Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
File: k7Hqu-XuDASWgOKryVU0OexkPAs.mft (raw, json)
Hash identifier: R5ZDb4TauDpOwGYND+KxZAVFTgtb8y7TIbjQGuX/DQo=
Subject key identifier: C5:3F:E4:C0:35:A3:82:C8:03:43:6C:CF:6A:1E:E8:00:BA:50:65:55
Authority key identifier: 93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
Certificate issuer: /CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Certificate serial: 019FAB635CEE4EED17E1BECF61F5409714BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
Manifest number: 1387
Signing time: Wed 29 Jul 2026 01:00:43 +0000
Manifest this update: Wed 29 Jul 2026 01:00:43 +0000
Manifest next update: Thu 30 Jul 2026 01:00:43 +0000
Files and hashes: 1: bk8tPJ9EOMV75C2mivaFUdSxCIg.roa (hash: nYMoXp5QMpQVkLvKRSTUqVzpxbW4FhsK/wY7jqg9tKs=)
2: k7Hqu-XuDASWgOKryVU0OexkPAs.crl (hash: EmpSk419q2c9KwUFT/p5zWDx3gQO4sXNQhxzOQ1JUy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 01:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:5c:ee:4e:ed:17:e1:be:cf:61:f5:40:97:14:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b1eabbe5ee0c049680e2abc9553439ec643c0b
Validity
Not Before: Jul 29 01:00:43 2026 GMT
Not After : Jul 30 01:00:43 2026 GMT
Subject: CN=c53fe4c035a382c803436ccf6a1ee800ba506555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e6:f8:ed:84:66:38:86:66:a5:17:33:56:19:
ff:f2:8e:fe:c7:3c:47:f7:85:43:19:1a:2b:9a:1d:
e1:77:fc:06:6f:d7:ae:57:8b:82:68:58:49:aa:f9:
4c:1c:ce:79:65:2f:28:dc:6a:21:b8:e7:8e:1e:2f:
8b:8b:8d:ed:29:52:d3:81:71:5b:ac:ea:32:99:76:
0f:1c:56:37:3f:73:ba:47:08:60:40:4e:22:87:cf:
93:f2:3a:0a:6b:3a:a2:6a:57:88:b3:55:56:25:02:
8a:f7:7d:a5:27:3e:a5:f4:f0:52:4c:64:9e:b8:ac:
82:73:48:21:a7:ec:c1:84:53:7b:80:85:44:4a:9a:
cf:6c:73:43:65:22:68:e6:25:11:52:db:41:6a:ec:
b1:b9:2b:bd:2d:0f:68:2b:b0:e0:1f:1a:a5:46:89:
26:92:39:d2:3b:cf:28:8a:de:22:fb:c3:4e:be:3f:
71:12:55:74:ba:d9:b0:c8:83:1f:9f:a5:b0:31:df:
bd:3e:45:62:33:4f:2b:0c:47:d9:34:b6:d6:75:56:
a2:97:10:f9:ef:e9:56:55:7f:68:f1:86:0c:a5:8e:
a3:4d:07:01:8e:f6:03:c6:44:e8:33:28:ff:b2:3e:
09:2a:9b:06:91:92:6c:55:32:83:57:40:95:96:b9:
56:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:3F:E4:C0:35:A3:82:C8:03:43:6C:CF:6A:1E:E8:00:BA:50:65:55
X509v3 Authority Key Identifier:
keyid:93:B1:EA:BB:E5:EE:0C:04:96:80:E2:AB:C9:55:34:39:EC:64:3C:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7Hqu-XuDASWgOKryVU0OexkPAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/1b512b-2159-4f9c-a0bf-9d28bf5ef3c1/1/k7Hqu-XuDASWgOKryVU0OexkPAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:80:c1:d1:d6:8f:e7:98:18:43:d2:c5:b1:ad:06:7b:26:cd:
3c:63:6f:af:ab:26:f2:db:6a:6c:60:91:9a:c8:86:56:bc:39:
74:be:b8:03:2b:11:6d:9b:84:9f:9c:0b:5c:a3:67:98:44:aa:
f2:6b:af:e7:6b:00:2f:2f:7d:23:c3:0c:7f:76:54:67:80:4e:
9b:c9:c4:8f:25:b6:ae:40:e1:d2:0e:15:9c:bf:06:48:87:f7:
5b:e2:8a:6d:4c:6d:59:65:60:f2:af:ea:b7:e4:31:64:54:8e:
92:da:c3:d9:96:89:52:f1:b7:47:2c:8d:ce:4f:06:f5:a5:27:
af:a4:0e:0e:aa:ae:14:3f:27:71:7b:e0:88:7f:6a:51:dc:60:
73:96:b7:0a:88:96:ee:09:e5:1c:e7:b5:f9:8d:73:8b:29:10:
63:1c:8e:fa:ce:e3:78:8a:3f:14:ea:a6:24:a3:df:33:9d:45:
e8:d2:20:b0:22:f4:15:2c:03:73:42:a3:f4:62:d2:91:b6:bd:
fc:ef:1c:c4:87:be:a3:5a:db:54:fe:62:f0:a5:4f:39:4d:ca:
e7:e8:42:19:e3:54:d6:c7:27:78:1b:e3:59:76:0b:81:da:f2:
0f:9a:3a:8f:cb:8d:31:fd:61:0f:10:7d:67:fd:14:e2:2d:ad:
ca:ce:bb:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:56:32 2026 by rpki-client