Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: Z7XIXFM3crqae+yNW4U2mMoMvkAGtyZywLzM7gAHBj8=
Subject key identifier: 2F:7B:4F:90:07:DD:37:D2:67:3D:E3:D3:84:74:95:13:F4:03:61:83
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 019CAAFD3F2F13422D8667A6B24D1010492C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 0F2B
Signing time: Sun 01 Mar 2026 20:00:49 +0000
Manifest this update: Sun 01 Mar 2026 20:00:49 +0000
Manifest next update: Mon 02 Mar 2026 20:00:49 +0000
Files and hashes: 1: AUxe3iOnW0R9FRzl8aepQlk_j-s.roa (hash: F/5QY2qH/5oxR7eNEMu85fTdScF+CggMDUwObVNbh98=)
2: XwZeP_FjPRrGyxH7if_auVWhw38.roa (hash: 4bEVXi89j8g7Wnq/i2v5YpIAVxtMtfePuFt8ghONBAw=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: A9ySY+vm5JYdmgInTiftyXlex7MT+6gRrAaSw5fndgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:3f:2f:13:42:2d:86:67:a6:b2:4d:10:10:49:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Mar 1 20:00:49 2026 GMT
Not After : Mar 2 20:00:49 2026 GMT
Subject: CN=2f7b4f9007dd37d2673de3d384749513f4036183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:aa:9b:07:d7:84:13:30:4e:4e:a7:55:c3:3d:
82:ca:a3:2b:71:e3:0a:67:29:78:51:60:9e:9b:6f:
7d:e3:cc:4b:84:63:3e:6d:9d:74:d1:d9:5f:5c:e1:
4a:7a:41:21:34:8f:00:42:95:6a:c3:03:ba:fd:5a:
83:03:db:f2:f0:53:51:e7:1b:02:6e:0e:ea:34:92:
a6:b2:84:56:88:8f:a7:0d:7a:75:5a:f9:a7:45:72:
58:c0:0e:d7:ff:d3:c3:4c:06:3b:1e:70:4c:d4:d8:
3e:c3:26:39:49:e6:61:0d:06:bd:70:26:ef:d1:92:
d9:db:51:bb:90:ef:bf:bb:87:ad:65:97:2b:b1:aa:
41:f1:de:50:d9:d4:56:5a:aa:ec:b2:b8:2f:01:5c:
a0:97:16:09:3f:1a:96:23:d3:63:3e:b6:bd:51:2a:
19:b0:8c:01:3a:bb:73:b0:e1:9f:30:f3:a6:6c:9b:
d0:33:a6:28:7f:9d:7b:1f:30:21:fe:4c:c5:29:41:
93:46:7e:d5:c8:c6:db:6a:b0:1f:63:50:37:6e:b8:
55:60:03:eb:61:1c:94:b7:42:d8:69:79:9d:25:6b:
c8:0f:e1:33:88:fb:20:72:35:13:f1:62:3d:9d:37:
bf:2c:d1:7b:aa:39:22:da:2d:bf:9b:a8:f7:6b:1c:
d8:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:7B:4F:90:07:DD:37:D2:67:3D:E3:D3:84:74:95:13:F4:03:61:83
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:16:73:7a:dc:8a:31:be:16:5f:e6:0a:43:57:2d:bd:c2:dd:
25:00:af:f7:3b:93:69:2c:bf:0c:29:d1:21:31:f5:e7:dc:13:
db:db:46:46:f8:b3:c9:22:58:9e:de:c8:f7:44:a7:73:d0:20:
0c:38:03:03:cc:43:78:aa:3c:29:81:f8:f5:a1:89:38:c3:a8:
49:bc:b6:d2:7f:7f:14:20:ac:76:57:02:cb:64:1c:2e:3a:ab:
19:58:2d:dc:35:72:7d:61:cc:8c:61:da:e4:3b:b2:25:2d:35:
4e:98:d6:ac:54:29:8a:b1:37:c7:8a:ab:e8:72:f1:12:2d:c2:
92:34:be:00:d3:a9:3a:d6:31:a3:c4:6e:f7:e0:27:66:54:3e:
c5:da:3d:a9:8f:40:b2:8f:b0:46:39:9a:b0:9a:03:b6:c7:de:
57:f7:94:1e:5e:0b:78:ac:c4:2d:3a:0b:48:c3:67:6c:10:d5:
66:88:18:01:b6:60:3e:69:bb:2f:85:a0:4f:19:71:62:e2:2e:
54:6b:f6:e5:7b:b6:60:1a:46:cc:b9:6a:ab:9d:5a:b2:4c:20:
8d:4e:a0:0d:ff:1e:35:eb:44:a8:7c:92:22:83:88:57:91:11:
e9:85:f2:da:2d:a6:ba:ba:f7:ee:59:ef:3d:b9:90:d6:1f:f9:
bc:69:03:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:55:22 2026 by rpki-client