Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier: O8UBIeHKVIWAzZIN2M2376FrV06dywZvClWsFT3Qx9U=
Subject key identifier: 35:8A:3F:A8:19:12:85:2B:F3:71:58:F7:99:B3:99:4C:9F:F8:E2:6E
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 019FA14D83078B73EC8D84336ABE2FE42DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number: 08E0
Signing time: Mon 27 Jul 2026 02:00:39 +0000
Manifest this update: Mon 27 Jul 2026 02:00:39 +0000
Manifest next update: Tue 28 Jul 2026 02:00:39 +0000
Files and hashes: 1: S_Jp9m9blIUps0OicsJ0YR9eOvE.roa (hash: Be16CYxyexdW5EkOG7OmNRTbUwOGD3q//e7OhhleAMQ=)
2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: xOGMf6icS1B4K/QFSBeqBVho0jHBfqLIdyxkTl8+rsQ=)
3: yIOWYvs8zmXxlBajX3odsYxOM8Y.roa (hash: d8ux5xGWiDuWJb9M/rhcfhWw34lH4Et949GrjMpaIAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:83:07:8b:73:ec:8d:84:33:6a:be:2f:e4:2d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Jul 27 02:00:39 2026 GMT
Not After : Jul 28 02:00:39 2026 GMT
Subject: CN=358a3fa81912852bf37158f799b3994c9ff8e26e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:2a:4b:44:a8:85:c3:2c:72:f0:ed:03:96:
d7:38:a0:5d:5a:94:cc:b9:e0:65:70:f0:3b:1a:aa:
54:64:e7:c0:1a:7e:45:54:40:79:ce:a5:51:76:af:
51:64:06:4c:e2:37:f1:50:8e:9a:91:ea:31:fd:51:
00:a9:e1:74:bb:e8:65:24:3f:8e:4e:2e:ce:9b:54:
38:8b:b3:02:3a:1c:fd:04:7e:ed:12:30:be:2b:f6:
7f:df:bc:f9:e6:c5:be:65:cf:5a:30:47:61:ac:6c:
d9:23:13:68:a7:95:75:6b:5c:25:c5:63:85:4d:b5:
a4:c7:ff:19:6e:b1:28:a7:a2:93:af:1e:c6:50:5c:
ee:79:ec:d0:22:2e:3d:3f:ad:bf:f1:27:af:b4:22:
c1:66:63:ee:8f:f8:54:b3:15:df:1c:3e:6c:84:e7:
33:82:99:39:dd:98:9b:05:33:16:e3:47:7e:fe:e0:
c4:81:c1:b7:80:ad:02:8e:60:c7:6e:a8:38:12:17:
7a:21:1a:f9:0a:e0:13:14:a2:be:23:b3:76:34:64:
7f:d5:d7:bb:9e:2e:eb:c6:10:4b:f5:bb:fc:9a:7b:
d1:42:ea:9e:06:68:6c:29:cd:e5:cf:39:53:1c:76:
14:f9:b5:78:20:aa:1c:4d:c2:0b:33:13:cc:15:1b:
52:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8A:3F:A8:19:12:85:2B:F3:71:58:F7:99:B3:99:4C:9F:F8:E2:6E
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:cf:f0:0f:ef:6f:99:e5:a8:0c:f7:77:cb:06:2d:57:cd:31:
e7:b8:35:ce:f3:e9:09:0d:98:47:b4:13:2f:ce:ec:e1:91:9b:
de:5d:ab:00:8d:c2:91:c0:69:a5:11:f3:91:95:78:0e:2f:29:
cd:6d:5a:41:86:8b:3a:d9:9a:f6:eb:af:11:c8:99:7b:5d:a8:
7e:8f:83:50:09:c9:40:fe:75:b7:d8:a0:14:d2:0e:85:8f:83:
41:c0:b7:3e:4c:5d:d6:83:f3:25:a0:88:8c:fc:6c:a7:e8:86:
8b:ad:a4:11:b4:5b:84:e0:12:2b:6f:1f:e1:f0:0c:9d:cc:79:
6a:15:d9:b1:30:e9:02:de:f5:f2:c5:de:d2:a4:9a:c7:70:8b:
fd:1c:e0:24:73:9a:5b:fc:68:db:2a:33:3f:15:76:87:a8:e0:
a9:ff:a9:70:ea:3a:14:54:5b:21:4b:55:91:67:ce:89:2a:a3:
4e:f6:1d:07:91:38:01:e0:20:78:90:9e:87:b3:ae:df:07:4c:
03:76:f7:5c:a5:06:23:a6:65:fb:1d:69:27:2a:db:38:6e:dd:
c5:0f:b1:55:c1:6a:4a:95:e9:de:dd:ca:19:4b:68:4e:cb:90:
77:64:34:8e:b3:90:7b:bc:d0:e0:e3:37:67:9d:56:ea:c6:2e:
b5:17:48:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:20:15 2026 by rpki-client