Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
File: k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft (raw, json)
Hash identifier: AkRb0P7EOmYzN1rfaWCpKSmGsef4oJsaaoW0ckNktAw=
Subject key identifier: 03:B9:86:D1:75:D9:5A:61:50:6C:3D:43:D1:1A:01:5C:6F:D6:A6:A3
Authority key identifier: 93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
Certificate issuer: /CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Certificate serial: 019D98BDBAA9A4721B6A36FD28DAC41DE722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 00:01:04 +0000
Manifest this update: Fri 17 Apr 2026 00:01:04 +0000
Manifest next update: Sat 18 Apr 2026 00:01:04 +0000
Files and hashes: 1: KLcO-4pnwNwQ0ENsv05vSQ934W8.roa (hash: FYOxX+97VqHTmC9VAss+Ib9pIE+EbJuTdglUDu9UfW0=)
2: dA8NWdyS0f06Erm6RVd9DfssKjU.roa (hash: IZmapnDLq3R54YRETdfjg+rEgpwO069ZWxHLiaQ38d0=)
3: k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl (hash: YDn/9o6/WwBApd69EAap8Tf2Jc2cclyCLH0evqQs7x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:ba:a9:a4:72:1b:6a:36:fd:28:da:c4:1d:e7:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b2981978885696ce1c2bbf4af99dadc2c618eb
Validity
Not Before: Apr 17 00:01:04 2026 GMT
Not After : Apr 18 00:01:04 2026 GMT
Subject: CN=03b986d175d95a61506c3d43d11a015c6fd6a6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:7b:70:35:0c:c4:8b:54:d5:3e:4f:db:e1:6c:
89:02:42:08:ea:6e:51:07:71:91:35:7c:77:fa:59:
62:41:92:ea:31:21:be:33:83:54:d3:e7:88:51:bd:
5b:30:ad:a7:d9:db:94:8d:69:13:22:c1:96:81:ca:
5a:a5:8f:08:fb:08:86:f8:99:8f:2b:57:5d:b1:b8:
41:97:5b:79:99:76:af:2b:eb:17:9e:3e:ec:84:56:
1a:a6:77:9d:db:c9:79:10:ce:61:b6:3a:5b:c7:b1:
a5:54:83:1a:b4:bc:68:7b:c8:e4:48:77:cc:ce:81:
e8:d5:22:ae:93:72:39:af:55:fc:27:8b:d5:1a:6a:
7c:1a:51:e0:9a:c6:04:df:30:b2:42:9e:fc:96:52:
b1:67:29:f4:dd:79:9c:ee:d5:df:e0:fd:c8:72:43:
29:12:2f:6d:e3:59:55:a7:75:dd:8a:57:8e:4a:69:
02:3d:64:c0:94:7b:ab:25:56:7d:bd:a8:35:09:33:
75:80:f3:30:f2:45:94:3f:c7:d2:47:9a:b3:13:d5:
52:69:b9:6c:89:9d:3c:35:87:22:e5:4b:91:31:12:
eb:ec:ec:07:91:04:bb:eb:13:c7:43:14:ca:f5:b3:
c7:34:ce:0e:c1:f7:05:b3:ff:83:42:ac:ed:89:b8:
90:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:B9:86:D1:75:D9:5A:61:50:6C:3D:43:D1:1A:01:5C:6F:D6:A6:A3
X509v3 Authority Key Identifier:
keyid:93:B2:98:19:78:88:56:96:CE:1C:2B:BF:4A:F9:9D:AD:C2:C6:18:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7KYGXiIVpbOHCu_SvmdrcLGGOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7986a9-4e46-4c33-92c9-31c95e2a1d6f/1/k7KYGXiIVpbOHCu_SvmdrcLGGOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:1c:10:30:bd:18:02:66:60:44:e0:58:22:b4:16:de:6e:46:
23:8f:da:71:7b:62:9a:ed:d2:82:d3:3d:88:7f:4b:d2:78:c5:
4b:e2:16:b6:c4:09:b8:04:28:71:b2:3a:a8:9e:56:30:84:9f:
2f:cc:e5:d2:aa:82:b7:14:0d:6c:b3:2d:e3:7f:7e:a4:f4:76:
06:fe:e2:19:46:73:2b:71:e7:8c:8d:0f:54:7a:2e:07:a6:1b:
be:73:f3:49:0d:6f:0f:91:86:3c:77:20:85:5b:e7:66:79:17:
d3:1f:a0:d5:b5:b1:64:c9:cf:cb:9b:fa:5e:e6:c1:c5:36:07:
75:45:c8:9b:20:5f:ba:42:22:01:bb:ce:81:3d:8c:a1:7a:04:
fa:a0:30:7f:b5:39:9d:27:c8:59:93:80:d2:ee:39:7b:78:75:
e6:c9:2e:e7:e7:65:b3:94:a4:65:02:6a:2f:c5:57:37:3c:75:
96:d5:4b:fa:b8:2e:7d:20:8b:05:aa:57:99:d9:7d:4d:a9:17:
b0:57:93:e5:d3:93:0c:a6:cc:15:f8:4c:bf:22:08:b3:af:77:
8b:9e:90:89:78:22:9d:f4:cc:1a:16:de:16:91:31:48:da:2d:
5d:7f:2c:1d:54:ec:95:da:48:64:43:4c:73:a7:47:e2:72:dc:
93:c3:44:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:56 2026 by rpki-client