Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: wRsfpmKAN1YetqYlDBiB9tHbWaEvMP/6zJCR7hFfEKQ=
Subject key identifier: 7A:3E:A0:28:0A:9F:65:C6:55:34:D4:C9:71:D7:9A:68:51:F6:C0:6D
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 01A0D6149F5A019326155D92F92DACD51C59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 1A6F
Signing time: Fri 25 Sep 2026 01:01:10 +0000
Manifest this update: Fri 25 Sep 2026 01:01:10 +0000
Manifest next update: Sat 26 Sep 2026 01:01:10 +0000
Files and hashes: 1: 8hL0m9Fc9UNGzgjgGkhDpJap1MU.roa (hash: NlNwlvnTVX6u27vOfaFF+tRXHuEvNbAOslEtQ3I2hnw=)
2: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: 8m0oGdytmw5DAreh3HJhlOgH3x/v9McDH0D2yblzseI=)
3: sYg8Oa1Ta_lzbrdC5qTkNfuGJEo.roa (hash: QEaQMZyU5y5fYj+msGaAAUMqIN0tNFuYbbG6xKUQauY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:14:9f:5a:01:93:26:15:5d:92:f9:2d:ac:d5:1c:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Sep 25 01:01:10 2026 GMT
Not After : Sep 26 01:01:10 2026 GMT
Subject: CN=7a3ea0280a9f65c65534d4c971d79a6851f6c06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:45:bd:9f:af:c4:0d:49:17:41:e4:98:8b:cc:
7b:67:73:30:fe:9f:95:92:5b:92:eb:a1:35:64:ea:
5c:02:64:9b:f4:fa:f8:f7:6f:31:fa:8e:17:af:aa:
ec:12:2c:07:56:fd:6d:a4:df:49:95:b0:a4:25:53:
b9:c4:37:ae:0f:3e:28:e8:c0:52:25:d4:79:ed:78:
e9:59:ac:b3:f7:12:47:44:b0:92:78:f5:87:ba:4c:
96:6f:36:b2:47:65:ee:25:f9:e5:99:a9:f1:0f:fd:
cd:52:d9:d3:b5:57:df:27:3b:40:54:a9:55:57:7f:
3e:74:7d:f5:42:aa:e5:65:4a:f8:2a:8f:a7:b6:bd:
01:bd:70:d4:56:d3:33:2c:27:14:b2:21:1c:c7:23:
6f:96:24:04:a8:6b:31:eb:66:ed:50:6c:f4:b7:42:
c2:68:07:08:92:0d:f2:fa:c3:ce:11:dc:81:0f:bf:
af:9c:4f:3a:3e:f6:a2:60:a6:18:cf:1a:62:0c:a1:
55:b2:2a:56:40:a4:d7:51:45:f9:1e:ca:1f:7e:69:
7e:a1:68:5d:57:52:04:1c:fd:bd:55:9d:01:f6:c6:
75:58:f2:c9:c3:b2:49:06:21:37:57:1a:dc:ef:5b:
d3:b4:69:30:93:1f:f6:97:a0:2c:de:c6:9f:c2:d5:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:3E:A0:28:0A:9F:65:C6:55:34:D4:C9:71:D7:9A:68:51:F6:C0:6D
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:b0:01:49:81:40:70:b6:c8:df:e0:69:0e:e2:63:b9:16:34:
2a:c6:51:86:b7:19:be:94:62:0e:f5:dd:3e:cd:6d:f3:51:a5:
3c:43:8d:55:03:c1:ee:c6:41:14:e7:28:31:83:2d:1d:95:d4:
4a:98:63:2d:cf:b6:ee:ae:57:11:86:de:1c:f9:80:e9:52:f9:
16:68:50:09:c4:5e:c2:19:3a:45:98:1b:69:68:4d:c8:f5:66:
cd:61:c3:b9:0c:b2:64:52:d5:2c:34:79:77:0c:a6:0f:54:1e:
26:50:d8:99:d0:b5:68:fa:f3:ee:20:90:33:21:3c:07:65:70:
47:ad:55:85:e0:c8:64:ab:58:a6:49:08:5f:49:ca:54:e5:7c:
02:c6:88:57:7c:f5:c0:bd:a3:58:62:8a:d8:87:31:14:1c:bb:
a7:6e:5f:17:25:c1:53:76:ba:17:38:1f:ba:25:21:e4:fd:d5:
46:6a:9a:ca:e6:ff:73:23:50:8e:6b:17:eb:08:b7:69:30:a9:
f3:03:b7:49:5e:1b:87:98:bc:76:11:8e:47:1b:91:ee:6d:2a:
fe:02:cc:e6:0b:94:e9:bb:d0:50:b1:8f:79:fa:f2:f4:44:b4:
2f:a2:e9:75:e0:a8:4d:01:96:75:0d:05:52:e7:32:4a:c6:16:
29:1b:19:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:44:20 2026 by rpki-client