Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
File: k7Hqu-XuDASWgOKryVU0OexkPAs.mft (raw, json)
Hash identifier: T+9YN6mB6aNuVvFr/uFSMVHYLHO/KLcl5nBZppfw2j0=
Subject key identifier: 63:9E:4B:DC:AA:86:E5:8D:91:56:26:10:5D:91:E7:5C:C3:7B:1F:DB
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial: 01A0FD58F0A23BE392C2FC883B405AD6D921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
Manifest number: 1436
Signing time: Fri 02 Oct 2026 16:00:59 +0000
Manifest this update: Fri 02 Oct 2026 16:00:59 +0000
Manifest next update: Sat 03 Oct 2026 16:00:59 +0000
Files and hashes: 1: bk8tPJ9EOMV75C2mivaFUdSxCIg.roa (hash: nYMoXp5QMpQVkLvKRSTUqVzpxbW4FhsK/wY7jqg9tKs=)
2: k7Hqu-XuDASWgOKryVU0OexkPAs.crl (hash: jrT1qtRPcMSb2bSqmmR1FYw/Qr4KT2RZ9cpzdXpP4FI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 03 Oct 2026 08:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fd:58:f0:a2:3b:e3:92:c2:fc:88:3b:40:5a:d6:d9:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Validity
Not Before: Oct 2 16:00:59 2026 GMT
Not After : Oct 3 16:00:59 2026 GMT
Subject: CN=639e4bdcaa86e58d915626105d91e75cc37b1fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:09:cb:3e:22:32:00:c4:dc:e4:23:a8:85:fd:
82:ea:1d:e6:fa:c3:ae:4b:bf:55:ca:3c:01:57:3a:
cf:c8:76:2a:2f:70:a7:64:c8:e1:c2:27:56:9c:43:
8c:b0:98:f7:01:ff:85:f8:29:55:6e:75:1a:7e:dd:
93:e1:5b:60:f5:7e:7d:11:f5:1d:93:bb:fa:4f:a9:
dc:f9:b0:24:6d:60:d3:5c:12:72:c8:65:18:f9:a4:
cb:46:11:65:77:76:66:32:58:b8:83:5d:2e:44:b0:
2e:0e:43:0f:b7:4a:4c:3f:7a:b6:d5:24:48:51:82:
e7:23:bb:f6:35:f1:8a:f1:0c:a3:6b:2e:b7:74:25:
d4:da:78:7b:61:2b:30:35:9d:ed:e6:07:fb:44:37:
1d:68:32:52:66:fe:d9:4c:33:16:a3:b9:27:e5:0e:
d6:69:18:16:85:9a:6f:f8:ac:ed:ac:50:c7:4c:1c:
bf:78:45:b9:4f:58:53:15:b4:99:f0:15:9e:f3:c8:
d9:a3:60:60:d6:58:c0:9f:8c:36:38:11:ff:1f:d1:
c5:9c:86:ac:a4:7b:0c:f9:9b:a5:6b:7a:0d:d1:f4:
21:8e:2c:5d:e3:7c:e8:f1:dc:39:e3:b6:07:48:bc:
f2:f3:76:fe:4c:15:18:a2:f4:32:88:05:92:bb:af:
14:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9E:4B:DC:AA:86:E5:8D:91:56:26:10:5D:91:E7:5C:C3:7B:1F:DB
X509v3 Authority Key Identifier:
keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:c9:fe:ad:29:65:ea:cd:05:86:15:c4:51:58:a7:d4:90:da:
e2:86:af:a0:17:e4:e3:0f:a9:b3:33:47:f4:d6:f1:3d:3f:bb:
da:9a:10:5f:52:97:1a:e5:9d:e5:e3:55:b5:2a:66:1a:eb:ce:
d7:ba:7d:19:30:d2:50:8a:02:3c:1b:18:af:57:36:87:e1:57:
30:c2:50:55:1b:3f:f9:68:d7:95:cf:d7:2f:52:56:0e:0c:d9:
3b:a8:49:98:5f:83:8d:fb:cd:cc:0a:d2:72:e6:98:6f:90:8f:
b1:ec:09:52:79:c8:90:03:9c:da:38:b6:de:8b:06:08:84:f0:
5c:7f:85:c9:ea:7b:f3:06:93:6d:17:fc:c7:b8:ac:ad:89:32:
33:08:2d:41:4a:20:3a:07:b2:d0:be:b0:e0:5a:50:55:aa:b7:
c9:5c:63:cd:1e:d1:f6:4e:65:dd:6a:30:65:46:7f:29:6f:c7:
6d:c7:1e:c6:45:8e:81:10:16:cd:27:e6:c0:80:02:e9:17:3c:
c2:ca:06:3f:3a:c9:73:2d:c0:17:60:fc:8b:4f:6f:28:48:06:
c3:a8:0e:92:1b:2a:80:68:6d:14:ee:dc:a9:1d:fd:df:83:07:
1e:83:af:b4:8b:f8:5b:be:59:23:c4:66:b0:28:d0:6d:56:9a:
b8:2f:1d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 18:52:06 2026 by rpki-client