Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
File: K7MwlCKY91gjy7mAyOsqzwt8DBs.mft (raw, json)
Hash identifier: hDKyaIGh+QewT7riPeQX0rqhlpZk0WoohE36rPuan6g=
Subject key identifier: 7C:8D:40:9E:EE:74:93:4B:9D:28:DD:A3:1E:8B:0F:43:10:F5:7A:0B
Authority key identifier: 2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
Certificate issuer: /CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Certificate serial: 019F1C0DE4FA74E1F94AEFDAFCBADD9A3F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
Manifest number: 198F
Signing time: Wed 01 Jul 2026 05:01:40 +0000
Manifest this update: Wed 01 Jul 2026 05:01:40 +0000
Manifest next update: Thu 02 Jul 2026 05:01:40 +0000
Files and hashes: 1: K7MwlCKY91gjy7mAyOsqzwt8DBs.crl (hash: 5/WrNamlkHKf4N8SqpB070iDsLKShxpuDvBNKqkYILw=)
2: jW75sPmmFSuAByKBWvYaeRnFXOM.roa (hash: v2zg0sfjDzeH0JGU5ldDB2qU5wPCOcMy8diYca8w+d4=)
3: rYSG2dYjGVa3YG5opt3m2blLdDQ.roa (hash: 0jQGDr8z5IsaWt/3i/Wtvl19AvDMpjEhc4vCy+qWV/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:0d:e4:fa:74:e1:f9:4a:ef:da:fc:ba:dd:9a:3f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bb330942298f75823cbb980c8eb2acf0b7c0c1b
Validity
Not Before: Jul 1 05:01:40 2026 GMT
Not After : Jul 2 05:01:40 2026 GMT
Subject: CN=7c8d409eee74934b9d28dda31e8b0f4310f57a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:84:b1:e1:e6:02:f4:2f:f5:4a:29:66:ee:6e:
5a:84:77:e4:af:ee:04:40:df:ff:e2:21:4d:06:39:
84:7a:8f:d5:d2:a3:c4:ba:4c:f8:c8:0e:a4:8b:ca:
7c:24:6e:2b:8e:c1:7f:93:16:40:2f:32:16:03:36:
85:3e:fe:f2:6e:f5:86:c1:71:d8:aa:c4:c1:4e:db:
65:75:6c:6f:f4:16:10:9b:5d:ea:76:45:db:c3:7d:
fb:28:a1:4e:ab:48:b0:2f:cb:1e:65:14:44:e4:e8:
c6:cf:a4:d1:81:ec:21:dc:c3:dc:08:81:c7:f7:72:
5d:85:26:3d:88:b0:d3:e6:42:fd:cc:67:f6:d1:ce:
21:29:7b:e7:25:f0:b7:0d:e1:30:64:17:f8:b9:f7:
46:67:27:b5:ed:0d:53:f0:ab:82:96:87:53:f1:86:
5a:12:4b:25:80:86:5a:37:3c:b4:6f:68:6c:ab:b0:
21:64:00:c6:0a:c5:b6:f0:a5:86:10:66:e5:c4:72:
ae:37:b0:5b:ef:5e:23:e0:49:8f:92:02:24:af:eb:
ed:d7:37:ab:4d:de:df:37:09:92:f6:b4:13:ec:ef:
e5:5d:5a:fa:2e:c3:a7:c7:92:e3:6d:03:58:17:dd:
fa:27:23:91:74:23:d2:b2:54:7d:5e:86:c2:bd:e1:
fb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8D:40:9E:EE:74:93:4B:9D:28:DD:A3:1E:8B:0F:43:10:F5:7A:0B
X509v3 Authority Key Identifier:
keyid:2B:B3:30:94:22:98:F7:58:23:CB:B9:80:C8:EB:2A:CF:0B:7C:0C:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K7MwlCKY91gjy7mAyOsqzwt8DBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/990747-3454-4412-8f06-6b3a47667ca8/1/K7MwlCKY91gjy7mAyOsqzwt8DBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:d6:e2:de:8b:c4:bf:48:93:f4:1c:f3:d5:c5:ee:b7:80:ac:
8f:a6:51:86:d9:b1:67:81:8f:03:37:a0:25:d6:5b:62:b9:ef:
3b:19:21:31:ff:e5:29:0f:6d:5e:27:a2:24:97:35:50:ad:37:
10:0e:be:d6:63:7f:2a:56:9f:80:11:c5:8b:97:02:f9:50:2f:
e8:76:54:32:de:33:9c:77:fa:32:b6:97:3e:3e:8a:dc:4a:3f:
60:7e:83:08:32:2a:fa:55:50:0e:18:a5:4f:1e:db:4d:ab:36:
15:be:94:bf:94:d1:5c:af:2d:cf:37:77:bf:57:45:d3:a0:69:
5c:f0:9a:5f:1d:91:55:b9:24:43:b5:8f:30:73:58:19:7b:93:
d1:cb:3d:f4:7d:80:f4:7e:c4:e5:fa:e0:cb:81:db:97:af:a9:
53:e3:ed:ba:8a:4b:56:87:ab:76:c0:c2:eb:98:78:33:ec:d7:
57:c8:ec:33:28:b3:22:da:1a:dc:2c:88:7e:0d:56:be:a5:9d:
a5:cf:fc:01:1e:83:ea:9f:cc:7e:70:7b:2e:6a:5a:17:2c:89:
8f:44:65:7f:93:eb:f5:78:15:d8:c1:76:99:e2:ed:f4:82:57:
bd:f4:e6:91:32:47:40:15:9d:3c:72:e4:ae:da:e4:56:51:c3:
18:f6:a6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 07:28:59 2026 by rpki-client