Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
File: k7Hqu-XuDASWgOKryVU0OexkPAs.mft (raw, json)
Hash identifier: dwH4eK4xzcNPHuOYv5WAd+fvDxs/YrWc75k8JquAz7g=
Subject key identifier: 19:BD:AF:C7:F9:0F:C7:F2:3B:B1:73:0C:2F:AA:A1:DD:ED:DC:77:C4
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial: 019E1D906D2DB55ACFD1BB1B935430F6B6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
Manifest number: 12B9
Signing time: Tue 12 May 2026 19:01:04 +0000
Manifest this update: Tue 12 May 2026 19:01:04 +0000
Manifest next update: Wed 13 May 2026 19:01:04 +0000
Files and hashes: 1: bk8tPJ9EOMV75C2mivaFUdSxCIg.roa (hash: nYMoXp5QMpQVkLvKRSTUqVzpxbW4FhsK/wY7jqg9tKs=)
2: k7Hqu-XuDASWgOKryVU0OexkPAs.crl (hash: a/O6AqtQ2fRarJey9mU/85Xku70huaT87hDSwcjV37k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:6d:2d:b5:5a:cf:d1:bb:1b:93:54:30:f6:b6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Validity
Not Before: May 12 19:01:04 2026 GMT
Not After : May 13 19:01:04 2026 GMT
Subject: CN=19bdafc7f90fc7f23bb1730c2faaa1ddeddc77c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9d:3c:04:1e:6b:ba:47:b2:63:c3:76:74:26:
b4:f1:c7:bd:19:8d:81:ba:9f:31:c7:a3:52:df:42:
33:a1:02:0f:6b:76:28:e2:28:8a:7e:cd:9e:a0:45:
99:4b:19:2b:9e:aa:5c:9d:1e:c9:d4:51:1a:3b:85:
87:1f:d1:ae:71:4a:88:7c:af:93:80:3d:0a:a3:45:
07:b5:cf:3f:49:fa:72:bc:e6:9d:03:2d:7a:83:22:
70:95:a0:ed:b4:a3:19:e2:f8:31:10:05:86:cb:10:
07:3c:54:ff:e7:f4:47:a2:64:fd:44:90:44:da:51:
17:08:be:71:a8:19:bd:88:7c:5f:10:76:69:7b:50:
8f:8c:04:46:eb:f1:3e:b2:59:18:05:ad:a0:e8:81:
3a:e3:bd:6c:78:37:e2:4f:6b:5f:27:b8:4f:34:73:
84:f0:54:9b:52:65:52:86:55:cc:da:df:02:13:59:
32:f8:dd:a8:ee:4c:8a:59:1d:24:c6:5a:ce:81:9b:
5b:6b:46:03:47:9a:7d:93:b5:d8:ac:b6:e5:65:73:
af:fc:d0:a9:7b:e5:a6:6b:4e:c4:c2:a4:ee:dd:30:
ae:f4:ca:79:c7:f9:8e:8a:f0:1b:29:22:ec:02:a5:
9e:b8:78:19:c5:c7:4a:b1:0d:bf:06:d0:ca:a2:f1:
43:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:BD:AF:C7:F9:0F:C7:F2:3B:B1:73:0C:2F:AA:A1:DD:ED:DC:77:C4
X509v3 Authority Key Identifier:
keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:05:66:a2:95:aa:3f:f1:0c:5c:ca:5f:86:10:c7:ba:51:cf:
63:05:0c:45:5d:91:a8:cf:9b:eb:f5:84:27:55:3b:5d:5a:17:
73:e7:bc:df:92:9e:16:a5:e1:c2:16:f1:ce:33:d6:79:f3:f6:
7b:f5:96:5b:3c:d0:20:f1:ff:1c:b2:cd:b0:e2:42:43:28:68:
e9:26:a5:c0:b5:90:89:ce:0e:70:dc:d4:df:0f:66:42:66:d7:
6c:bd:6c:7b:3c:b1:ef:75:11:4a:35:b9:51:6c:86:93:2b:59:
6e:4d:fc:de:2b:8e:47:44:55:ca:28:62:db:82:cc:ad:dd:2c:
97:94:7e:e6:e3:37:f9:e2:8a:05:77:27:c7:16:22:a0:30:97:
30:8e:b7:ad:04:05:dc:72:73:9f:e7:4c:00:38:e1:3b:66:8d:
23:1b:26:ac:4f:21:ba:19:9d:65:56:35:28:32:6e:ef:37:75:
5d:cb:09:17:29:94:96:4b:95:5a:e7:40:f8:88:78:00:2e:17:
ab:60:66:70:c0:2b:98:c6:dd:fb:d9:b1:06:ec:39:d2:f5:6c:
ea:9d:29:a9:bd:fb:3c:02:60:bd:bd:97:72:fc:1c:1d:3e:bf:
7d:f0:28:05:9f:3b:6f:fb:fb:de:4e:6e:11:1c:fa:d9:3e:48:
d4:b9:2c:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:14:09 2026 by rpki-client