Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: ss0ndtPGHsy0nbXruyO9m19j8kpOIz11KaAMowDLAos=
Subject key identifier: F6:17:97:A5:77:FB:28:F5:6F:FF:AC:0A:6E:40:FA:88:5B:1E:89:5F
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 019E1FB5607E1AA91C511E927FD91229CBAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 0FEC
Signing time: Wed 13 May 2026 05:00:40 +0000
Manifest this update: Wed 13 May 2026 05:00:40 +0000
Manifest next update: Thu 14 May 2026 05:00:40 +0000
Files and hashes: 1: AUxe3iOnW0R9FRzl8aepQlk_j-s.roa (hash: F/5QY2qH/5oxR7eNEMu85fTdScF+CggMDUwObVNbh98=)
2: XwZeP_FjPRrGyxH7if_auVWhw38.roa (hash: 4bEVXi89j8g7Wnq/i2v5YpIAVxtMtfePuFt8ghONBAw=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: AerNpamHDFz5VzRH+YMUf37lK9xWDWR0BRF5OIRLQsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:60:7e:1a:a9:1c:51:1e:92:7f:d9:12:29:cb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: May 13 05:00:40 2026 GMT
Not After : May 14 05:00:40 2026 GMT
Subject: CN=f61797a577fb28f56fffac0a6e40fa885b1e895f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0f:99:79:c7:3c:27:5c:32:fc:a0:ab:d2:97:
0f:79:c8:9d:1d:9c:a1:21:b2:c9:47:41:96:92:34:
e9:30:4d:cd:f1:ee:2f:b4:74:76:71:ea:fd:42:33:
61:9b:df:55:f5:ca:bf:a4:7f:2b:4f:ca:f5:4b:cd:
53:85:8c:29:be:3d:ac:4e:0f:63:db:24:01:6a:af:
92:42:be:c2:c4:63:7c:f5:b1:9b:19:0c:dd:b9:5e:
cb:4b:06:3f:5a:53:87:48:75:43:fb:07:a8:b1:65:
75:24:b9:b2:40:cf:63:54:e5:50:e6:0b:43:90:90:
f6:d7:64:71:e0:63:b7:01:b6:f7:c6:92:c6:17:a8:
d5:b7:50:e2:bd:74:a2:1e:53:9e:c3:77:8a:52:63:
00:5f:1e:fc:fe:9f:49:80:2a:5f:c0:1e:a5:7d:d2:
4f:ae:f9:b4:48:fc:ef:3e:5b:06:50:38:fb:fc:4e:
6d:72:bb:da:5b:31:f0:f0:3f:c0:7e:b2:81:6d:cb:
3e:83:e3:47:d3:1a:05:8d:5d:36:47:fc:69:fd:78:
63:d4:43:2b:ab:7d:1f:26:bb:08:52:e2:74:90:fa:
cb:07:2e:49:fa:fb:6e:74:6b:52:07:18:0d:ee:7c:
fb:85:39:9e:b9:f3:da:d6:40:24:38:6f:36:26:91:
c4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:17:97:A5:77:FB:28:F5:6F:FF:AC:0A:6E:40:FA:88:5B:1E:89:5F
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f6:b2:48:ee:94:17:e2:75:6f:05:b9:8c:c6:d5:7b:78:2b:
4d:01:48:45:f5:ff:25:9a:89:cf:8c:40:83:16:0b:6b:32:e0:
fe:cf:43:a3:f0:3c:21:37:ce:d3:f6:59:b8:46:23:2a:51:c7:
ce:6f:bb:17:03:af:9b:52:8d:44:47:d7:00:b6:48:66:06:f2:
b0:28:37:a9:ac:ba:74:e1:e4:af:16:ea:55:39:52:3d:0e:b1:
a2:93:95:ed:31:21:df:7c:84:17:f9:9d:dc:c2:b9:89:29:e3:
c5:90:66:ca:fe:ed:e9:dc:d5:a1:26:92:74:82:37:4a:70:f6:
d0:bf:2e:de:8a:09:2a:4e:a5:0b:ae:15:45:e9:db:d7:f4:da:
5a:f4:49:97:81:7f:e2:59:8c:2a:cb:4e:d6:df:c0:fa:26:31:
e3:4b:07:29:d7:4d:75:cc:ed:a1:9a:a0:9b:03:9a:c8:7e:04:
05:7a:1f:08:fa:74:90:94:65:9f:eb:e0:20:19:be:d7:8b:f7:
9c:41:ce:e2:93:cb:c3:bd:e1:78:f0:55:80:fd:8b:79:df:73:
42:6a:8b:a9:4e:0f:1b:d4:38:a5:89:df:12:d1:6a:2a:c4:92:
89:41:d5:ae:ea:91:9b:f6:ef:9a:b6:47:c6:b5:78:b0:f4:a1:
9a:b4:d7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:44:06 2026 by rpki-client