Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
File: k7Hqu-XuDASWgOKryVU0OexkPAs.mft (raw, json)
Hash identifier: WpkGaGVlPMzZVKX/i2CZJLM8qoA3MNXvohpp1G2OjcM=
Subject key identifier: A5:10:05:3C:03:34:EE:D4:20:0B:81:08:F5:B0:5C:1D:2A:BD:D0:C4
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial: 019CACB4BC68BFADEA1628ACA2041E2DC1F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
Manifest number: 11FA
Signing time: Mon 02 Mar 2026 04:00:51 +0000
Manifest this update: Mon 02 Mar 2026 04:00:51 +0000
Manifest next update: Tue 03 Mar 2026 04:00:51 +0000
Files and hashes: 1: bk8tPJ9EOMV75C2mivaFUdSxCIg.roa (hash: nYMoXp5QMpQVkLvKRSTUqVzpxbW4FhsK/wY7jqg9tKs=)
2: k7Hqu-XuDASWgOKryVU0OexkPAs.crl (hash: xvua3pkOSmFTRuqYMM9o6zRcHnfKYVaKl6PGrOfdnfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:bc:68:bf:ad:ea:16:28:ac:a2:04:1e:2d:c1:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Validity
Not Before: Mar 2 04:00:51 2026 GMT
Not After : Mar 3 04:00:51 2026 GMT
Subject: CN=a510053c0334eed4200b8108f5b05c1d2abdd0c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:6e:bc:25:6d:7a:53:7c:4e:98:9a:b8:9b:61:
d3:59:77:47:38:c5:84:56:e3:3d:e5:78:09:f6:9c:
a5:99:35:f6:54:47:3b:39:bd:a6:05:0e:d6:43:8e:
0d:02:37:45:27:21:9e:c7:9b:25:74:89:72:86:c0:
b8:b1:18:06:e3:5a:be:6d:e3:c2:83:63:5f:75:57:
17:1f:07:66:9b:29:65:e3:fa:56:c4:11:9e:69:8f:
05:f2:f0:df:75:46:22:70:eb:d4:59:66:11:05:e9:
1d:89:7a:21:e9:89:56:4e:8f:1f:3d:2c:9f:17:1e:
1d:79:22:19:fd:9a:6c:a4:62:2e:4e:7a:db:3d:72:
72:cd:25:ee:ac:92:2c:33:d3:be:05:55:4d:e0:f6:
1a:10:70:ca:86:17:21:1b:f2:2f:4e:e5:d3:e0:fd:
02:f6:1d:1e:fa:68:27:b9:29:c2:3e:42:9a:78:e5:
56:7a:cd:de:37:b7:b6:1c:ac:84:06:ea:78:88:be:
96:9b:21:c9:28:a6:4c:36:69:bb:33:08:30:af:43:
43:89:55:f1:7a:e5:bb:d9:f8:be:f9:e5:c8:6d:de:
20:07:1f:f2:34:10:f0:cc:16:e6:f5:5f:6c:87:6d:
94:71:3f:9e:e1:96:8f:9e:60:c8:af:e1:e7:07:08:
18:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:10:05:3C:03:34:EE:D4:20:0B:81:08:F5:B0:5C:1D:2A:BD:D0:C4
X509v3 Authority Key Identifier:
keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:f6:8a:6a:68:23:a5:24:8e:a4:0d:4d:e0:65:67:6c:9e:14:
22:14:f5:30:05:a4:0c:6b:32:3c:83:8c:77:8d:69:e1:54:e3:
1d:a4:f4:b6:ee:69:5d:58:4d:5b:55:f0:b4:db:00:f7:59:ee:
34:46:a7:f4:c8:14:70:6e:57:de:80:0a:35:1d:70:22:e7:80:
6f:71:9f:63:2f:47:69:d9:fc:ec:3c:e2:dc:5e:40:d0:2f:87:
ed:8a:46:66:c2:1e:ee:52:50:15:76:d0:cf:b3:61:f5:e6:5b:
55:f0:19:bc:5c:17:cc:df:a3:f8:7f:a7:f4:5e:07:aa:ad:ba:
42:05:7d:1c:07:10:ed:d8:bb:1a:0e:a9:c1:ed:45:f8:2e:6f:
5f:42:90:9f:e1:0c:04:c7:4b:53:ce:0d:02:a3:48:fc:3a:b4:
da:5a:61:d7:35:5f:cc:85:0e:68:c2:b9:ff:ff:e1:ce:9f:52:
06:9f:02:af:e4:96:c4:01:be:86:f4:35:95:2f:39:d4:42:af:
f9:4a:16:52:35:e8:ea:07:9d:68:05:69:e5:c2:d0:47:34:64:
b4:53:a0:d6:04:53:2a:cb:e3:45:f2:94:13:d2:d5:f1:bf:7c:
b9:eb:ed:1c:3f:7b:0a:c8:bc:e3:c8:df:e7:01:c7:82:de:a9:
51:62:2f:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:26:22 2026 by rpki-client