Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: UAXTAVp3ECcC2P7ia6p/DWxIcgDIp6B9q3detalHoR4=
Subject key identifier: 47:4B:94:DD:B8:84:B0:05:DB:C4:9A:0A:15:9D:0E:E6:2D:0C:0A:88
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 019E1DFE1145F0A52DF56C1FA6193B7C3A86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 190A
Signing time: Tue 12 May 2026 21:00:50 +0000
Manifest this update: Tue 12 May 2026 21:00:50 +0000
Manifest next update: Wed 13 May 2026 21:00:50 +0000
Files and hashes: 1: KLcO-4pnwNwQ0ENsv05vSQ934W8.roa (hash: FYOxX+97VqHTmC9VAss+Ib9pIE+EbJuTdglUDu9UfW0=)
2: dA8NWdyS0f06Erm6RVd9DfssKjU.roa (hash: IZmapnDLq3R54YRETdfjg+rEgpwO069ZWxHLiaQ38d0=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: g6s2cku/EUy/L91FXj1qqURYUpET4bjCXgOgqHKlyjY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:11:45:f0:a5:2d:f5:6c:1f:a6:19:3b:7c:3a:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: May 12 21:00:50 2026 GMT
Not After : May 13 21:00:50 2026 GMT
Subject: CN=474b94ddb884b005dbc49a0a159d0ee62d0c0a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:88:4f:5b:bc:4a:d9:f5:dd:17:86:ac:a3:ec:
bf:9b:c2:8e:be:79:5a:69:23:68:b6:d9:fb:05:19:
9e:68:e3:db:06:48:67:78:b6:26:ba:28:53:e1:4e:
ea:02:ac:d1:36:69:ed:17:b4:bb:eb:b7:58:27:e0:
bd:aa:b1:f3:a6:60:97:89:64:20:5b:69:4e:f3:8a:
65:43:53:ca:b1:0b:f5:7e:96:ae:71:00:1d:e9:66:
70:10:14:89:83:87:a8:ff:7c:d4:15:7d:7d:b2:f1:
d4:c8:8b:e7:87:db:60:5a:ea:ed:c6:df:5c:af:e5:
c6:da:a8:95:a9:cc:db:79:43:70:5d:27:57:01:43:
71:f1:ed:52:f5:ee:04:48:3d:f4:b0:05:e8:b4:8e:
d2:df:9f:d1:40:0d:7c:87:42:b1:83:de:e6:fb:52:
c8:1a:e6:19:40:35:55:58:30:12:28:79:eb:26:81:
86:55:66:32:6f:4c:ba:1b:e3:48:1a:a0:58:f6:e1:
46:96:c0:b4:3b:21:c8:7b:f2:fd:3c:20:a1:e8:8d:
2b:1e:34:d9:9b:f7:a8:f6:4d:89:6c:9e:cb:97:7c:
92:60:59:e9:4f:23:27:6c:a6:6f:3c:27:c1:ef:6c:
fe:ff:d1:af:50:aa:c9:ce:93:c9:a8:8a:5f:58:12:
67:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4B:94:DD:B8:84:B0:05:DB:C4:9A:0A:15:9D:0E:E6:2D:0C:0A:88
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:94:b7:b7:56:21:00:16:e9:67:39:c8:20:24:a7:56:11:6c:
96:c8:82:02:e0:df:a6:54:1d:89:17:69:48:7f:8e:23:10:cb:
20:42:3b:3b:b2:78:54:66:c2:b6:74:7a:15:ef:28:8e:68:a8:
cf:c4:12:ee:da:3b:6b:0a:ce:44:68:4a:f2:c5:d4:9a:84:43:
ef:40:4f:a4:2a:70:d6:bb:22:15:4b:6a:6c:40:35:01:5d:47:
44:27:aa:49:43:f3:f4:08:9c:7d:9a:20:8a:70:f6:5d:59:9f:
23:2d:3f:5d:10:9b:45:39:f4:8b:5a:1d:83:6b:a7:e9:22:a4:
6f:fb:22:7b:c2:08:23:02:70:96:2a:b0:82:07:6c:c0:95:0d:
d5:6e:4b:99:13:08:d3:43:ee:e6:5b:72:02:85:4e:9c:a2:2f:
1c:e1:17:c8:51:ae:8b:89:a3:e6:d2:2d:af:5a:5a:f3:fa:66:
e3:64:1d:b2:c0:b2:f9:87:62:35:d3:4b:c7:60:d3:b2:17:09:
f2:22:c1:3d:ab:a2:a4:2c:17:98:84:ac:0b:84:cf:37:78:9e:
8e:87:37:c4:a8:0c:8a:ac:12:32:71:54:50:de:fd:5b:28:2e:
91:89:79:af:25:5a:88:8b:94:d1:d7:31:35:eb:4f:44:f7:e3:
d2:2f:c5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:19:56 2026 by rpki-client