Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
File: k1uI_ryNEnURqcvxW4BJmLHNZoY.mft (raw, json)
Hash identifier: TrkSf7i9KdiYKM5GxECK4RDj1GChOWVza9T8pDU4/8g=
Subject key identifier: 80:D7:2C:AC:4C:A4:13:39:7F:C9:30:7F:67:B0:B4:BD:CB:2C:58:7D
Authority key identifier: 93:5B:88:FE:BC:8D:12:75:11:A9:CB:F1:5B:80:49:98:B1:CD:66:86
Certificate issuer: /CN=935b88febc8d127511a9cbf15b804998b1cd6686
Certificate serial: 019F946DE811381E77A4EAD7CE235D08A8DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1uI_ryNEnURqcvxW4BJmLHNZoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
Manifest number: C4
Signing time: Fri 24 Jul 2026 14:00:58 +0000
Manifest this update: Fri 24 Jul 2026 14:00:58 +0000
Manifest next update: Sat 25 Jul 2026 14:00:58 +0000
Files and hashes: 1: Jle1Wqwc9duNEaBgl4I6cNxXpdM.roa (hash: OBFM1Q4yqKAy/JhwM152fWLO9wCkZnqGzYRwcyY0AlU=)
2: k1uI_ryNEnURqcvxW4BJmLHNZoY.crl (hash: cwFHLMd9HP1pQxqpt8BGoiQZod/wfiBCRMgDiH0l+j4=)
3: tWhPmRdm-lCBfCBjSnpAIpwkHdA.asa (hash: CmYFI/mkQzMGe1+SvLrHk5OSNg13/iiannrbVF+QaMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1uI_ryNEnURqcvxW4BJmLHNZoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6d:e8:11:38:1e:77:a4:ea:d7:ce:23:5d:08:a8:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=935b88febc8d127511a9cbf15b804998b1cd6686
Validity
Not Before: Jul 24 14:00:58 2026 GMT
Not After : Jul 25 14:00:58 2026 GMT
Subject: CN=80d72cac4ca413397fc9307f67b0b4bdcb2c587d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b0:8a:4c:f4:0b:95:35:30:c3:c7:43:7a:8e:
b8:8d:05:78:3d:fb:e5:6f:a5:f3:cd:aa:52:d0:d5:
f5:16:c7:6c:80:5d:29:13:0f:59:7b:4c:c5:ab:99:
23:a9:d3:60:68:0a:8f:6c:17:6a:f4:57:2d:67:db:
c2:2b:85:cb:f5:e3:a4:9c:d4:e7:10:62:9e:84:ad:
6b:2d:19:f4:19:6a:19:11:ae:d6:7b:d9:65:89:9d:
f0:47:bf:36:d8:40:04:f5:ba:b6:b1:c5:ad:eb:35:
6e:e1:fe:12:62:c7:d2:95:ca:18:a6:d3:9d:3d:e9:
52:95:66:22:a3:dc:c4:9d:ad:e1:cd:f6:cd:58:dc:
cc:fb:70:c5:e2:ef:2f:33:4a:76:1e:b3:bc:ad:83:
db:0a:dd:63:47:a6:30:ef:61:57:37:e9:10:2b:5e:
83:93:2b:bd:2c:8b:b5:06:cb:1f:61:95:97:ad:25:
09:29:8e:f7:21:22:c3:e2:77:a8:b5:8d:cb:6b:49:
10:40:fa:8e:e5:2f:6e:76:c4:9d:c4:b0:98:f3:26:
9f:f2:83:85:11:64:6a:90:17:d6:a7:f5:c1:19:b8:
25:22:f9:1b:a7:dc:d6:70:42:43:b7:73:84:92:a0:
36:44:4a:6a:20:d4:d3:59:10:f2:70:d8:b0:dc:be:
c6:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D7:2C:AC:4C:A4:13:39:7F:C9:30:7F:67:B0:B4:BD:CB:2C:58:7D
X509v3 Authority Key Identifier:
keyid:93:5B:88:FE:BC:8D:12:75:11:A9:CB:F1:5B:80:49:98:B1:CD:66:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1uI_ryNEnURqcvxW4BJmLHNZoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/7857d0-b98f-4eb1-8281-97f650737347/1/k1uI_ryNEnURqcvxW4BJmLHNZoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:81:ad:50:45:2a:c2:bc:52:00:ff:3f:80:1b:ec:1b:51:17:
4b:c5:89:97:57:a6:6f:4b:57:9e:e0:f1:82:d2:c9:10:21:b6:
33:d6:34:70:ee:8a:d2:d0:c1:ba:07:0a:6d:6d:48:62:5c:a3:
f1:37:dc:5c:d2:a7:1c:31:64:88:63:27:cf:80:97:d2:35:43:
29:6c:2b:af:f6:9b:98:57:12:4c:5b:35:62:56:4b:39:82:f2:
2b:3f:51:a9:bc:49:ff:49:9a:00:8b:ce:3d:ea:f9:b8:8b:52:
84:c7:96:f3:9f:a4:59:97:7f:7a:9d:ef:7a:5d:a3:fd:f1:6b:
d8:c0:61:22:d4:fe:ef:43:e9:29:6b:ae:66:d6:67:2a:cb:c6:
82:05:28:b3:a2:ac:b1:88:24:0d:30:37:1a:53:23:0b:f0:61:
ee:ef:72:71:d3:e7:ac:b1:59:b8:71:f3:2c:98:cd:a4:16:e9:
24:cc:13:bd:24:f7:3c:b1:93:04:f1:4c:45:0b:e3:97:40:28:
31:52:58:30:ef:4f:a3:23:5f:58:13:c6:ad:54:67:a1:d2:76:
3e:e6:f5:72:ab:11:3d:3b:e3:c4:20:77:b6:84:8e:07:4a:ad:
79:3b:c8:3b:f1:14:74:2f:6c:b5:a3:c2:46:73:55:3d:61:c5:
e2:61:43:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:26:44 2026 by rpki-client