Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: oOtWyBUt7RfhllVRicOC2NTU2FMIrs0fJbCSX127LOM=
Subject key identifier: A4:60:07:6A:62:D3:87:45:72:E9:DF:C9:88:5E:30:88:2A:E4:CE:8E
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 019F927EF0CB96AB31861A0B26ED3671592E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 10AC
Signing time: Fri 24 Jul 2026 05:00:20 +0000
Manifest this update: Fri 24 Jul 2026 05:00:20 +0000
Manifest next update: Sat 25 Jul 2026 05:00:20 +0000
Files and hashes: 1: AUxe3iOnW0R9FRzl8aepQlk_j-s.roa (hash: F/5QY2qH/5oxR7eNEMu85fTdScF+CggMDUwObVNbh98=)
2: XwZeP_FjPRrGyxH7if_auVWhw38.roa (hash: 4bEVXi89j8g7Wnq/i2v5YpIAVxtMtfePuFt8ghONBAw=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: xozwgf1Mw61U5sYHE8lwm25EPRWLUZEBtRHu6y0DUsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:f0:cb:96:ab:31:86:1a:0b:26:ed:36:71:59:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Jul 24 05:00:20 2026 GMT
Not After : Jul 25 05:00:20 2026 GMT
Subject: CN=a460076a62d3874572e9dfc9885e30882ae4ce8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:4c:3f:0a:33:be:96:e4:b4:a7:04:b4:42:47:
66:ac:93:cb:38:15:ec:ec:7b:e6:66:83:25:9c:cc:
65:fe:3b:2b:53:45:ef:56:86:66:6d:16:57:e6:dd:
76:6f:5a:f2:d2:4e:dc:35:b9:42:e2:57:1a:c5:83:
91:41:e0:9f:cc:63:9a:c4:38:39:bf:12:50:57:a6:
10:9c:10:10:ff:ce:f8:2d:7a:3e:ec:0a:75:9c:13:
19:3d:dc:66:f2:a0:2a:c6:43:c2:87:83:4a:2b:12:
b2:66:a5:46:53:e3:d7:ca:b0:3b:55:4c:f9:70:56:
8a:bc:6b:8e:f0:77:11:98:5f:d8:f5:be:27:1f:65:
ef:f7:ba:91:f9:51:07:86:a8:6a:ce:ec:4f:e1:05:
dd:0b:86:cf:2d:67:5e:ed:41:c6:21:4b:d5:6d:d4:
d5:87:fe:2a:80:77:30:ce:3b:30:95:a3:e5:6c:47:
17:68:cb:46:ed:c3:9c:fc:57:23:8e:84:c9:07:62:
e0:1e:fe:3d:a1:b5:5b:70:72:59:98:c4:ec:3e:88:
eb:b0:43:91:c8:83:c0:7d:de:59:de:a6:fd:34:ed:
31:c7:1c:29:d1:fc:be:43:ee:fe:e5:5b:f9:4f:8b:
0c:6a:87:c8:17:a9:7f:43:98:72:da:41:6b:b3:95:
11:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:60:07:6A:62:D3:87:45:72:E9:DF:C9:88:5E:30:88:2A:E4:CE:8E
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0f:d6:89:43:50:2d:30:1c:59:2f:65:0c:c1:0c:db:9d:96:
e3:5f:b3:ac:8c:4f:96:a1:30:fd:0a:90:f2:58:04:a5:41:ce:
81:95:26:e8:40:64:77:ba:07:d9:27:b5:4e:9e:1f:e4:ce:61:
29:3d:1f:4d:e5:f8:be:99:c1:34:59:81:c9:94:1b:1c:cc:3a:
10:fa:99:5e:da:34:ce:4c:6b:85:cc:cc:2b:55:21:68:c6:ee:
98:23:6b:19:a9:89:d3:93:06:ee:d8:9d:38:71:db:9a:3a:ca:
b1:78:6c:7c:3f:b6:ef:bb:58:68:cf:92:85:37:5f:b0:31:e4:
ff:38:4a:69:58:b7:5a:63:78:ad:d9:37:e2:15:b2:3a:ba:2b:
31:e7:82:4a:e7:18:f5:ed:9e:b2:29:d7:f0:2d:b2:01:46:9c:
5a:94:2f:0e:b2:62:5f:15:de:75:ca:bb:ad:17:47:cd:b1:2c:
d7:7c:ab:23:b3:b0:35:90:ea:74:d5:40:ae:1e:f9:33:e9:4d:
64:b2:58:af:c2:1b:48:d8:1c:06:6f:d4:29:ae:30:e9:3c:2f:
34:43:8f:5f:3e:21:01:6b:15:ab:23:76:e1:f6:93:a1:48:e9:
98:7e:8b:e7:0f:8b:e8:38:21:3e:e4:aa:5f:22:9f:77:70:ec:
ca:47:37:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:27:10 2026 by rpki-client