bEVXi89j8g7Wnq/i2v5YpIAVxtMtfePuFt8ghONBAw=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: wODZHUbnLTeI7xFL46jVyKjCSGXjFDw4c/QyIq6jWxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5a:42:02:fd:46:da:08:dc:a2:61:8d:de:df:0e:a3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Oct 20 17:00:37 2026 GMT
Not After : Oct 21 17:00:37 2026 GMT
Subject: CN=83116e630f289e7309619f2cdcf2676d9ef83cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:49:0d:9a:fa:12:f6:cd:da:99:25:8c:13:5d:
83:70:85:82:31:85:f0:14:85:29:31:af:b0:c4:08:
64:bf:b5:0b:35:d3:6d:b1:c3:a9:e8:0d:b1:05:a1:
6a:5f:bd:e3:a3:8f:ce:84:e8:b3:e5:f9:e0:23:32:
d7:24:2b:b9:04:cf:3e:23:bf:8e:c1:94:ed:cb:8f:
ef:14:93:86:46:94:a6:2c:95:19:db:0a:05:24:7a:
9e:d7:1f:f2:a9:9a:8b:7d:4c:11:a2:b1:b6:e9:b9:
ca:21:f2:fa:18:36:9a:5f:93:3b:60:87:74:df:8d:
6b:bb:ef:03:5d:35:8b:d8:8d:5a:0f:ff:54:cc:76:
15:c8:26:0d:c8:de:5d:03:b9:bf:38:c1:c0:c0:e6:
76:86:c0:a3:51:19:f7:34:83:b8:f0:ba:36:77:d1:
0a:1d:d7:94:c4:f5:21:8c:63:05:b6:ad:c8:b7:bb:
14:c3:56:9e:65:d5:06:2c:41:26:7a:57:24:4a:8a:
70:62:87:ca:f2:81:e5:e9:bf:e7:ee:ae:ec:9b:7f:
55:b3:de:2b:40:23:0d:b1:cf:9b:db:e4:60:13:67:
f5:5e:0c:48:32:71:f7:43:1d:95:0c:2f:65:ac:41:
83:19:24:7c:5a:ec:1c:ee:30:3b:55:d2:eb:0e:6b:
8a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:11:6E:63:0F:28:9E:73:09:61:9F:2C:DC:F2:67:6D:9E:F8:3C:C6
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:14:c7:55:7b:dc:93:4a:1f:85:a2:f6:6d:6f:40:12:5c:d0:
12:0e:54:1e:ff:80:01:88:ae:9c:03:3c:99:6b:9a:91:3e:b5:
bb:16:b5:d7:f4:0f:c1:30:21:86:4c:63:4f:1f:91:40:b9:b1:
68:af:b5:a5:3e:f2:d7:2f:2a:fd:94:60:92:f1:86:9b:e8:86:
ba:d9:92:1a:93:56:65:fa:ab:81:54:56:58:89:1f:5d:71:2a:
63:54:a8:32:4c:47:aa:eb:76:f8:e8:5d:6b:a4:34:20:d4:0c:
7f:b6:0c:7a:c7:a0:0c:95:8a:78:3b:e1:7f:ee:35:57:0d:21:
ea:63:12:3c:79:ad:f2:d3:ee:fc:18:ed:83:78:8d:12:0c:05:
83:a7:e0:86:e2:a7:73:cf:68:00:ad:84:0c:97:5a:41:c0:df:
46:94:b3:f1:25:cd:55:27:2e:28:4b:ee:66:52:00:57:16:d5:
74:f2:c5:73:0b:5b:cc:a5:f8:84:36:78:05:53:bb:de:a3:1b:
0d:ec:42:69:7a:49:9d:f5:45:9a:7b:61:89:b6:97:a0:3f:7f:
96:22:71:aa:ce:51:6a:c5:94:40:19:99:57:0a:33:6d:0c:9d:
6c:b6:8a:68:87:5d:50:1e:0a:55:57:0d:a7:a7:4b:55:38:c0:
59:c7:d0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 03:12:08 2026 by rpki-client