Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
File: ks_7H6VV_DWhSvymELOBBf1cZFw.mft (raw, json)
Hash identifier: HJaYj7Za9BD8rfSdBiYLbgtCGcIFNdKgkRSLqqTVjzU=
Subject key identifier: 71:48:73:04:13:0A:6A:26:7F:01:37:25:16:49:53:1E:CA:9C:26:EF
Authority key identifier: 92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
Certificate issuer: /CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Certificate serial: 019DA29C60A2B59B1941FD0F107C7B079A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
Manifest number: 10C3
Signing time: Sat 18 Apr 2026 22:00:50 +0000
Manifest this update: Sat 18 Apr 2026 22:00:50 +0000
Manifest next update: Sun 19 Apr 2026 22:00:50 +0000
Files and hashes: 1: ks_7H6VV_DWhSvymELOBBf1cZFw.crl (hash: fkyN2Xlfloep+An023cR3ArtY09qRjCapFhDfFQUJNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:60:a2:b5:9b:19:41:fd:0f:10:7c:7b:07:9a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Validity
Not Before: Apr 18 22:00:50 2026 GMT
Not After : Apr 19 22:00:50 2026 GMT
Subject: CN=71487304130a6a267f0137251649531eca9c26ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:35:1f:71:c4:c1:13:67:cf:a4:28:dd:01:83:
5f:de:a2:64:e3:ca:03:35:24:c1:53:b0:29:c6:8f:
46:c6:f4:96:04:11:86:62:ad:0d:3f:46:06:e8:66:
c6:e5:06:ba:3b:f4:ff:30:ae:07:57:5e:64:9e:89:
14:cb:13:30:26:0e:f2:8c:cd:a2:2c:90:9f:f4:38:
09:a6:79:d4:1f:98:e6:2b:3c:ed:06:de:59:2f:03:
2c:01:19:f2:89:d3:79:cf:c6:b0:36:78:2d:f6:a2:
0e:ab:bc:d9:38:0b:e5:6b:4c:77:69:40:2f:0c:a0:
15:96:8a:ad:03:04:89:90:33:e9:4a:b2:a7:fa:41:
70:30:c7:53:d7:db:9a:a1:b8:26:94:70:48:f7:ee:
68:b2:70:e4:fa:3c:c7:9e:cd:ec:e3:63:40:e3:64:
82:5a:18:98:b7:23:4b:3b:23:ae:e0:9b:26:33:8a:
d1:73:93:80:09:9d:c5:e7:f9:24:a1:6b:b6:c7:e1:
4a:92:a0:8c:1d:e0:71:50:c9:f6:9c:3f:8e:7c:38:
e5:fe:93:84:07:2e:d5:b6:4e:47:d4:f1:3f:ce:b8:
09:ae:07:7a:bb:83:b2:84:3b:42:53:f2:d9:f6:e3:
e2:6a:9d:fe:65:f0:c7:01:f9:0b:39:29:a1:c5:91:
89:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:48:73:04:13:0A:6A:26:7F:01:37:25:16:49:53:1E:CA:9C:26:EF
X509v3 Authority Key Identifier:
keyid:92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:9c:3b:56:23:5d:db:fe:45:43:0a:2c:08:41:15:54:56:c5:
0d:5c:ba:0d:32:4a:26:19:07:9a:f2:41:7f:c0:fb:67:f9:e5:
88:8a:41:9e:d6:60:5b:73:f1:48:f9:93:00:73:00:62:ee:7e:
10:67:d8:a9:01:53:67:6a:33:8b:7e:2d:ae:86:d5:86:38:29:
b1:c3:73:54:3b:57:58:ca:d2:73:db:77:b1:bb:d3:a7:a2:26:
a1:ba:2f:3c:bc:68:56:2b:9c:77:de:fe:d1:ba:64:25:af:64:
46:58:9d:11:68:e6:96:7b:71:1d:f8:8d:af:84:7d:de:c2:07:
8c:d0:2b:0d:cc:00:df:74:1c:94:08:fe:2e:09:f3:1c:f0:7c:
ae:b6:f5:46:3f:a5:35:91:72:b3:7b:6e:f9:37:7f:3c:56:5b:
06:32:9a:cd:62:f5:16:1f:2c:44:6e:b4:75:02:15:01:1b:e5:
17:b3:37:34:8a:85:f0:d7:4b:b0:56:a0:b5:59:09:71:35:a2:
ba:54:50:66:e5:7a:d6:e9:ff:d2:3b:c2:3e:a9:79:c2:a7:f0:
45:77:82:46:6f:2f:54:c8:77:c4:f8:d9:a8:53:ec:bb:3d:46:
91:c6:1c:c0:e5:b4:f1:85:4c:13:5d:fb:c0:21:f3:c9:7c:5a:
5a:83:4c:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:32 2026 by rpki-client