Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
File: 7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json)
Hash identifier: Ugt8V7bPl+YKw189GzbMR+j/O7+qReJq6qdSljxffjw=
Subject key identifier: 94:2B:20:8C:F2:A4:5D:47:F4:49:31:F2:EA:D6:25:EF:FE:8B:98:1B
Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
Certificate issuer: /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Certificate serial: 01A08E6A225A3B1E347D1ADBCDCDB3FF3F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
Manifest number: 1A4B
Signing time: Fri 11 Sep 2026 03:01:55 +0000
Manifest this update: Fri 11 Sep 2026 03:01:55 +0000
Manifest next update: Sat 12 Sep 2026 03:01:55 +0000
Files and hashes: 1: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: pqszRiMAwkmSLJqLDRLIMDtgPAoYAALEYie8lq98egg=)
2: krZVBDiWkvm4PD1vJnwzxrmFRBs.roa (hash: U9k/zcmCxVKcnCozIhgmcwJH3uFDUp/Q9q36sgU5rBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:6a:22:5a:3b:1e:34:7d:1a:db:cd:cd:b3:ff:3f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Validity
Not Before: Sep 11 03:01:55 2026 GMT
Not After : Sep 12 03:01:55 2026 GMT
Subject: CN=942b208cf2a45d47f44931f2ead625effe8b981b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b8:d1:16:4b:c6:aa:68:b1:7e:57:10:a2:e6:
04:0f:d1:da:26:26:d1:3f:74:41:37:65:18:7d:97:
4d:ed:3f:65:e5:85:a8:53:40:01:d1:ae:72:99:27:
fb:81:0d:29:79:d5:f5:50:b8:10:b5:ef:66:ad:9b:
64:38:9f:48:e8:27:50:5d:e2:a6:f3:70:b9:20:fc:
c7:a3:f5:ec:e9:ae:4c:f9:76:7e:99:70:68:14:87:
0a:28:24:b9:db:02:aa:31:e6:2c:bc:ad:e4:7e:c1:
68:a8:df:e4:cc:e9:bf:c1:85:d7:4b:85:a3:ab:28:
be:e5:f6:bd:35:22:dd:16:55:a2:df:ed:36:36:b4:
9a:37:5b:a1:29:86:26:ea:7b:9a:d9:1f:e3:c5:b2:
e0:16:d8:ac:f9:54:d1:72:a4:00:f1:ac:54:08:12:
df:32:a0:82:49:83:03:cf:03:0a:1f:6c:a6:59:60:
3f:51:67:0f:73:65:8d:73:c3:3a:79:c8:70:0c:b1:
a9:fc:9f:8a:fc:be:cb:a1:e1:aa:23:19:62:62:bc:
5e:17:ab:f3:a6:2c:a7:ac:ad:a7:22:a2:33:60:56:
55:66:2b:53:ac:7d:ad:bc:36:2d:63:02:34:24:b6:
97:0c:c3:b6:81:53:a1:d5:44:c3:f6:06:e5:ed:e0:
ea:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:2B:20:8C:F2:A4:5D:47:F4:49:31:F2:EA:D6:25:EF:FE:8B:98:1B
X509v3 Authority Key Identifier:
keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:7b:f4:d1:dd:2b:c3:ea:00:7f:4a:53:7e:fc:68:e1:bd:9d:
0c:03:8d:80:f9:17:be:37:fe:ba:64:cb:85:dd:09:62:ef:2c:
a5:bf:39:99:a4:f3:63:67:f1:18:13:b3:97:16:08:6d:d3:a2:
20:da:70:e3:1a:84:1d:c1:ef:7b:25:33:94:fc:66:60:e9:2e:
2a:a4:63:ab:17:a1:ea:76:b3:ed:b7:db:2e:b6:73:17:2d:52:
aa:08:5e:a5:f4:3d:7e:e8:c2:e7:7f:1e:10:8b:a0:b7:11:f1:
cd:c8:2e:d9:3e:66:85:fb:13:b5:ea:47:6e:84:0d:da:0b:fa:
68:5c:93:d7:af:2d:36:76:d8:18:e5:ef:a1:1e:5b:23:87:f5:
8b:f0:6d:a0:ec:d8:3e:ad:50:9f:64:f1:a1:34:cb:7a:99:ec:
9e:67:3e:77:8d:3a:09:16:d3:cf:46:b4:ab:33:11:d1:c0:b1:
05:d1:fc:29:07:b8:86:61:d9:0d:5e:11:62:94:38:3d:d6:86:
ad:2f:ff:ed:2a:36:3a:26:8f:d7:16:fc:ca:ac:80:26:c8:67:
6e:c7:98:b8:c4:b4:e6:71:f2:51:a1:42:49:e1:fa:da:cf:12:
95:d9:9f:c0:c5:fb:42:4c:f4:52:a2:46:b1:dd:e9:db:9e:9d:
32:a9:2b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:14 2026 by rpki-client