Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: 8xpj/St8izBJdWS3oBV0rcvegYMoJhvsRhr61FR/h2w=
Subject key identifier: C2:EA:09:ED:62:58:63:56:15:3A:29:2E:35:DB:FB:53:30:FD:58:24
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 019F91A4505B39E26A5F0928373270676FDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 01:01:32 +0000
Manifest this update: Fri 24 Jul 2026 01:01:32 +0000
Manifest next update: Sat 25 Jul 2026 01:01:32 +0000
Files and hashes: 1: 8hL0m9Fc9UNGzgjgGkhDpJap1MU.roa (hash: NlNwlvnTVX6u27vOfaFF+tRXHuEvNbAOslEtQ3I2hnw=)
2: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: RIw6lXRd3nz0joNhlZg5Vm7zX/uib/9krSYAqJcd6Z8=)
3: sYg8Oa1Ta_lzbrdC5qTkNfuGJEo.roa (hash: QEaQMZyU5y5fYj+msGaAAUMqIN0tNFuYbbG6xKUQauY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:50:5b:39:e2:6a:5f:09:28:37:32:70:67:6f:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Jul 24 01:01:32 2026 GMT
Not After : Jul 25 01:01:32 2026 GMT
Subject: CN=c2ea09ed62586356153a292e35dbfb5330fd5824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:92:93:b8:00:ec:5b:8c:98:52:05:01:4b:
f5:9f:4f:1f:6e:95:d3:19:a9:4b:a8:c0:67:f3:e2:
85:21:90:a1:b0:01:74:3d:50:ee:79:42:b0:97:21:
e4:c0:66:b6:48:57:09:3d:fa:56:5a:47:df:1c:86:
61:c6:cd:85:37:7b:8a:2b:21:18:d0:0a:8d:11:52:
5c:64:8d:1c:73:4d:1d:93:c6:e4:f8:83:3b:d6:6f:
2c:52:b1:f6:49:ac:94:cd:85:22:61:69:87:ec:b7:
00:79:f2:7c:02:5b:ce:03:26:73:9b:15:2e:0c:89:
b8:bf:35:e8:c8:53:96:13:16:27:20:1d:4a:08:68:
1c:33:2b:78:47:74:5f:36:b0:79:d5:57:ca:29:47:
08:f2:4c:9d:c2:61:dd:16:a6:b7:e1:80:3a:7b:d3:
c2:44:8b:b9:a4:ff:98:01:6c:b0:e2:8f:8e:9e:87:
c1:e7:44:52:37:1b:f9:62:80:fc:2e:79:e9:68:4e:
6d:22:c0:f4:a1:e8:96:58:7e:c5:08:12:97:1b:8b:
7c:13:98:41:ce:e5:73:f4:5e:6e:2f:c3:ed:ce:a2:
0f:f9:d0:e8:e8:79:a1:9c:25:5f:7c:fe:1e:c6:a0:
6c:bc:b1:6b:f7:3d:a3:43:2d:8f:7a:b1:97:9b:d9:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:EA:09:ED:62:58:63:56:15:3A:29:2E:35:DB:FB:53:30:FD:58:24
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7f:2b:6b:ee:8f:c5:3f:4c:b8:c8:fa:3f:b8:cf:bb:1c:59:
4f:4b:9c:44:a6:bb:76:e4:29:20:e9:fb:22:78:89:10:c5:95:
0a:3b:9f:d4:97:5b:fd:a1:79:dc:fe:5e:2c:8c:38:2b:6b:9a:
a6:d0:cc:c0:9a:58:77:96:b5:26:8d:f3:bb:f8:a2:61:2e:01:
3d:1b:6f:07:7f:52:ec:52:70:ec:b9:96:4f:72:91:38:49:a4:
3f:2c:28:d8:c0:22:2a:63:35:a3:72:61:40:6c:70:c6:0a:95:
f6:e4:eb:46:db:d4:b5:f6:3d:b2:6e:47:ac:c2:a0:d6:bc:2c:
ff:ec:69:41:a6:25:bb:1e:d8:53:3e:e9:71:7d:44:c1:64:39:
1c:05:49:bd:02:be:68:a5:ac:dc:d7:d1:08:eb:ef:90:b9:6f:
bc:c4:87:27:4f:7e:7e:fb:fd:9c:65:95:e1:fc:e3:ea:41:8a:
8e:88:bc:dd:84:1b:ef:3b:22:da:53:24:cf:a1:cd:5a:6a:03:
e5:38:dc:71:28:6d:a5:82:9f:a9:03:76:63:26:a8:38:9d:a0:
88:50:73:d2:ac:90:18:a4:78:75:d9:07:ff:0a:00:b3:76:36:
36:35:0d:5a:d7:6f:f5:53:9c:94:0a:1b:00:af:1f:35:72:2b:
f4:aa:01:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:33:49 2026 by rpki-client