Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: 4l6Wxe/F1DF3VLomGCnDBwBTUYnkhqtZmRepczHv4fU=
Subject key identifier: E3:4B:3C:D6:44:59:E1:90:F0:B8:0E:72:4D:AA:E0:4B:9A:EE:7C:02
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 01A08AC32BAE22BCBDBAF69E63AD6AD4D481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 1A48
Signing time: Thu 10 Sep 2026 10:00:41 +0000
Manifest this update: Thu 10 Sep 2026 10:00:41 +0000
Manifest next update: Fri 11 Sep 2026 10:00:41 +0000
Files and hashes: 1: 8hL0m9Fc9UNGzgjgGkhDpJap1MU.roa (hash: NlNwlvnTVX6u27vOfaFF+tRXHuEvNbAOslEtQ3I2hnw=)
2: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: RXbshDQ3AvqZVkOqx3ywYSoWGFdDqca4GlcozymJqfY=)
3: sYg8Oa1Ta_lzbrdC5qTkNfuGJEo.roa (hash: QEaQMZyU5y5fYj+msGaAAUMqIN0tNFuYbbG6xKUQauY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:2b:ae:22:bc:bd:ba:f6:9e:63:ad:6a:d4:d4:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Sep 10 10:00:41 2026 GMT
Not After : Sep 11 10:00:41 2026 GMT
Subject: CN=e34b3cd64459e190f0b80e724daae04b9aee7c02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:6f:32:a3:8d:0c:00:b4:74:af:1e:17:9f:3b:
38:79:10:76:0d:45:78:8e:1d:ab:0a:bd:06:b6:d5:
3d:78:74:f2:a1:25:2a:cb:fd:2b:28:07:d8:a3:6d:
80:e4:b3:d3:28:0e:e0:28:13:78:5f:da:63:00:30:
2b:ad:49:2b:36:3c:28:d0:5b:ed:5d:07:1c:bf:d2:
1a:88:fa:08:9b:d9:05:6a:a2:c3:d3:d3:c4:01:c6:
d7:d3:c0:e9:10:f0:a3:d7:0f:1d:38:c6:e3:4a:e6:
a3:4e:93:39:67:f6:50:22:4c:74:11:81:93:c5:dd:
57:c9:41:8f:01:79:c5:4a:2f:dd:61:ae:97:72:4d:
9d:21:36:9b:2f:3b:13:06:01:d7:80:dd:d7:bb:58:
7c:27:1d:87:98:01:a2:3b:4a:d4:c1:dc:04:fb:5d:
83:b9:f6:2d:a1:7e:57:1c:98:8f:a6:67:77:1a:c4:
2b:e9:8d:fe:fe:97:14:df:00:cc:06:ec:dc:06:fa:
51:bc:6d:60:3e:45:d3:8e:0f:20:92:16:aa:05:d7:
58:b0:e3:47:5c:6a:95:23:e7:58:17:8a:a1:ea:d9:
e4:76:21:76:96:49:97:68:a2:82:08:9e:d8:9c:c7:
50:c1:2c:d1:68:59:c5:9f:7a:23:79:86:86:21:40:
95:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4B:3C:D6:44:59:E1:90:F0:B8:0E:72:4D:AA:E0:4B:9A:EE:7C:02
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ff:f7:e8:9a:8c:a8:ec:f3:40:2b:2a:e2:fb:fe:84:9e:97:
21:98:d4:4e:9d:88:66:48:19:f8:ea:b2:f2:28:a2:4d:4e:61:
ba:b6:4f:a0:f8:59:64:20:c9:dc:be:2f:14:20:80:2e:08:ed:
06:1c:f4:02:56:30:12:73:75:62:81:7f:e6:56:70:7d:ea:9d:
d6:f2:f8:07:96:00:cf:22:2c:3d:1a:26:01:55:49:f0:9b:f0:
25:6a:16:65:2a:f1:a7:82:37:c6:6e:0d:bb:d4:1d:e3:28:ae:
a4:2a:f2:0c:13:6d:53:2b:bc:42:33:61:33:b0:ca:d0:a1:84:
ee:5c:8e:26:d2:fa:eb:78:31:31:56:27:03:0d:b6:f1:a5:59:
a5:96:17:60:58:7e:48:2a:0d:02:28:16:a1:1b:27:c8:a4:21:
b0:2d:7d:a2:43:3a:44:96:c8:d3:75:c1:16:33:99:ed:88:1a:
55:79:fd:6d:11:f3:a3:dd:83:bd:ac:ad:d4:f0:c2:eb:22:64:
11:dc:8c:b2:04:bb:33:9c:c5:c1:c9:e2:3c:30:01:50:31:0c:
7f:5a:89:a2:60:d3:66:a6:48:3b:50:d8:81:ac:7a:cb:44:de:
bb:42:69:ae:80:7d:4f:db:12:fc:3c:fe:c1:41:c4:30:8d:33:
37:f6:69:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:32:27 2026 by rpki-client