Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
File: k7Hqu-XuDASWgOKryVU0OexkPAs.mft (raw, json)
Hash identifier: IuC3XL5KL29wKGOkNsrKgBOODpKZhl2PB5LHUrDEK+c=
Subject key identifier: 42:F9:DF:4B:CA:2F:44:90:33:41:F6:AD:59:61:14:13:BB:BD:EE:2A
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial: 019D265F675B531CD6B0E62ADDC2E51EA360
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
Manifest number: 1239
Signing time: Wed 25 Mar 2026 19:01:19 +0000
Manifest this update: Wed 25 Mar 2026 19:01:19 +0000
Manifest next update: Thu 26 Mar 2026 19:01:19 +0000
Files and hashes: 1: bk8tPJ9EOMV75C2mivaFUdSxCIg.roa (hash: nYMoXp5QMpQVkLvKRSTUqVzpxbW4FhsK/wY7jqg9tKs=)
2: k7Hqu-XuDASWgOKryVU0OexkPAs.crl (hash: bCLI6RrqfEBCAz5IFTJSUkv4mBukLnB0rNH4zJzY2YE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:67:5b:53:1c:d6:b0:e6:2a:dd:c2:e5:1e:a3:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Validity
Not Before: Mar 25 19:01:19 2026 GMT
Not After : Mar 26 19:01:19 2026 GMT
Subject: CN=42f9df4bca2f44903341f6ad59611413bbbdee2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d1:e6:94:77:51:7f:02:35:e4:15:51:87:8c:
fc:69:ba:3c:87:09:07:3b:84:de:ba:fe:7f:1e:2f:
a7:da:24:d5:26:7f:f3:bf:e2:48:1c:84:07:7a:db:
d9:04:a4:b9:7f:7b:5f:53:31:57:1c:91:d6:3b:be:
c9:99:ac:ab:12:80:12:ff:30:d0:b4:2b:10:cc:8c:
56:45:b0:eb:db:ca:6b:ab:6b:bf:38:d7:e8:1f:e6:
39:87:37:2f:40:d6:f0:5e:ca:80:1c:fb:99:35:1a:
18:44:ed:a2:25:57:eb:f3:bd:d4:d5:c0:66:6f:d7:
80:cc:8f:91:b8:a4:ed:d3:bd:1a:d2:e5:07:89:33:
9e:c5:bf:fa:67:a3:0a:66:b5:39:18:03:ad:c5:c1:
b9:bc:5b:de:da:6a:4c:b6:42:fc:da:d8:e2:23:0b:
02:30:7b:c2:6b:62:70:6f:4d:0a:c6:40:e9:be:4e:
34:ac:62:5e:bd:33:79:91:c4:85:d9:40:91:59:19:
e6:62:bb:21:c8:ed:ed:ba:05:8d:b7:91:f4:0d:c4:
52:68:7a:16:76:05:82:92:0c:e8:99:25:df:a1:e1:
f7:b6:c8:eb:55:1a:b6:12:c5:f4:2f:2a:42:5d:11:
6d:5f:d5:c7:93:7e:97:dd:8e:30:db:15:1f:86:4b:
3e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F9:DF:4B:CA:2F:44:90:33:41:F6:AD:59:61:14:13:BB:BD:EE:2A
X509v3 Authority Key Identifier:
keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:df:d0:b3:64:18:30:ec:10:c3:b2:45:37:94:5c:ed:31:07:
6f:13:3b:41:cf:c1:f4:2e:94:57:a1:8c:88:e4:fc:54:1f:c7:
a1:96:27:f6:a4:10:2c:56:38:39:5e:0d:fd:84:66:61:67:ee:
b5:a4:7e:5f:8d:70:7d:de:d6:b8:13:b5:68:c6:f4:d8:f2:e3:
bb:48:7b:ab:f8:59:97:75:50:48:f5:b8:77:fa:e1:77:4e:a6:
21:cb:34:98:fc:1c:72:3d:79:cd:72:83:40:a6:c2:76:36:03:
84:66:4c:5f:d3:7a:99:a7:55:3a:03:d0:1f:a6:37:8c:32:02:
85:3c:13:b8:af:f7:17:17:56:22:98:12:57:8d:4f:c3:f5:15:
84:6d:33:11:b3:18:98:ed:71:bc:7c:70:5f:c5:bd:6d:08:bc:
98:c6:20:f2:27:3a:08:2c:e3:85:e7:d8:39:76:0b:9f:2e:13:
98:9c:9d:b9:78:55:a5:30:08:4b:bc:e9:c6:20:d7:39:12:e5:
1c:f6:02:b1:a9:89:fe:cf:eb:03:23:c1:b3:4d:6f:bb:cc:1d:
81:eb:99:37:51:0e:b9:a4:ca:93:16:2a:18:7c:9d:23:3a:f6:
15:a0:c8:81:4d:bb:ae:9d:07:8c:d2:84:6f:a5:58:33:80:02:
bb:8d:df:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:30:33 2026 by rpki-client