Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
File: ksWu7-nRJuw2Et_ywIITVLFbu6g.mft (raw, json)
Hash identifier: VYU4VXcIj1sVO5N80cVkvQ0y5G/47evCYarGdLfjX+g=
Subject key identifier: D0:8F:54:C9:AF:6C:9D:56:F2:4F:43:DE:67:24:F7:46:78:F3:49:BA
Authority key identifier: 92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
Certificate issuer: /CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Certificate serial: 019FA97523D708CCF2C43FE9BC1E8C146DB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
Manifest number: 06A7
Signing time: Tue 28 Jul 2026 16:00:54 +0000
Manifest this update: Tue 28 Jul 2026 16:00:54 +0000
Manifest next update: Wed 29 Jul 2026 16:00:54 +0000
Files and hashes: 1: 3mjwWXgkTmZynhO0MwwYYfeUgYQ.roa (hash: LoggYH1kpzYGA8Tu1WeRvVr5FGcv4gtJiNCI/Z5f+Ho=)
2: ksWu7-nRJuw2Et_ywIITVLFbu6g.crl (hash: 13vq0tBS3ynOcVAMIo/SmgJ+YECZlTCl4OYsi3J8a3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:23:d7:08:cc:f2:c4:3f:e9:bc:1e:8c:14:6d:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92c5aeefe9d126ec3612dff2c0821354b15bbba8
Validity
Not Before: Jul 28 16:00:54 2026 GMT
Not After : Jul 29 16:00:54 2026 GMT
Subject: CN=d08f54c9af6c9d56f24f43de6724f74678f349ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:55:f2:3e:7e:d1:8b:02:fe:b0:b1:5e:9b:
ce:f0:df:7b:24:d4:b1:7f:34:c5:f5:14:f1:1b:ed:
6d:2b:ab:0a:dc:0c:8d:6a:90:1e:2f:b4:5b:23:a8:
d8:9f:c1:df:8c:97:ac:04:75:ea:6e:39:aa:4b:29:
72:8c:b9:0b:ac:29:65:28:2b:cb:54:35:62:e6:68:
bb:dc:63:22:27:a0:7b:ad:3c:be:89:cf:23:f2:4c:
a1:a3:3f:41:63:ad:b2:21:3e:7c:bf:be:9e:55:e1:
2d:d4:f0:07:64:e3:c1:3e:3a:ed:86:49:55:51:36:
2a:9e:97:87:42:df:c9:4c:75:85:f3:f3:b0:68:8a:
45:b4:f4:4f:43:3d:3d:34:c8:1e:8c:61:25:a3:b1:
29:7a:f0:10:73:4e:0d:7a:4a:0a:20:99:bc:d9:35:
31:bd:b6:34:94:c2:ec:36:11:6e:a4:fb:0d:6d:f7:
21:17:2b:f1:69:74:4b:68:d5:cc:e3:d1:bf:45:5a:
bb:7b:e2:9e:f7:eb:9f:a9:f0:04:77:95:5c:07:09:
bb:f9:12:d8:cb:13:9f:4b:07:18:17:a9:f8:b7:59:
02:fb:46:be:e2:f9:da:21:c0:93:10:da:ef:bf:ad:
b5:f4:12:59:bf:8d:f8:6c:09:3b:f9:d5:8d:b8:2a:
44:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8F:54:C9:AF:6C:9D:56:F2:4F:43:DE:67:24:F7:46:78:F3:49:BA
X509v3 Authority Key Identifier:
keyid:92:C5:AE:EF:E9:D1:26:EC:36:12:DF:F2:C0:82:13:54:B1:5B:BB:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ksWu7-nRJuw2Et_ywIITVLFbu6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/8c49d1-9015-4e3a-85ac-49f4f789135b/1/ksWu7-nRJuw2Et_ywIITVLFbu6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:8a:1f:28:b5:f9:f1:4b:e5:49:74:fa:0a:22:95:8c:a2:68:
59:e9:7a:bf:34:8b:90:9d:d3:0c:70:bf:61:17:a5:3d:5a:34:
ff:8f:93:09:f3:cf:12:dd:b6:7e:4b:ba:ec:aa:77:be:e9:30:
e6:2c:b4:cd:3e:3a:71:12:5a:fd:b0:73:e1:68:de:cf:c8:e2:
69:4a:b0:f4:05:6c:a0:00:32:98:a6:f2:56:36:36:84:c1:3f:
b3:e9:80:df:9a:10:19:25:52:d2:3d:8c:fa:f7:a2:77:ae:5a:
be:82:d5:71:6d:4a:1e:cf:2b:cb:c8:02:dc:41:34:d4:da:1c:
be:4e:1b:90:bb:00:d8:11:e0:b4:95:74:01:21:a8:97:b8:bf:
12:e2:43:50:32:81:68:6a:56:34:3a:12:28:ce:45:82:51:5c:
48:43:5b:50:f5:c3:61:6f:04:6e:20:87:2f:d8:6f:35:55:6e:
82:54:5d:45:bd:f3:4d:fd:ba:4e:9a:a3:21:1d:c3:cc:52:dd:
b3:6b:e4:ef:fa:63:67:f7:a0:d5:70:e9:63:a4:e5:25:9e:55:
d4:b0:77:2f:d6:27:f7:fc:68:d6:0e:58:56:1e:26:e4:da:ff:
45:bf:ad:bd:90:20:a1:96:01:b1:5c:f4:74:3f:07:8d:84:45:
2a:22:d8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:09:43 2026 by rpki-client