Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: pd8bo2LYTj7PDYjwWxyBJR4fra6p5CKjDKoWfd1LqLY=
Subject key identifier: D5:56:6A:39:5D:17:00:B1:70:69:AA:8D:67:E8:D6:22:DB:48:27:16
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 019FABD145E95A98CAC0DC88A50DD68236CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 19D8
Signing time: Wed 29 Jul 2026 03:00:46 +0000
Manifest this update: Wed 29 Jul 2026 03:00:46 +0000
Manifest next update: Thu 30 Jul 2026 03:00:46 +0000
Files and hashes: 1: KLcO-4pnwNwQ0ENsv05vSQ934W8.roa (hash: FYOxX+97VqHTmC9VAss+Ib9pIE+EbJuTdglUDu9UfW0=)
2: dA8NWdyS0f06Erm6RVd9DfssKjU.roa (hash: IZmapnDLq3R54YRETdfjg+rEgpwO069ZWxHLiaQ38d0=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: UyjV/rHHXatmvn97OMyl4Xg57K7E4XbKCigrWDxDDFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:45:e9:5a:98:ca:c0:dc:88:a5:0d:d6:82:36:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Jul 29 03:00:46 2026 GMT
Not After : Jul 30 03:00:46 2026 GMT
Subject: CN=d5566a395d1700b17069aa8d67e8d622db482716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5d:f8:2e:5b:b6:53:52:81:42:ec:e5:f5:10:
c5:29:e1:ba:71:ce:94:33:b7:e7:f9:23:07:8c:68:
51:7e:9d:d1:d2:64:33:e3:e5:27:42:57:51:c9:a0:
a9:ee:79:08:7c:82:3f:47:d2:ce:51:5c:d7:c6:27:
2c:35:2c:49:ea:5e:40:f5:58:67:c6:21:10:10:18:
53:46:38:c6:4d:6a:9f:f5:ba:8a:4a:f3:be:0c:21:
5f:68:d7:e6:45:19:7f:1a:3b:85:64:b9:2f:11:62:
89:41:ff:fb:f3:9e:a7:4a:eb:fc:5d:ca:0e:91:80:
2b:f0:85:ca:66:7a:df:3c:42:67:e4:42:1d:bc:23:
6d:72:5d:65:b0:a1:89:b5:0c:bb:2c:b2:10:78:bb:
9c:37:4d:aa:55:8a:f5:a0:82:07:e6:2d:48:a0:fc:
94:f2:2d:95:9a:df:a0:7f:0e:f4:8a:99:5a:f4:ba:
38:36:30:c2:43:9d:6b:82:e7:cd:70:c5:ed:39:9a:
61:02:1b:1a:9b:61:c1:67:de:f2:18:fd:96:b7:df:
5d:fa:a7:56:e2:de:e8:76:9b:2e:3e:da:cd:37:21:
40:a9:77:77:6e:15:87:46:f5:70:f3:41:d4:22:d1:
c9:a6:72:5c:8c:db:62:4c:90:b4:95:7d:b6:22:24:
1c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:56:6A:39:5D:17:00:B1:70:69:AA:8D:67:E8:D6:22:DB:48:27:16
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:18:4a:a5:d7:4a:cf:c0:10:b5:3d:1e:82:26:bc:23:7a:b8:
39:cc:27:b5:5c:b9:d8:87:09:8b:80:d2:ec:66:b8:a5:d1:49:
6b:d0:69:a7:f3:6d:57:d7:a3:32:0f:89:d7:23:b3:3b:ae:b1:
8a:57:b8:fd:3a:a0:ba:fa:3d:41:eb:e2:c4:51:0f:07:34:0a:
93:90:ef:5d:d8:09:0a:6e:26:d0:73:7e:f3:23:a8:21:b9:02:
b4:7f:f8:c5:cd:b5:eb:e5:b8:86:ca:1f:c6:c2:84:8c:53:bb:
32:29:cc:4b:3f:a8:47:d6:b6:99:45:26:27:95:3b:ad:7e:84:
f6:f4:ef:f7:04:0d:d2:0c:fc:db:f9:0e:96:6a:fd:73:7c:15:
f2:f2:44:00:e8:24:a5:1f:c3:bb:ac:2c:23:43:eb:51:f3:70:
58:5b:9e:b5:86:22:cc:e9:e1:e2:9b:a2:0b:dd:1d:37:38:4b:
3e:a8:d7:9b:25:47:b6:52:7b:74:d2:fa:45:78:e2:a5:3f:46:
e3:b3:0e:5d:59:9e:d2:7d:08:e4:dd:98:92:f8:25:6f:67:5b:
75:e2:f9:6f:32:2b:bb:43:46:f8:de:52:8f:9d:68:45:85:9f:
aa:2e:4d:67:79:c7:71:ca:28:39:4a:d7:b7:39:67:44:73:3e:
2e:90:e8:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+r0UXpWpjKwNyIpQ3WgjbKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjI5ODE5Nzg4ODU2OTZjZTFjMmJiZjRhZjk5ZGFkYzJj
NjE4ZWIwHhcNMjYwNzI5MDMwMDQ2WhcNMjYwNzMwMDMwMDQ2WjAzMTEwLwYDVQQD
EyhkNTU2NmEzOTVkMTcwMGIxNzA2OWFhOGQ2N2U4ZDYyMmRiNDgyNzE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq134Llu2U1KBQuzl9RDFKeG6cc6U
M7fn+SMHjGhRfp3R0mQz4+UnQldRyaCp7nkIfII/R9LOUVzXxicsNSxJ6l5A9Vhn
xiEQEBhTRjjGTWqf9bqKSvO+DCFfaNfmRRl/GjuFZLkvEWKJQf/7856nSuv8XcoO
kYAr8IXKZnrfPEJn5EIdvCNtcl1lsKGJtQy7LLIQeLucN02qVYr1oIIH5i1IoPyU
8i2Vmt+gfw70ipla9Lo4NjDCQ51rgufNcMXtOZphAhsam2HBZ97yGP2Wt99d+qdW
4t7odpsuPtrNNyFAqXd3bhWHRvVw80HUItHJpnJcjNtiTJC0lX22IiQc7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVWajldFwCxcGmqjWfo1iLbSCcWMB8GA1UdIwQY
MBaAFJOymBl4iFaWzhwrv0r5na3CxhjrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83OTg2YTktNGU0Ni00YzMzLTkyYzkt
MzFjOTVlMmExZDZmLzEvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83OTg2YTktNGU0Ni00YzMzLTkyYzktMzFjOTVlMmExZDZm
LzEvazdLWUdYaUlWcGJPSEN1X1N2bWRyY0xHR09zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhhKpddK
z8AQtT0egia8I3q4OcwntVy52IcJi4DS7Ga4pdFJa9Bpp/NtV9ejMg+J1yOzO66x
ile4/Tqguvo9QevixFEPBzQKk5DvXdgJCm4m0HN+8yOoIbkCtH/4xc216+W4hsof
xsKEjFO7MinMSz+oR9a2mUUmJ5U7rX6E9vTv9wQN0gz82/kOlmr9c3wV8vJEAOgk
pR/Du6wsI0PrUfNwWFuetYYizOnh4puiC90dNzhLPqjXmyVHtlJ7dNL6RXjipT9G
47MOXVme0n0I5N2Ykvglb2dbdeL5bzIru0NG+N5Sj51oRYWfqi5NZ3nHccooOUrX
tzlnRHM+LpDoVA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:58:26 2026 by rpki-client