Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
File: k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json)
Hash identifier: kh60zrPEwdpDyHYLwvIN0emnLDKfBdvXz+IDCJw75fI=
Subject key identifier: 49:9A:9A:B4:88:DE:2B:DE:C5:B4:FF:4A:9B:73:39:73:86:4F:82:86
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial: 019D273AA236583B0CA0B5C6FFC7D5DE2A7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
Manifest number: 18AC
Signing time: Wed 25 Mar 2026 23:00:47 +0000
Manifest this update: Wed 25 Mar 2026 23:00:47 +0000
Manifest next update: Thu 26 Mar 2026 23:00:47 +0000
Files and hashes: 1: 1-w6BP38irc8ikwIFmua621R4fsA.roa (hash: 04Xau+nR8LEsBKrsIDus90F9cPwGPKiZEygv3ls7WwU=)
2: 1kWLQqjzDqKCBYLisG3Mmfema5k.roa (hash: hVqG2tcrXz55RsvzkU7NiBB4offN7X8Rc/q0zicjVfU=)
3: BpdGbagGv2_-Y3TyelIg9iJMEKo.roa (hash: l3T/M5x9/uGHTqM8Mx88SLVI1m/1mGk3r20lwOBjOe8=)
4: VlwwTSoRiE5X0lO1YkSOmqRJH_8.roa (hash: tELQUfXy5jxakYPvXfDeQLNFwxD9VNjFTkL9svhczLc=)
5: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: alAKRT/Ap72gY/IEUez2HyD6SN0QhIOrxAfh1GA3a4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:a2:36:58:3b:0c:a0:b5:c6:ff:c7:d5:de:2a:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Validity
Not Before: Mar 25 23:00:47 2026 GMT
Not After : Mar 26 23:00:47 2026 GMT
Subject: CN=499a9ab488de2bdec5b4ff4a9b733973864f8286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a1:2b:1e:6a:9b:28:a8:55:f0:92:c2:28:93:
a5:87:59:45:f5:11:32:77:03:5b:6c:aa:e5:47:1a:
67:ba:0d:eb:65:38:67:fa:f9:0b:59:c2:c2:b5:47:
73:85:55:dc:65:b0:81:16:51:89:a8:ba:b1:03:e6:
3a:2f:57:45:58:22:41:4a:b1:d9:ea:f9:45:4f:73:
f0:a4:59:3a:c6:64:f4:02:47:73:a9:5e:d1:7f:53:
69:35:9f:e1:a9:7a:00:8f:56:01:6c:31:d2:87:01:
d6:3f:b4:d4:b0:c6:69:8b:13:7b:38:27:82:87:71:
8c:9c:13:b7:fb:98:5f:6c:3d:8b:4c:4b:61:5a:da:
83:c0:e8:1a:f8:21:9f:eb:ae:c5:fa:eb:f6:f4:5d:
b9:33:b6:95:48:a6:7c:8e:fd:43:65:5f:32:2c:49:
28:ed:b8:ff:a2:c3:8c:f7:fe:be:07:ec:b4:46:38:
2a:ee:a0:56:e3:36:ed:80:3e:1c:d2:56:14:62:29:
76:51:80:ed:db:b6:52:fa:cb:ee:c3:01:fb:31:57:
1f:b0:4b:a7:4e:e1:b2:8d:2d:88:df:f3:31:b9:66:
ce:c9:1a:1c:c5:8d:81:eb:af:b1:8c:c9:63:62:a9:
af:ba:6c:99:8b:10:07:30:f7:3a:a0:91:ec:b1:a3:
87:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9A:9A:B4:88:DE:2B:DE:C5:B4:FF:4A:9B:73:39:73:86:4F:82:86
X509v3 Authority Key Identifier:
keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:80:27:9d:97:78:6a:eb:35:1a:6e:a0:fc:a1:2c:3a:26:5f:
1d:65:1c:b8:7e:51:61:84:9d:0f:e7:f0:a9:97:0e:a1:df:7c:
43:6a:ed:ec:73:40:3e:be:0d:dc:f9:48:e6:6f:78:d5:33:83:
4f:ff:e9:4a:5f:1b:22:bf:c5:22:60:aa:b3:24:0f:33:c4:0d:
b3:4d:32:e4:24:03:65:09:ff:d0:2d:54:f4:ed:fa:31:c3:da:
a5:73:61:28:1a:a5:e4:43:1e:24:d4:62:6a:dc:a3:53:20:41:
b5:12:ae:82:4f:07:69:7b:9e:66:73:01:b7:36:74:ab:cf:2c:
f6:d5:fc:79:8c:2e:ed:d3:48:a0:76:3c:1f:94:09:ba:bb:3b:
c1:17:b4:d1:92:75:b6:01:db:af:9a:8f:b2:f4:74:a2:70:19:
aa:8d:12:ca:ed:92:f9:c6:4c:ac:f5:94:26:ae:d7:2e:e4:39:
21:7b:1c:62:e7:9d:42:cc:7d:8c:5f:e3:f4:e6:d6:73:d2:32:
b4:00:80:70:59:32:de:89:34:e0:c5:e0:d8:4e:e4:ae:09:cf:
07:66:03:72:e1:fb:87:5c:51:06:81:8f:6d:13:98:b6:68:e5:
e5:e1:e1:c3:6f:af:fa:56:a1:43:03:2f:d8:2a:e8:19:92:4e:
90:1c:6f:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:36:44 2026 by rpki-client