Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: WNL8azXLM/xmTgd/H9L/Ch2f47e6hLEheHy11GLHEIk=
Subject key identifier: 11:29:F6:9D:1F:DE:0E:F8:BF:F6:00:64:5F:36:76:65:00:89:47:2E
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 019FA11670F3D5C01E6AB4B30A050E1C12C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 19CF
Signing time: Mon 27 Jul 2026 01:00:30 +0000
Manifest this update: Mon 27 Jul 2026 01:00:30 +0000
Manifest next update: Tue 28 Jul 2026 01:00:30 +0000
Files and hashes: 1: 8hL0m9Fc9UNGzgjgGkhDpJap1MU.roa (hash: NlNwlvnTVX6u27vOfaFF+tRXHuEvNbAOslEtQ3I2hnw=)
2: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: k6GC+/nfHYq9ojL1lfkndQ42LmieE9NojAlb9h2nq04=)
3: sYg8Oa1Ta_lzbrdC5qTkNfuGJEo.roa (hash: QEaQMZyU5y5fYj+msGaAAUMqIN0tNFuYbbG6xKUQauY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:70:f3:d5:c0:1e:6a:b4:b3:0a:05:0e:1c:12:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Jul 27 01:00:30 2026 GMT
Not After : Jul 28 01:00:30 2026 GMT
Subject: CN=1129f69d1fde0ef8bff600645f3676650089472e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3e:fc:a4:fd:5c:78:39:8d:18:94:4c:71:34:
35:52:96:2f:6d:5e:66:60:f4:66:18:a3:0e:66:f1:
1f:62:2d:c1:7e:65:b1:16:8a:3e:0e:64:cd:8d:12:
80:5e:7d:8c:04:37:92:04:56:20:5d:06:23:cb:e9:
86:5d:d1:14:39:44:29:58:63:31:c4:85:cf:9f:29:
08:e7:73:63:ee:0a:ea:40:87:7d:43:a4:66:32:2b:
e3:76:7f:ec:99:7f:a9:bc:06:7f:b0:25:24:7b:20:
37:dc:41:6e:be:93:72:4a:4d:16:8e:b0:78:b5:dc:
bd:e0:c0:7e:60:3c:f1:28:2d:57:da:b7:18:85:c7:
5b:12:2a:61:35:4c:6e:5e:a5:b0:3c:54:1a:e0:5c:
43:bb:34:33:f8:ae:3f:e5:60:54:68:e9:ce:fe:1d:
a3:01:f2:8e:5d:23:6f:ef:c5:3e:45:81:16:ec:a0:
0b:5f:ab:32:88:b4:f1:b7:1b:b8:14:af:ec:6d:d4:
4e:a3:d5:51:6b:88:51:b7:ac:b5:0d:d2:aa:47:65:
ee:2e:e8:2e:a8:c2:16:43:78:0d:be:a0:4c:23:81:
b1:d7:e9:09:d4:c9:a5:8e:a6:66:71:1b:9e:87:a1:
7a:b9:05:8f:2b:2d:e8:b4:e9:65:b6:3b:1c:a8:92:
30:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:29:F6:9D:1F:DE:0E:F8:BF:F6:00:64:5F:36:76:65:00:89:47:2E
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:26:07:84:6b:ea:28:72:04:4e:1c:10:a9:83:81:41:de:60:
11:1a:5e:42:68:72:3d:e6:ae:17:0a:57:25:c1:fa:9b:6e:37:
49:ec:64:0b:c6:d2:20:14:2e:e6:7a:66:f2:ad:e5:4c:bf:a6:
74:cd:79:62:4f:be:69:22:6a:91:8f:2d:32:b1:74:10:3c:e9:
e9:5c:5e:32:38:74:8e:89:8b:44:13:ff:d4:69:57:f1:d7:1f:
a2:40:9c:ee:ef:1e:46:00:38:09:55:90:bb:21:a1:6e:c3:98:
a2:64:80:d4:1d:c8:ea:27:9b:50:e4:e9:02:a4:cf:27:bb:4e:
cf:b4:7c:2b:bc:22:36:46:2a:d9:d9:ca:39:aa:2d:f7:f9:c8:
62:bb:1d:19:54:a2:7a:6b:a0:a9:a6:63:50:8b:8d:c9:a1:0e:
ff:06:18:21:46:0c:96:cd:5d:30:2a:08:2b:68:0d:76:b0:da:
d8:66:ec:ef:b1:be:c1:95:3a:e6:f9:65:8b:bd:e7:9b:46:69:
88:2d:14:cc:87:e2:01:9a:b9:8f:47:bc:fa:b0:ee:3e:9f:34:
60:c5:15:b7:8e:f4:43:17:44:10:dd:74:6e:93:52:7b:d7:77:
d8:22:c6:62:ac:f0:bc:0a:83:ee:e6:c1:9c:c5:84:39:2c:f6:
e2:0a:38:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+hFnDz1cAearSzCgUOHBLAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjkxZWVmYTZkODA0NmQ5MThlMzY0MDQ1NjA0OTUyNjQw
YmMxNWQwHhcNMjYwNzI3MDEwMDMwWhcNMjYwNzI4MDEwMDMwWjAzMTEwLwYDVQQD
EygxMTI5ZjY5ZDFmZGUwZWY4YmZmNjAwNjQ1ZjM2NzY2NTAwODk0NzJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD78pP1ceDmNGJRMcTQ1UpYvbV5m
YPRmGKMOZvEfYi3BfmWxFoo+DmTNjRKAXn2MBDeSBFYgXQYjy+mGXdEUOUQpWGMx
xIXPnykI53Nj7grqQId9Q6RmMivjdn/smX+pvAZ/sCUkeyA33EFuvpNySk0WjrB4
tdy94MB+YDzxKC1X2rcYhcdbEiphNUxuXqWwPFQa4FxDuzQz+K4/5WBUaOnO/h2j
AfKOXSNv78U+RYEW7KALX6syiLTxtxu4FK/sbdROo9VRa4hRt6y1DdKqR2XuLugu
qMIWQ3gNvqBMI4Gx1+kJ1MmljqZmcRueh6F6uQWPKy3otOlltjscqJIwrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBEp9p0f3g74v/YAZF82dmUAiUcuMB8GA1UdIwQY
MBaAFJO5Hu+m2ARtkY42QEVgSVJkC8FdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYWJlZjktMDc5ZC00MGY0LWEyMTEt
MzU4NmFhZTEzZGE3LzEvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iYWJlZjktMDc5ZC00MGY0LWEyMTEtMzU4NmFhZTEzZGE3
LzEvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSYHhGvq
KHIEThwQqYOBQd5gERpeQmhyPeauFwpXJcH6m243SexkC8bSIBQu5npm8q3lTL+m
dM15Yk++aSJqkY8tMrF0EDzp6VxeMjh0jomLRBP/1GlX8dcfokCc7u8eRgA4CVWQ
uyGhbsOYomSA1B3I6iebUOTpAqTPJ7tOz7R8K7wiNkYq2dnKOaot9/nIYrsdGVSi
emugqaZjUIuNyaEO/wYYIUYMls1dMCoIK2gNdrDa2Gbs77G+wZU65vlli73nm0Zp
iC0UzIfiAZq5j0e8+rDuPp80YMUVt470QxdEEN10bpNSe9d32CLGYqzwvAqD7ubB
nMWEOSz24go4wg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 03:13:09 2026 by rpki-client