Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
File: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft (raw, json)
Hash identifier: vkSpVm2xVYirrdWLGsixSJLFuagbdw4sdpVc47Cx5k8=
Subject key identifier: 99:87:9B:D5:27:9D:E1:6E:D1:49:E9:BF:59:03:27:DC:B3:AD:37:6F
Authority key identifier: 93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
Certificate issuer: /CN=93515f25986e4b572a78b109d995c9ddf5da1266
Certificate serial: 019F93C8B758315336A4253ABACCA57AB76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
Manifest number: 128A
Signing time: Fri 24 Jul 2026 11:00:32 +0000
Manifest this update: Fri 24 Jul 2026 11:00:32 +0000
Manifest next update: Sat 25 Jul 2026 11:00:32 +0000
Files and hashes: 1: EogTS1WEx_vkYhbZSi3vHNHhiHY.roa (hash: bP41/ID8ron8LWTYg41pAko9WG04aRJj5QuWiGa7VvM=)
2: k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl (hash: x9KyzOtlz7SKVLWlsJRx2J3nGWLVDHdaIY+pzZKtNHI=)
3: m_9DNbciOyMJhFYq6AMIc9hId24.roa (hash: tBW7znRdSpU63evh7Ukilhd1TX1abcrpsvoLCnD8lGw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c8:b7:58:31:53:36:a4:25:3a:ba:cc:a5:7a:b7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93515f25986e4b572a78b109d995c9ddf5da1266
Validity
Not Before: Jul 24 11:00:32 2026 GMT
Not After : Jul 25 11:00:32 2026 GMT
Subject: CN=99879bd5279de16ed149e9bf590327dcb3ad376f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b4:f5:a9:ea:7b:61:2b:ae:7f:1d:6f:b9:4d:
c0:60:50:1c:87:5f:39:24:f2:73:5d:b9:a0:31:6a:
c1:94:b4:fa:06:33:98:5d:db:f9:50:ff:56:c7:6e:
68:de:23:ed:a8:68:b7:6a:e9:86:d8:7d:58:6b:fb:
17:ca:d0:07:bc:b9:f9:e2:80:bf:91:c5:47:04:7d:
6c:31:5c:0f:5c:a0:87:0d:5d:f4:ed:25:39:18:16:
ac:45:4a:f0:d2:a4:af:0d:31:bd:96:92:1b:82:2e:
75:c7:ed:02:8b:f9:e1:d8:01:21:84:e7:0e:68:41:
59:05:eb:22:ef:37:e9:56:1f:26:a8:2d:86:5a:a5:
7d:84:01:a3:91:cc:4f:c5:05:d2:9e:1b:f6:fd:bc:
85:a9:74:b1:82:b4:52:ab:8f:ba:c7:b7:fe:5e:e9:
88:f7:d2:64:e7:a2:ec:a7:e6:0b:79:23:ef:20:d7:
b7:ae:54:e3:df:8e:5e:90:bc:2a:7b:35:ff:91:e1:
48:a3:cf:31:e3:dd:2c:0f:f9:15:e4:03:c3:cc:5a:
bf:c9:e4:c2:0e:4f:90:ec:de:68:ab:42:40:c8:29:
2e:06:e7:d9:8f:95:58:2b:be:b5:1f:a5:2f:d1:30:
1e:5b:9a:cd:73:99:28:dc:3e:94:75:1a:8b:27:76:
3e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:87:9B:D5:27:9D:E1:6E:D1:49:E9:BF:59:03:27:DC:B3:AD:37:6F
X509v3 Authority Key Identifier:
keyid:93:51:5F:25:98:6E:4B:57:2A:78:B1:09:D9:95:C9:DD:F5:DA:12:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/84b03b-5619-4272-947f-13d51328a9f7/1/k1FfJZhuS1cqeLEJ2ZXJ3fXaEmY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:62:66:1e:48:20:72:93:ec:5b:b7:fe:f6:30:3c:1a:1e:ab:
5b:96:83:38:b3:e5:99:e7:02:0b:86:2a:19:02:1d:cb:67:49:
d1:d5:bf:23:9e:49:e2:18:10:7f:b9:f8:31:c4:c6:21:f2:d3:
fc:1c:71:71:f3:5e:5f:2f:2a:d0:4e:18:da:9e:e6:d7:6e:4d:
de:e4:c7:d4:d2:d2:21:1a:c8:0b:98:af:42:2e:77:c3:e5:cb:
27:5a:13:84:e6:98:e9:e5:4e:6a:2e:a3:45:f7:e9:c3:d2:1d:
67:90:de:66:ab:90:fe:fa:73:40:ea:0f:3e:da:c5:9c:f2:d2:
77:b0:b4:ce:ee:5c:b2:05:d9:dc:1f:2f:3a:a8:20:de:a6:fd:
58:15:22:ff:af:f4:6c:98:06:4f:a8:50:25:0f:32:60:48:04:
59:b6:70:f5:55:5f:0d:88:04:59:27:91:98:9e:ac:47:1a:71:
b4:2d:71:82:b9:7a:d4:ab:c8:13:d6:07:b1:a3:4c:20:18:c4:
cb:79:7f:e0:48:c5:d0:42:35:6d:2e:0f:d6:52:41:38:39:1e:
14:71:f9:71:ae:71:6b:b4:ed:35:82:67:2c:ba:30:41:de:7c:
26:98:4a:1a:e7:c5:3d:bb:3c:d4:c4:33:91:35:a2:85:ef:ea:
e9:10:60:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:51 2026 by rpki-client