Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: BRzdWDuJsJRi+vKjbiR/P4ydFs8t06Xna+P8OaFNPkA=
Subject key identifier: 2F:70:57:6A:25:7C:5F:A4:95:92:AA:A3:FD:D0:22:F6:2A:7E:FE:C3
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 019F94A45D5CFF03AE82B4AC98C3584F651B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 19CC
Signing time: Fri 24 Jul 2026 15:00:27 +0000
Manifest this update: Fri 24 Jul 2026 15:00:27 +0000
Manifest next update: Sat 25 Jul 2026 15:00:27 +0000
Files and hashes: 1: KLcO-4pnwNwQ0ENsv05vSQ934W8.roa (hash: FYOxX+97VqHTmC9VAss+Ib9pIE+EbJuTdglUDu9UfW0=)
2: dA8NWdyS0f06Erm6RVd9DfssKjU.roa (hash: IZmapnDLq3R54YRETdfjg+rEgpwO069ZWxHLiaQ38d0=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: C6W6kAjf6Fd+adamEFTAPk0oU3WL2l3dLCvbTH2h9ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:5d:5c:ff:03:ae:82:b4:ac:98:c3:58:4f:65:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Jul 24 15:00:27 2026 GMT
Not After : Jul 25 15:00:27 2026 GMT
Subject: CN=2f70576a257c5fa49592aaa3fdd022f62a7efec3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:84:37:21:50:9b:83:15:85:74:03:fa:0a:02:
ca:91:84:83:29:2d:23:c8:1a:ef:e2:a3:fe:b9:4f:
b6:b0:93:50:5c:d5:2f:3c:e3:6f:2e:f5:0e:0b:15:
a9:31:0e:d8:1b:a5:fc:df:e8:35:81:7d:a6:01:9d:
81:91:64:6a:95:60:37:21:b5:4d:84:40:b1:f9:96:
3a:b0:f2:7b:3a:44:61:af:00:ff:99:42:1d:48:b5:
0a:71:bc:65:67:b0:f3:09:4c:54:c3:99:b2:34:82:
db:41:35:7b:f5:24:77:87:41:a6:2e:3c:6f:ba:90:
9e:7a:34:69:7c:0a:d4:a6:53:1e:b4:6a:18:68:f6:
7c:dd:ad:8b:ad:c0:9a:5b:03:e5:a7:64:b4:cd:fd:
fa:1c:ec:b4:7b:86:7e:b3:51:cf:de:a7:0a:58:3c:
78:c8:02:56:33:3f:df:04:af:b5:36:30:76:4d:55:
4b:55:d1:f5:1e:18:e5:2f:cb:15:a3:32:5e:82:bf:
69:c5:2a:da:d9:ee:10:17:c5:2e:3e:98:5c:b3:38:
1f:db:fe:81:1b:46:36:12:f6:75:c6:19:c3:91:ff:
c9:9c:ce:fb:ed:84:f5:0f:99:1d:95:2d:6a:6a:a4:
bd:3d:33:49:6b:a0:da:86:d9:d9:e3:3a:89:25:e1:
ed:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:70:57:6A:25:7C:5F:A4:95:92:AA:A3:FD:D0:22:F6:2A:7E:FE:C3
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:ff:26:bd:31:21:4f:8e:80:f4:d2:85:cf:71:1f:a4:31:6b:
2e:ad:d8:c7:4c:50:7d:dc:56:78:99:60:9d:16:32:60:cb:5e:
fc:bf:b9:2d:1b:09:ed:2a:52:ac:e2:fc:a2:64:6b:61:02:e2:
f2:71:26:dc:23:f7:dc:f3:88:9a:2a:f8:13:51:7e:b8:e7:4d:
fc:29:b5:22:63:a8:49:23:84:30:c9:c3:f3:51:a4:49:77:d5:
31:84:28:8f:dd:22:8d:cd:b1:98:05:28:09:1c:1d:dc:e6:b8:
c9:d8:6d:3f:8a:e7:5a:60:f9:e8:ab:44:61:05:5b:71:77:9c:
e8:e1:97:14:35:51:50:91:e2:be:a8:be:c5:f0:58:2f:5c:e4:
49:45:5e:18:6f:ef:d7:89:92:00:18:32:6a:23:02:3b:00:84:
d0:da:c1:23:2e:69:fc:15:b6:fb:a7:87:8f:b8:d9:49:d0:a9:
58:87:92:0b:44:dc:ee:95:35:ee:ac:f9:3c:f9:54:2b:04:a5:
37:48:a7:00:63:3c:9c:a3:0f:63:19:11:f6:e9:f2:79:b4:86:
a2:e8:b9:d0:2e:e1:c4:fa:00:aa:4a:f9:e9:31:a3:75:69:d1:
d4:c3:ed:f0:01:a8:83:86:9d:b2:c1:ea:af:80:4e:8f:3e:e3:
f1:67:2e:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:47:11 2026 by rpki-client