Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: /PypyqmvGhUBGsmn1qHG6R20sGsUYL+5o1zA8fZREFE=
Subject key identifier: A8:B2:57:2F:6F:35:C0:63:D9:66:D6:5A:8F:58:3B:F1:6B:67:A1:B5
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 019D2AA967681B12EB8F58965AEB7DDAEA28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 15:00:38 +0000
Manifest this update: Thu 26 Mar 2026 15:00:38 +0000
Manifest next update: Fri 27 Mar 2026 15:00:38 +0000
Files and hashes: 1: KLcO-4pnwNwQ0ENsv05vSQ934W8.roa (hash: FYOxX+97VqHTmC9VAss+Ib9pIE+EbJuTdglUDu9UfW0=)
2: dA8NWdyS0f06Erm6RVd9DfssKjU.roa (hash: IZmapnDLq3R54YRETdfjg+rEgpwO069ZWxHLiaQ38d0=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: jpBceVkzFHXvxHttvuKhaqU3ICQqZrhc2/x44nVQ7Fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:67:68:1b:12:eb:8f:58:96:5a:eb:7d:da:ea:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Mar 26 15:00:38 2026 GMT
Not After : Mar 27 15:00:38 2026 GMT
Subject: CN=a8b2572f6f35c063d966d65a8f583bf16b67a1b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e3:be:a3:73:21:03:26:6d:40:3f:6d:48:3e:
48:ee:8a:8c:66:57:a5:b4:5a:73:d3:53:8b:7d:43:
b4:84:4a:96:15:fd:06:e6:43:fc:7d:04:2d:10:89:
41:3b:cb:f0:6b:8d:a4:2d:d9:3b:9d:f6:e7:e4:b4:
e2:6d:58:69:69:ea:49:3d:9b:ff:79:f6:28:d5:92:
5c:b1:50:52:74:ae:b4:b6:f0:b0:a4:37:f2:c0:14:
c5:dc:11:65:a7:84:b0:22:0e:df:22:4b:be:67:81:
0d:ce:4f:3a:cf:f4:23:b6:ba:f4:56:c2:ad:c1:fb:
b8:a2:6c:78:5e:55:83:e9:61:ad:f3:2d:bc:03:9d:
f7:b5:7b:f6:40:f1:0f:97:c6:03:67:9b:09:71:f8:
12:82:92:f2:e4:02:58:87:8d:60:b6:9c:d5:99:41:
ef:f6:95:16:3d:59:4e:fb:1c:c4:22:37:30:a0:6e:
e9:84:0a:e8:2f:f0:48:64:6c:4d:67:34:e8:23:62:
46:1b:f0:22:aa:eb:7d:5f:ec:f6:64:be:4d:8c:fc:
d6:c1:87:dc:36:29:40:68:d5:a9:b8:6c:a3:b6:7a:
c3:4c:22:ef:f8:a6:09:5e:6c:7c:e4:0b:4a:5b:f8:
1e:0e:3e:ae:47:b5:cf:ab:83:45:ba:54:be:d7:f8:
f6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:B2:57:2F:6F:35:C0:63:D9:66:D6:5A:8F:58:3B:F1:6B:67:A1:B5
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2d:e0:e6:8c:61:80:aa:87:1a:40:24:76:b0:9d:15:46:35:
a9:45:dc:b5:26:74:35:3b:d1:e2:d7:eb:d3:db:94:f5:49:e1:
02:5b:57:35:ab:f9:df:6a:95:7f:34:3c:52:5f:27:f6:c4:f5:
fc:cd:1d:83:6e:c7:5f:3c:33:97:59:57:45:4a:7a:e6:3a:0f:
db:3a:25:ea:b8:1f:93:05:7f:bb:d4:36:bf:f8:a1:e4:79:79:
d5:37:2c:5e:79:71:8d:1a:0b:e1:e6:92:b3:82:df:9d:0f:2a:
bf:91:08:e3:9a:e0:04:30:60:86:ca:de:53:37:2f:b2:ac:f0:
c5:7d:61:d8:4c:a1:a1:51:65:d8:23:15:b7:c3:b5:bc:00:c1:
99:e5:db:67:0e:39:fe:94:84:cd:4f:80:ac:47:6b:c1:d7:47:
76:c9:54:1b:28:16:b4:72:0e:a1:84:a1:ec:3f:8a:1d:b2:1a:
83:7b:f1:da:b1:e8:19:73:b9:25:9d:8e:a8:71:40:18:a0:13:
19:41:76:9a:0c:7e:cf:aa:77:94:fd:3c:bb:a9:02:d7:60:ba:
6c:3c:8c:24:87:ca:04:10:0c:c6:5a:07:38:96:8d:ba:62:22:
ca:e4:e4:6e:7f:85:01:df:aa:3a:97:f8:26:0f:9e:74:df:76:
5f:fd:c5:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0qqWdoGxLrj1iWWut92uooMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjI5ODE5Nzg4ODU2OTZjZTFjMmJiZjRhZjk5ZGFkYzJj
NjE4ZWIwHhcNMjYwMzI2MTUwMDM4WhcNMjYwMzI3MTUwMDM4WjAzMTEwLwYDVQQD
EyhhOGIyNTcyZjZmMzVjMDYzZDk2NmQ2NWE4ZjU4M2JmMTZiNjdhMWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+O+o3MhAyZtQD9tSD5I7oqMZlel
tFpz01OLfUO0hEqWFf0G5kP8fQQtEIlBO8vwa42kLdk7nfbn5LTibVhpaepJPZv/
efYo1ZJcsVBSdK60tvCwpDfywBTF3BFlp4SwIg7fIku+Z4ENzk86z/Qjtrr0VsKt
wfu4omx4XlWD6WGt8y28A533tXv2QPEPl8YDZ5sJcfgSgpLy5AJYh41gtpzVmUHv
9pUWPVlO+xzEIjcwoG7phAroL/BIZGxNZzToI2JGG/Aiqut9X+z2ZL5NjPzWwYfc
NilAaNWpuGyjtnrDTCLv+KYJXmx85AtKW/geDj6uR7XPq4NFulS+1/j2DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKiyVy9vNcBj2WbWWo9YO/FrZ6G1MB8GA1UdIwQY
MBaAFJOymBl4iFaWzhwrv0r5na3CxhjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83OTg2YTktNGU0Ni00YzMzLTkyYzkt
MzFjOTVlMmExZDZmLzEvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83OTg2YTktNGU0Ni00YzMzLTkyYzktMzFjOTVlMmExZDZm
LzEvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASi3g5oxh
gKqHGkAkdrCdFUY1qUXctSZ0NTvR4tfr09uU9UnhAltXNav532qVfzQ8Ul8n9sT1
/M0dg27HXzwzl1lXRUp65joP2zol6rgfkwV/u9Q2v/ih5Hl51TcsXnlxjRoL4eaS
s4LfnQ8qv5EI45rgBDBghsreUzcvsqzwxX1h2EyhoVFl2CMVt8O1vADBmeXbZw45
/pSEzU+ArEdrwddHdslUGygWtHIOoYSh7D+KHbIag3vx2rHoGXO5JZ2OqHFAGKAT
GUF2mgx+z6p3lP08u6kC12C6bDyMJIfKBBAMxloHOJaNumIiyuTkbn+FAd+qOpf4
Jg+edN92X/3FPg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:34:37 2026 by rpki-client