
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
File: K67n6kgtYqZxBj6sg3ia8585C3Q.mft (raw, json)
Hash identifier: AIyAnXXlfb7y2LVZ8sAHwVdOJOqqVnELY6diB5jFGxc=
Subject key identifier: 7E:CC:08:9C:34:A9:93:55:F9:56:51:18:43:56:62:A7:32:9E:11:75
Authority key identifier: 2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
Certificate issuer: /CN=2baee7ea482d62a671063eac83789af39f390b74
Certificate serial: 019F8EA2887DB4F7C45980CF53E615F6133C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
Manifest number: 0B83
Signing time: Thu 23 Jul 2026 11:00:44 +0000
Manifest this update: Thu 23 Jul 2026 11:00:44 +0000
Manifest next update: Fri 24 Jul 2026 11:00:44 +0000
Files and hashes: 1: 57OxBTF4X7lyr00PQWTLC_7l0LM.roa (hash: Qu9Cp0fGN2f6UG2Bu1+rVSKBmfLjLGmUIUXyj9DRqEM=)
2: K67n6kgtYqZxBj6sg3ia8585C3Q.crl (hash: GYRMgh4n10EGPAsqjspoKjbGVd54HWitR6ouombRnpU=)
3: qjaJHwzc1W-wHJ5kuxqOmW74G_s.asa (hash: R4ifag0KL4ofvb+CfHhgXUOYRgZ/gtNDck18NNBrhqc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:88:7d:b4:f7:c4:59:80:cf:53:e6:15:f6:13:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2baee7ea482d62a671063eac83789af39f390b74
Validity
Not Before: Jul 23 11:00:44 2026 GMT
Not After : Jul 24 11:00:44 2026 GMT
Subject: CN=7ecc089c34a99355f9565118435662a7329e1175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:c6:5d:cf:c3:2a:cb:a8:ea:2d:5b:e0:a3:a5:
a5:94:21:f0:04:f6:cc:fd:de:6e:2c:f2:6b:6d:34:
ad:ed:69:4c:d1:68:28:d3:87:61:f4:16:c8:19:8d:
3c:c6:81:92:00:b0:a6:67:40:2c:67:b8:d3:e3:44:
5c:a1:6d:f7:7a:e5:27:c8:5c:dc:c9:fc:d2:27:e3:
5c:83:5e:d4:17:1b:5c:b6:a3:5b:5e:70:d8:90:ed:
16:b3:d5:b9:a6:88:60:41:a8:11:c6:ab:9a:c7:84:
63:2c:24:24:3b:d3:7d:4f:df:2a:69:c7:be:6e:93:
c9:7d:c7:0d:ec:b7:f2:af:3e:b4:14:79:e2:4d:42:
76:5d:de:6f:7e:ec:0a:cc:e0:d8:2f:75:3b:3a:f7:
a2:fd:57:76:1f:e7:24:1f:26:f8:07:2c:4a:66:a3:
cd:cd:f6:96:45:47:ac:2a:e8:82:56:21:4c:f6:29:
5d:c4:31:67:ac:bd:33:27:3a:eb:d5:ac:4e:02:15:
ea:67:eb:ec:5b:08:46:3f:c5:55:6a:89:3d:db:4c:
8a:31:dd:1e:07:ca:30:6f:0a:ce:88:bd:dd:30:5a:
6f:f9:88:08:b9:39:5b:70:df:aa:5a:72:9d:f0:2c:
5a:a6:1a:3d:66:60:80:ce:4e:9f:ae:aa:04:c5:00:
f6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CC:08:9C:34:A9:93:55:F9:56:51:18:43:56:62:A7:32:9E:11:75
X509v3 Authority Key Identifier:
keyid:2B:AE:E7:EA:48:2D:62:A6:71:06:3E:AC:83:78:9A:F3:9F:39:0B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K67n6kgtYqZxBj6sg3ia8585C3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/015784-3705-418a-b994-7521af1ce259/1/K67n6kgtYqZxBj6sg3ia8585C3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:bc:80:e6:16:55:9a:91:2b:b5:a4:aa:9a:a7:e7:e4:92:53:
1e:cf:18:e5:af:ac:da:94:8f:f4:57:d6:fa:8c:d7:b7:fa:1b:
58:c3:b3:20:3c:63:82:4a:8d:0f:9d:a4:4d:dc:bb:10:51:16:
72:cb:83:e8:ae:6f:f3:16:f2:15:9c:cf:8c:cd:34:eb:24:0b:
6d:fd:49:4a:0e:d8:1a:38:5e:60:72:4f:e4:fa:34:99:c5:e1:
13:d4:d4:96:dc:a3:87:41:1e:c0:c6:be:08:c8:c3:31:6e:26:
85:77:18:59:6a:1d:26:5d:1c:ea:65:05:0a:f5:44:af:8c:4f:
59:61:0b:6b:5f:f3:45:45:4e:1e:71:f7:42:40:d8:69:00:c0:
1e:94:77:d1:6a:a7:a9:c6:83:5e:b1:c0:95:55:3d:54:79:f7:
86:1d:7b:f7:a7:b0:0e:d9:80:ad:10:93:86:b3:9a:ef:b6:47:
99:a9:7b:cc:68:fd:69:8c:a7:3e:62:06:f1:be:0f:ef:9a:92:
16:c1:da:60:f2:4b:77:20:8f:35:b6:bf:18:20:c4:97:c0:ea:
6a:81:9f:4c:d7:dc:dd:06:d3:f0:07:77:30:4d:f8:c7:2a:ec:
8d:1f:1c:cd:1f:f6:d3:dc:a5:82:ad:0b:8a:87:73:0f:67:43:
ba:a9:a0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:15 2026 by rpki-client