Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
File: k7MitZBI4Qe5Sm2wZVevXwycKQw.mft (raw, json)
Hash identifier: J+kfP8Quh4rZsYKuyUsMzsmeJ8Q+WrjjpkCaRlNEp6c=
Subject key identifier: 65:1D:57:10:BF:EA:34:4E:60:DB:81:FC:85:0E:24:50:8B:FC:49:3C
Authority key identifier: 93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
Certificate issuer: /CN=93b322b59048e107b94a6db06557af5f0c9c290c
Certificate serial: 01A17EBCC26636B155983EB756E73A4E74ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
Manifest number: 1A58
Signing time: Tue 27 Oct 2026 19:01:02 +0000
Manifest this update: Tue 27 Oct 2026 19:01:02 +0000
Manifest next update: Wed 28 Oct 2026 19:01:02 +0000
Files and hashes: 1: 8Na-R2PqVFyNzA5u6KAFRMf11HE.roa (hash: 8IZEcdLtXy5KbQ5iic2lrmgZO3w7ovtbGyG4T1KJfkY=)
2: k7MitZBI4Qe5Sm2wZVevXwycKQw.crl (hash: zzgSR3BJDwF6OchaTYASqrFmi9Cli/JGU2GmK8ormcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bc:c2:66:36:b1:55:98:3e:b7:56:e7:3a:4e:74:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b322b59048e107b94a6db06557af5f0c9c290c
Validity
Not Before: Oct 27 19:01:02 2026 GMT
Not After : Oct 28 19:01:02 2026 GMT
Subject: CN=651d5710bfea344e60db81fc850e24508bfc493c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f5:c7:f0:1f:d6:9f:41:02:20:85:db:03:bc:
aa:03:07:77:dd:e0:83:97:db:4e:80:20:97:5f:4c:
5d:4a:f5:e9:94:00:7b:00:c9:0b:69:fa:68:c0:6e:
fb:e3:20:9e:aa:df:ec:dd:d5:87:00:7b:c8:92:74:
2e:97:9a:74:ee:ef:2e:a1:4a:21:32:30:9b:10:dd:
55:73:f7:32:62:1f:29:7b:60:b9:5b:3f:83:bf:15:
3d:8b:b9:db:3d:bb:90:5c:95:e9:ac:5f:5a:53:b0:
b9:15:97:aa:fd:73:e3:6d:c4:7b:00:95:19:55:2b:
27:cf:28:39:5e:2b:2e:d4:28:2b:03:e9:37:2c:59:
1f:f5:8d:d1:b4:e6:b3:bf:32:c9:88:bb:a4:48:46:
21:7e:b6:52:96:f0:1e:40:bc:9e:36:e8:e9:f6:4b:
fb:db:01:cc:fc:a3:84:3e:84:a9:76:4a:2b:9a:40:
f5:18:62:bd:89:c5:2f:72:60:91:11:f6:ab:b8:19:
e4:91:0f:f6:89:5f:28:48:3d:91:a3:cf:42:ca:a6:
30:46:c8:53:c2:5a:1e:3d:e1:69:c0:e0:1d:ec:0b:
0d:d5:51:01:52:bc:ab:2d:64:f1:95:b9:9b:9b:41:
cd:40:eb:a2:9a:aa:6e:b8:a9:b4:be:86:9b:a3:e6:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:1D:57:10:BF:EA:34:4E:60:DB:81:FC:85:0E:24:50:8B:FC:49:3C
X509v3 Authority Key Identifier:
keyid:93:B3:22:B5:90:48:E1:07:B9:4A:6D:B0:65:57:AF:5F:0C:9C:29:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7MitZBI4Qe5Sm2wZVevXwycKQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/7ff520-7270-4a98-aec9-ef604d416c37/1/k7MitZBI4Qe5Sm2wZVevXwycKQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f0:bc:5f:3d:f6:09:91:6b:b6:54:c7:92:c6:1e:48:ae:2b:
f5:a0:63:b3:55:ad:a4:b7:fd:d8:06:e3:3a:b3:37:02:47:8c:
9b:1e:f1:17:dc:3d:3a:cc:cc:bf:85:26:7b:db:71:9f:60:6d:
62:ce:d3:b0:ef:e7:74:57:01:5b:62:49:f8:ac:81:6a:ea:24:
d0:da:15:7d:7f:ea:d9:92:bc:75:0b:e8:e2:d9:97:21:ba:8b:
21:3f:e0:39:ec:f9:09:63:28:a9:6d:19:0b:d4:f5:c6:1c:bf:
eb:6e:07:aa:c5:90:94:e1:73:32:a1:1c:f5:54:f1:e0:ad:19:
9b:46:9f:88:2e:4b:d3:3a:b4:73:63:18:74:c6:85:c7:fe:6b:
22:47:9e:4b:64:99:d4:1f:23:56:ba:00:f6:63:70:e0:2e:6e:
7b:2c:4d:90:ee:6b:88:52:9f:b1:cf:d9:2b:8b:83:41:70:fa:
56:c1:43:aa:c8:d0:37:9f:26:0a:78:c7:9a:97:ca:18:9e:e3:
f4:6a:ab:20:1f:c0:36:39:95:ef:84:88:d2:8e:2c:62:e1:bf:
89:fa:6c:0a:b2:fb:f1:52:20:47:1d:f9:75:cb:99:4c:c2:ae:
e2:53:1f:da:da:6e:09:a7:55:c3:2d:89:05:62:e2:5b:9b:b3:
3a:67:82:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:12:43 2026 by rpki-client