Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier: 3SqdGBg8yelbaHyhEHpu6jUraXm9fsPOXttGZSatvnU=
Subject key identifier: 63:2A:0F:93:6B:60:E4:2B:AA:B8:24:94:2E:F5:A5:53:80:C1:10:3D
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 019F93C99F6DA79510607B0FAFE33F2C68DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number: 08D9
Signing time: Fri 24 Jul 2026 11:01:31 +0000
Manifest this update: Fri 24 Jul 2026 11:01:31 +0000
Manifest next update: Sat 25 Jul 2026 11:01:31 +0000
Files and hashes: 1: S_Jp9m9blIUps0OicsJ0YR9eOvE.roa (hash: Be16CYxyexdW5EkOG7OmNRTbUwOGD3q//e7OhhleAMQ=)
2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: UtD6wWyXmphI3q4/uDaZtaVLVZZjpXCbs5yTFVrOwSg=)
3: yIOWYvs8zmXxlBajX3odsYxOM8Y.roa (hash: d8ux5xGWiDuWJb9M/rhcfhWw34lH4Et949GrjMpaIAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:9f:6d:a7:95:10:60:7b:0f:af:e3:3f:2c:68:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Jul 24 11:01:31 2026 GMT
Not After : Jul 25 11:01:31 2026 GMT
Subject: CN=632a0f936b60e42baab824942ef5a55380c1103d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:28:5d:42:6c:70:c4:ed:7a:3b:f4:d9:50:b4:
b7:91:0a:a9:ee:d7:80:71:e9:1b:b4:08:c1:c6:f6:
8f:c4:22:77:67:41:96:1f:5a:ac:a8:30:53:dd:6b:
72:11:3a:c0:2f:74:83:63:84:d3:13:e4:df:8b:94:
82:a2:68:1b:5a:e4:41:31:42:71:46:b5:eb:63:bd:
6e:e0:eb:20:c7:70:d0:b9:76:a9:5d:ba:e2:4c:33:
25:db:31:19:57:95:a4:20:2a:3c:47:8d:19:c3:17:
2c:6f:cf:63:74:d8:de:67:82:04:7f:d5:3c:69:e3:
87:20:9b:de:2b:a7:70:e4:46:5f:ca:99:0d:8d:cf:
c0:27:76:8b:1b:f2:34:66:f7:7e:03:cf:49:a5:a2:
14:05:aa:62:a9:18:95:b0:f5:53:82:e9:c9:b7:11:
3e:7a:3d:79:43:29:45:51:09:a5:84:8b:f4:66:ed:
53:52:7d:0a:03:fa:ba:8d:eb:44:5a:c7:91:f9:49:
02:b1:2a:ca:56:f9:06:57:2a:7d:c2:0d:d6:9e:af:
7c:d7:d3:9a:65:ad:c8:fb:76:b8:07:bd:26:39:89:
b3:3b:60:86:3e:1c:06:94:da:c4:10:f6:44:88:d3:
94:02:3e:cb:77:75:b2:e1:b0:e5:29:ac:38:2b:c9:
61:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:2A:0F:93:6B:60:E4:2B:AA:B8:24:94:2E:F5:A5:53:80:C1:10:3D
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:59:59:bc:87:d5:89:d4:e9:00:80:f5:c5:27:d1:56:f5:08:
9e:ae:6b:fb:74:74:b5:31:00:cb:f4:1b:41:78:cf:7b:d0:d6:
eb:47:5c:11:4e:08:7a:0a:f7:15:e3:09:b7:2e:f2:92:2f:81:
5f:d0:82:92:f9:81:4e:59:be:db:b5:e6:14:20:5d:fe:24:68:
c3:5e:9c:5e:53:8c:55:b5:be:10:cd:5b:f6:ef:35:a8:b6:76:
0c:df:ca:aa:93:3b:45:f4:17:76:80:34:00:46:46:c6:4e:8b:
33:ca:13:d4:9e:12:d9:b9:ea:04:0a:53:06:17:c9:79:a2:37:
ab:55:bc:97:00:b8:65:64:7b:5b:b7:00:2c:bc:d5:f9:fe:6a:
66:61:f8:9b:4a:92:18:f1:d2:7a:d6:e3:ea:c5:ec:94:0d:64:
78:f9:ae:42:9f:f6:59:c9:a4:d4:40:0c:f2:bb:0b:a0:14:18:
01:3e:6f:43:7c:7c:e9:b4:cc:28:bf:bb:50:b0:90:74:4c:b6:
7e:d8:64:c1:6b:62:b2:7a:3e:de:25:18:16:f6:21:40:18:5b:
68:47:72:74:ea:c9:52:72:83:ac:2e:95:5d:8a:c6:29:2f:23:
2a:e7:92:aa:a4:48:57:4a:31:8a:08:fb:6a:1b:ff:09:c3:55:
fc:05:cc:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:29:04 2026 by rpki-client