Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: ZxOsa76GsbgCgPCrrNErKiVOxBCnbnOhr3Vf4uxcKpw=
Subject key identifier: C6:C6:01:97:50:ED:04:77:C5:97:E3:E5:E6:7A:9A:4A:73:CA:0C:70
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 019F830C52C448E183262AF2652A7D4B226F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 10A4
Signing time: Tue 21 Jul 2026 05:00:50 +0000
Manifest this update: Tue 21 Jul 2026 05:00:50 +0000
Manifest next update: Wed 22 Jul 2026 05:00:50 +0000
Files and hashes: 1: AUxe3iOnW0R9FRzl8aepQlk_j-s.roa (hash: F/5QY2qH/5oxR7eNEMu85fTdScF+CggMDUwObVNbh98=)
2: XwZeP_FjPRrGyxH7if_auVWhw38.roa (hash: 4bEVXi89j8g7Wnq/i2v5YpIAVxtMtfePuFt8ghONBAw=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: nozXu0Qq70wAe1imjKUfegzQkEJfo2G4sfjFz18xzy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:0c:52:c4:48:e1:83:26:2a:f2:65:2a:7d:4b:22:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Jul 21 05:00:50 2026 GMT
Not After : Jul 22 05:00:50 2026 GMT
Subject: CN=c6c6019750ed0477c597e3e5e67a9a4a73ca0c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:3c:00:b6:21:65:9d:d7:7c:2a:82:0c:87:be:
14:b2:2c:18:9c:d9:f9:09:04:64:22:f0:97:94:86:
75:34:f7:43:ee:6e:2c:d8:5c:23:04:cf:cb:25:06:
48:4a:e7:9e:b4:fb:ac:af:4e:2a:9c:3a:c8:5d:5f:
74:66:ba:28:44:1b:53:5e:be:0b:78:9f:21:f4:a3:
25:0e:6c:59:55:64:3d:3b:5c:92:cd:69:61:18:93:
6c:63:11:19:77:37:00:72:24:76:b6:d4:e6:39:1e:
a1:b0:2c:62:b4:2f:19:b0:c6:1e:02:bf:b9:de:99:
5b:2e:f4:42:8b:39:4a:c8:05:46:28:81:72:64:75:
d1:28:a3:30:c8:d2:a7:88:90:fc:53:97:d6:43:c2:
42:61:d5:4c:17:1d:c0:c8:4a:90:ca:43:02:54:94:
3b:f7:97:6e:5e:76:2c:45:cf:9b:5f:83:41:fb:c4:
4b:e3:f6:ac:f3:8b:aa:cf:1d:bb:72:d3:b4:7a:f9:
86:07:b4:48:c9:32:0b:dc:f2:15:b9:81:e0:b7:c0:
ea:f1:8e:63:3e:76:0f:d9:0e:14:36:a2:b6:0f:7e:
e5:aa:b3:ae:e2:8d:27:17:7a:a9:67:09:64:c1:c1:
72:35:b2:8a:55:e9:4c:4e:e1:b7:3f:5c:30:82:a7:
9b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C6:01:97:50:ED:04:77:C5:97:E3:E5:E6:7A:9A:4A:73:CA:0C:70
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:3f:f0:8a:93:46:21:10:83:d2:d2:88:72:f5:60:0c:bf:d0:
d3:17:a2:8b:47:3d:a4:e1:30:da:c3:f9:2f:77:22:1b:82:5d:
4a:7c:43:dd:bf:29:1d:c0:76:43:08:1c:64:f9:2e:31:dc:1d:
29:dc:40:b6:89:42:d2:51:9a:64:56:5a:a8:a1:7d:10:93:dd:
54:9f:7a:8b:4b:e6:27:a4:8e:64:21:ce:9c:89:12:91:19:51:
e4:ea:05:86:d7:3a:5f:6d:f4:d0:70:56:54:ad:96:f1:5f:c9:
e6:40:9c:db:b4:07:c9:da:22:5f:e3:c5:7c:ea:5c:5f:c4:a4:
44:92:a6:ad:0a:9e:fb:25:64:29:79:4f:ce:dd:66:23:34:50:
31:b4:8f:b9:9f:3b:f1:58:4a:4a:5e:a4:67:b3:ab:0b:7b:d3:
98:38:f5:42:b0:a2:24:fe:00:d4:64:69:a2:64:3e:f5:86:11:
03:bc:32:bd:44:47:54:5d:55:27:e7:ba:38:c0:ce:fd:e0:c9:
77:55:78:b5:a0:05:ac:1c:41:15:d3:4c:be:f6:32:94:8b:f8:
1b:f6:42:b3:2f:1e:05:28:f4:9c:2c:12:61:3c:71:25:5e:5f:
8a:7d:27:e2:4a:28:0f:21:02:6c:6a:e1:a7:7a:66:b2:f0:75:
e0:32:b1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 10:13:54 2026 by rpki-client