Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: KZI5wsxrv9ZRQG/cbsOC57MRg/Ge8wdZXo2+YQMWa/A=
Subject key identifier: C1:C7:B1:0E:C8:EB:41:C2:43:95:A5:43:B8:04:4D:42:E2:4A:D2:8A
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 019D2884A833AB89A3EFA11FAB0DD274B1B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 0F6C
Signing time: Thu 26 Mar 2026 05:01:15 +0000
Manifest this update: Thu 26 Mar 2026 05:01:15 +0000
Manifest next update: Fri 27 Mar 2026 05:01:15 +0000
Files and hashes: 1: AUxe3iOnW0R9FRzl8aepQlk_j-s.roa (hash: F/5QY2qH/5oxR7eNEMu85fTdScF+CggMDUwObVNbh98=)
2: XwZeP_FjPRrGyxH7if_auVWhw38.roa (hash: 4bEVXi89j8g7Wnq/i2v5YpIAVxtMtfePuFt8ghONBAw=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: X3CeVvbPOiyZ54+BkI8ViL5zdvj65wjSkvZk1Rdqk/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:a8:33:ab:89:a3:ef:a1:1f:ab:0d:d2:74:b1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Mar 26 05:01:15 2026 GMT
Not After : Mar 27 05:01:15 2026 GMT
Subject: CN=c1c7b10ec8eb41c24395a543b8044d42e24ad28a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:da:b3:38:91:af:69:b6:07:7e:03:01:28:92:
bb:16:1b:18:a4:0c:1c:eb:bf:47:2b:4a:bf:e0:57:
47:d1:2e:e2:f9:55:49:df:af:b2:dc:38:9b:ff:ae:
31:a7:81:42:bf:47:59:0c:9c:26:44:7d:77:64:ba:
62:d4:8d:20:85:a3:a1:4b:fb:0c:00:b6:a5:69:19:
45:0b:7f:bc:9d:37:45:f8:fc:1c:95:8d:bf:ed:c4:
02:58:9e:63:d4:ae:dd:93:33:67:0f:7a:af:42:53:
2f:f2:2f:36:4b:f7:1b:18:a7:00:93:74:d5:88:13:
9d:d7:6e:30:86:40:47:a4:99:79:24:10:30:9f:83:
29:ab:87:b8:41:a5:c9:54:de:57:19:44:35:50:d3:
3a:1b:87:7c:19:d1:66:93:43:62:01:49:dc:08:02:
de:92:43:13:0a:f1:03:1d:a8:fd:51:4e:43:ce:4b:
b9:08:96:4a:aa:a0:4c:96:e6:1d:d6:44:25:7d:c6:
4f:45:d8:6f:ef:34:5e:07:35:4b:b4:50:4d:50:56:
f9:f0:96:9d:a4:79:c2:a1:eb:df:0e:b2:2c:a0:83:
46:1c:68:2d:52:d7:91:9c:e7:d6:e0:aa:50:fa:d0:
5e:2a:01:51:ad:a5:06:3f:38:d4:65:c4:56:3f:a8:
90:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:C7:B1:0E:C8:EB:41:C2:43:95:A5:43:B8:04:4D:42:E2:4A:D2:8A
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:4d:0a:a1:25:84:85:1c:0c:d7:0f:bd:01:4d:28:00:89:e8:
e7:a6:9b:de:31:4a:56:b4:84:b6:05:a5:d0:1b:65:1e:ae:a7:
69:49:44:8f:b7:ca:e1:14:30:a3:66:60:79:f6:b9:09:e4:95:
f8:0b:6b:e7:91:d2:0e:a1:58:72:bc:cc:13:e4:60:d8:3f:73:
30:43:ed:2e:15:59:78:41:89:fc:d4:12:17:de:e8:88:10:5a:
16:1d:b3:6b:31:da:96:7a:9b:44:3f:05:75:2d:76:1a:32:63:
cf:6a:25:33:04:80:2d:7a:d8:3e:e2:45:77:04:35:c4:19:75:
16:e2:c4:1d:a6:00:f2:1f:c7:75:6c:09:19:b0:f2:e0:ac:d9:
6f:3a:5f:8d:6a:55:fd:cb:ff:a5:df:70:51:18:5c:a2:1d:78:
60:c5:70:49:6a:1b:96:8e:70:95:bd:cd:c4:14:79:e3:78:1f:
9d:38:83:fb:c8:90:b1:ce:0e:7b:f3:95:e1:c5:4d:90:20:7a:
05:bf:f9:f9:81:41:fd:09:cc:1e:f3:64:1b:3c:72:af:61:dd:
68:89:dd:c0:c6:18:27:d9:ad:f7:91:4c:b9:64:88:3a:18:e8:
9a:35:e8:e1:91:b8:29:39:75:8e:18:4b:02:df:a4:54:e0:fc:
74:c5:db:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0ohKgzq4mj76Efqw3SdLG0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjQ3NGQwNTU3MWRmM2Q0NGY2M2NjYTIxYjQwYjZlMTJj
MzkyZDkwHhcNMjYwMzI2MDUwMTE1WhcNMjYwMzI3MDUwMTE1WjAzMTEwLwYDVQQD
EyhjMWM3YjEwZWM4ZWI0MWMyNDM5NWE1NDNiODA0NGQ0MmUyNGFkMjhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9qzOJGvabYHfgMBKJK7FhsYpAwc
679HK0q/4FdH0S7i+VVJ36+y3Dib/64xp4FCv0dZDJwmRH13ZLpi1I0ghaOhS/sM
ALalaRlFC3+8nTdF+PwclY2/7cQCWJ5j1K7dkzNnD3qvQlMv8i82S/cbGKcAk3TV
iBOd124whkBHpJl5JBAwn4Mpq4e4QaXJVN5XGUQ1UNM6G4d8GdFmk0NiAUncCALe
kkMTCvEDHaj9UU5Dzku5CJZKqqBMluYd1kQlfcZPRdhv7zReBzVLtFBNUFb58Jad
pHnCoevfDrIsoINGHGgtUteRnOfW4KpQ+tBeKgFRraUGPzjUZcRWP6iQxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMHHsQ7I60HCQ5WlQ7gETULiStKKMB8GA1UdIwQY
MBaAFJO0dNBVcd89RPY8yiG0C24Sw5LZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC84ZGE2MjQtMzFjNS00NTA5LWJjNWEt
MjA0OWY2YWJmZDlkLzEvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC84ZGE2MjQtMzFjNS00NTA5LWJjNWEtMjA0OWY2YWJmZDlk
LzEvazdSMDBGVngzejFFOWp6S0liUUxiaExEa3RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdU0KoSWE
hRwM1w+9AU0oAIno56ab3jFKVrSEtgWl0BtlHq6naUlEj7fK4RQwo2Zgefa5CeSV
+Atr55HSDqFYcrzME+Rg2D9zMEPtLhVZeEGJ/NQSF97oiBBaFh2zazHalnqbRD8F
dS12GjJjz2olMwSALXrYPuJFdwQ1xBl1FuLEHaYA8h/HdWwJGbDy4KzZbzpfjWpV
/cv/pd9wURhcoh14YMVwSWoblo5wlb3NxBR543gfnTiD+8iQsc4Oe/OV4cVNkCB6
Bb/5+YFB/QnMHvNkGzxyr2HdaIndwMYYJ9mt95FMuWSIOhjomjXo4ZG4KTl1jhhL
At+kVOD8dMXb8w==
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:36:33 2026 by rpki-client