Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: 2xa4AYkdpneOMBDKY/2M+dyvNoQb3QL02/Yo8YDd85A=
Subject key identifier: C1:AB:07:ED:5F:80:37:BD:37:53:A4:EA:1E:58:F8:63:4E:FB:F9:9C
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 01A0DCF24A2C9CD6A59B69D4171B2E7CDA17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 1A76
Signing time: Sat 26 Sep 2026 09:01:01 +0000
Manifest this update: Sat 26 Sep 2026 09:01:01 +0000
Manifest next update: Sun 27 Sep 2026 09:01:01 +0000
Files and hashes: 1: KLcO-4pnwNwQ0ENsv05vSQ934W8.roa (hash: FYOxX+97VqHTmC9VAss+Ib9pIE+EbJuTdglUDu9UfW0=)
2: dA8NWdyS0f06Erm6RVd9DfssKjU.roa (hash: IZmapnDLq3R54YRETdfjg+rEgpwO069ZWxHLiaQ38d0=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: latsOR8ztIPDrcz4mMv9ATyAuLhbq1+/xGx/QXwUWWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:f2:4a:2c:9c:d6:a5:9b:69:d4:17:1b:2e:7c:da:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Sep 26 09:01:01 2026 GMT
Not After : Sep 27 09:01:01 2026 GMT
Subject: CN=c1ab07ed5f8037bd3753a4ea1e58f8634efbf99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b2:87:ac:42:41:f7:16:d3:47:2d:04:75:01:
8f:e9:56:44:48:b4:2d:33:51:a5:35:c3:5f:8d:c6:
6c:79:cb:af:67:aa:03:01:a6:4f:b0:f4:e1:fe:43:
ae:89:20:a7:d6:9a:95:7a:0d:c4:f1:d7:b6:1b:98:
ef:60:d5:65:5a:07:c8:0a:35:91:6f:53:f2:c1:eb:
59:f5:af:49:8a:f0:9a:3d:c7:8a:59:3c:7c:a8:a3:
57:5e:30:26:c4:26:29:6c:6f:04:fa:15:8f:c9:35:
00:cf:76:1d:59:7c:13:f2:54:c6:35:fd:ee:1c:69:
2c:90:dc:be:43:64:ac:45:61:da:3d:f7:06:56:b2:
32:bd:8d:c8:c4:3b:b8:d0:9a:de:7c:f8:95:98:b0:
10:ec:b0:90:c6:07:1b:82:40:fb:cd:07:46:10:a4:
3c:0f:54:1e:10:e4:8d:32:27:92:53:84:ea:8a:94:
ec:6a:a5:e2:21:24:d1:d1:49:19:41:27:96:a1:16:
8c:9b:97:96:f9:f6:59:fc:44:24:e7:a7:ea:9d:65:
bf:ba:f9:3c:46:61:f9:8b:16:c8:db:57:6d:d7:29:
c3:16:16:b2:d8:7d:3a:21:05:8e:92:20:50:e0:eb:
c2:ae:1b:ff:62:14:35:a9:8c:76:a4:03:3d:90:31:
bf:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:AB:07:ED:5F:80:37:BD:37:53:A4:EA:1E:58:F8:63:4E:FB:F9:9C
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:19:dd:b3:9f:ef:3a:7b:00:c8:5f:63:85:0f:bf:6d:54:fd:
d2:0b:37:46:49:2e:ff:3b:cc:3d:0e:a2:c4:53:ab:e9:58:c5:
ca:7c:50:b1:6a:b5:e5:ee:9d:df:4b:9c:d0:d7:9e:a6:5e:d0:
b3:dc:fb:3d:da:1e:2a:b9:54:15:f8:ab:08:40:3d:89:a8:ed:
2b:28:28:12:e8:31:d2:6a:ed:83:17:93:e4:c8:5a:26:75:d2:
12:93:f2:9f:c6:b7:45:67:69:a2:50:30:ff:41:64:97:ac:aa:
e4:26:31:13:56:ae:2a:42:24:95:ea:6b:a2:ec:32:66:f3:51:
1f:8f:e2:01:84:05:5d:33:da:d7:c6:57:06:69:db:5b:3d:5a:
f2:14:44:18:8d:60:f0:0d:71:c1:5f:36:44:5d:70:01:f1:39:
df:cc:1f:56:ac:e8:67:e2:66:1d:b1:c9:01:6f:12:3e:c1:00:
1c:bd:9a:c0:78:89:ae:53:ca:98:ce:9d:d3:a3:e8:e8:42:36:
69:41:9b:74:4d:54:b3:c0:fc:bc:53:54:8e:62:bd:6f:1f:da:
e6:33:c3:72:2b:c5:98:50:aa:82:20:7b:cd:bd:9a:a4:f2:76:
e7:8c:74:67:a4:2f:70:ff:80:95:fc:d5:13:9a:27:e8:9e:49:
ce:05:d9:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:18:26 2026 by rpki-client