Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
File: k7Hqu-XuDASWgOKryVU0OexkPAs.mft (raw, json)
Hash identifier: nbfXy/a3UVqz08pBtN4dVrHuhuMbj607ASi2/SbpeCw=
Subject key identifier: 41:18:1A:90:00:7A:F3:CB:FC:A5:C3:24:F9:31:CD:93:4B:1F:27:D8
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial: 019F9248214208F0BED5CCDE6AC0B01575EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
Manifest number: 137A
Signing time: Fri 24 Jul 2026 04:00:28 +0000
Manifest this update: Fri 24 Jul 2026 04:00:28 +0000
Manifest next update: Sat 25 Jul 2026 04:00:28 +0000
Files and hashes: 1: bk8tPJ9EOMV75C2mivaFUdSxCIg.roa (hash: nYMoXp5QMpQVkLvKRSTUqVzpxbW4FhsK/wY7jqg9tKs=)
2: k7Hqu-XuDASWgOKryVU0OexkPAs.crl (hash: Ig/y6RAzUXhmyhLSSl8j5RuY9bJfM2EKV2kUz+KyBCw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:21:42:08:f0:be:d5:cc:de:6a:c0:b0:15:75:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Validity
Not Before: Jul 24 04:00:28 2026 GMT
Not After : Jul 25 04:00:28 2026 GMT
Subject: CN=41181a90007af3cbfca5c324f931cd934b1f27d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c2:84:8f:8e:33:63:05:59:6d:2c:5a:07:12:
38:e2:99:bd:5f:43:1c:ea:6f:5e:97:c3:f8:3c:0b:
13:c6:9c:8c:4f:e9:97:7a:9c:fc:7a:9f:c0:40:69:
3f:26:fe:37:8e:24:9f:bf:2b:f5:c9:04:d4:68:e0:
53:63:ce:78:f7:88:af:28:34:cc:3f:e0:0b:41:7d:
a3:f7:ac:c1:0c:e6:7c:e5:ca:6f:87:b9:24:93:e0:
ef:7b:66:2b:da:30:f8:b7:6e:80:a0:07:0b:0f:d0:
3c:1a:5e:23:32:76:c2:0c:14:92:e6:86:99:e3:0f:
79:e5:7f:c9:a9:dc:ff:88:04:90:3b:58:5a:61:d3:
ca:f1:ee:a3:e2:36:d7:29:de:9d:67:26:e9:98:8d:
d6:73:f5:62:ea:70:39:e9:66:4f:d0:51:e3:f9:f5:
09:fc:a0:a7:f0:30:6b:be:11:e8:aa:62:77:c0:92:
32:14:1d:8e:a0:ed:e3:0d:2b:73:2e:e2:39:7d:97:
6f:0b:1a:df:b0:bd:35:32:53:59:8b:4d:76:9a:c9:
3d:8d:90:57:35:34:e7:49:ab:45:f2:6f:2c:ee:0e:
a0:38:b1:14:98:12:ed:35:02:fd:94:ab:29:9e:f0:
39:38:c4:c8:e0:0b:bc:dc:43:a0:ae:4a:9d:86:62:
75:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:18:1A:90:00:7A:F3:CB:FC:A5:C3:24:F9:31:CD:93:4B:1F:27:D8
X509v3 Authority Key Identifier:
keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:fa:e7:20:ed:54:2b:28:70:c9:13:9b:8c:8c:8a:d3:9d:c2:
cf:d2:e7:7b:4b:ed:6b:48:83:96:64:f1:4b:7c:65:b6:3c:51:
a6:6c:91:c5:89:cd:15:c8:30:ea:56:8e:8b:1e:1c:53:3a:fc:
38:7d:31:e0:b8:c7:23:15:03:65:06:12:5f:0e:b9:78:ce:dc:
40:99:90:61:5b:f7:eb:93:b6:06:5b:0d:2f:b5:e1:ab:48:af:
26:9f:34:d7:e0:be:15:56:28:32:6c:6f:28:e9:3a:b8:72:a2:
f2:e5:17:ec:b4:33:ae:5d:dc:f1:20:72:61:2b:de:7b:5b:9a:
6c:f4:c7:7c:d1:2d:7f:d3:6f:eb:6e:36:c2:9f:73:1e:78:0b:
a6:b1:4b:8f:e8:ad:0b:b0:e6:5f:30:06:8c:a0:ce:7b:d8:e4:
57:96:04:7c:97:34:c1:a0:13:6c:96:bf:d2:96:ea:65:b9:9c:
89:74:90:d5:fc:47:2e:3c:61:6a:1d:68:e5:37:db:06:fa:2e:
a3:e1:46:e2:d6:2c:54:54:43:b9:9e:8f:e6:93:60:7a:e4:31:
25:2e:ab:84:98:47:5c:e7:c5:35:0b:30:57:ce:7a:f6:ba:9e:
c4:1e:af:d2:98:ee:3a:df:6d:85:2e:fc:4e:09:e7:01:a6:4e:
4b:c4:98:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:35:40 2026 by rpki-client