Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
File: k7Hqu-XuDASWgOKryVU0OexkPAs.mft (raw, json)
Hash identifier: 0sWwBQKUKeoWJTvzZ3J467PFqNHFRtgfiIsB2inZlmw=
Subject key identifier: FE:49:5F:76:88:BE:3C:2B:22:47:43:3B:0B:37:28:87:B8:44:E7:22
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial: 019DA3E623A1820EA54988AC6BE81E2EC132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
Manifest number: 127A
Signing time: Sun 19 Apr 2026 04:01:01 +0000
Manifest this update: Sun 19 Apr 2026 04:01:01 +0000
Manifest next update: Mon 20 Apr 2026 04:01:01 +0000
Files and hashes: 1: bk8tPJ9EOMV75C2mivaFUdSxCIg.roa (hash: nYMoXp5QMpQVkLvKRSTUqVzpxbW4FhsK/wY7jqg9tKs=)
2: k7Hqu-XuDASWgOKryVU0OexkPAs.crl (hash: vPnMWDh3oHmyTYMDobQBuPy0Zthm3m8fw0HrL94SfvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:23:a1:82:0e:a5:49:88:ac:6b:e8:1e:2e:c1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Validity
Not Before: Apr 19 04:01:01 2026 GMT
Not After : Apr 20 04:01:01 2026 GMT
Subject: CN=fe495f7688be3c2b2247433b0b372887b844e722
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:03:b3:f4:37:66:8b:61:0d:11:af:df:9b:37:
93:0c:7e:46:a8:75:e0:1c:3c:9b:8e:31:aa:54:6b:
e3:53:01:1b:49:43:77:26:5f:4e:1a:af:54:c9:8e:
a6:c0:e4:ef:f7:3a:72:ab:46:bc:cc:4b:7c:1a:82:
ca:4b:0c:84:c2:4e:1b:de:1e:ee:99:f2:1b:c7:51:
c1:12:e9:97:67:fd:ee:a1:e3:22:da:9c:20:b8:2c:
4a:9b:53:39:40:c2:23:22:6b:b9:c0:45:35:a5:6e:
d6:7f:62:af:de:93:81:5e:b6:8b:12:09:0f:4c:ee:
0d:f2:bc:04:cb:f9:fa:da:7e:13:15:80:80:a3:13:
c5:f4:5a:8d:1e:45:37:a2:c1:61:f7:06:0b:82:42:
f4:83:a4:ee:70:0f:79:b3:23:c4:81:6c:07:78:c9:
3f:30:07:ae:01:df:df:24:f8:ee:b8:da:3d:b3:d1:
63:48:a6:13:75:0f:d3:c5:d1:ce:33:c4:5b:02:a7:
9d:c0:c7:b0:ee:68:d5:52:45:ad:5e:07:f3:6b:59:
f0:32:25:b9:6c:54:77:88:e6:3b:5f:f7:1d:61:ef:
38:1c:5c:f0:cb:c4:e4:2c:a2:51:da:d9:2f:d6:77:
64:06:bf:48:e9:e9:93:e7:77:ca:bc:18:e6:e5:ba:
e6:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:49:5F:76:88:BE:3C:2B:22:47:43:3B:0B:37:28:87:B8:44:E7:22
X509v3 Authority Key Identifier:
keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0f:de:d7:89:32:c3:1c:09:a5:09:e9:05:33:19:34:76:e3:
51:3c:44:45:4b:9d:34:91:59:dc:ff:43:f8:04:2d:ff:56:6a:
ee:16:43:90:97:65:b6:35:6f:6d:8e:93:a2:98:f1:a9:17:b8:
07:03:0c:35:57:6e:72:4a:3f:1e:10:cf:f6:81:5c:ff:d5:8e:
7f:a2:1d:ff:58:df:19:41:b1:ec:3d:06:b6:23:1b:41:0c:5c:
3d:40:ab:d6:fb:96:72:89:c2:9a:fe:4d:27:f2:ec:f9:1c:bb:
98:f4:0a:a5:b0:59:7a:a4:f5:97:f0:8c:9a:fb:20:ae:fa:7a:
45:8a:c9:a0:b6:d1:9d:02:c8:99:1a:65:b6:61:c9:73:2e:6b:
50:42:3d:4b:d0:ed:b2:77:bb:f9:90:26:2a:aa:52:d0:fd:1c:
08:3e:3d:be:6f:bc:9d:fd:1d:00:5d:fd:8b:ed:4e:08:36:4d:
dd:ed:42:01:9b:2a:bf:8e:8b:26:9b:4b:48:dd:7d:e9:cf:a9:
bb:27:78:e0:4e:86:75:e4:a6:22:4c:49:2d:0e:ef:dc:36:fd:
2e:61:f3:56:87:02:d2:d8:29:f2:ac:09:ce:f6:e1:c6:a2:12:
b5:57:da:cf:9a:55:40:ad:cd:bd:e4:20:30:95:ad:98:56:1e:
61:4f:52:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:21:51 2026 by rpki-client