Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: AKNYMreqY2MAWgGYAx0b9jYiIyIuRenrEo8si+JFvPs=
Subject key identifier: 46:94:C6:6C:62:45:D8:A8:DA:FA:25:7B:1A:32:35:FA:D0:65:70:2F
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 01A0BFC3A13713DFB4727799CD4AD7DAD14D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 1148
Signing time: Sun 20 Sep 2026 17:01:04 +0000
Manifest this update: Sun 20 Sep 2026 17:01:04 +0000
Manifest next update: Mon 21 Sep 2026 17:01:04 +0000
Files and hashes: 1: AUxe3iOnW0R9FRzl8aepQlk_j-s.roa (hash: F/5QY2qH/5oxR7eNEMu85fTdScF+CggMDUwObVNbh98=)
2: XwZeP_FjPRrGyxH7if_auVWhw38.roa (hash: 4bEVXi89j8g7Wnq/i2v5YpIAVxtMtfePuFt8ghONBAw=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: LiuxSU/AlF8NzMLyEuLcFRJBj7c/64B1k3OKdQ7RFKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:c3:a1:37:13:df:b4:72:77:99:cd:4a:d7:da:d1:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Sep 20 17:01:04 2026 GMT
Not After : Sep 21 17:01:04 2026 GMT
Subject: CN=4694c66c6245d8a8dafa257b1a3235fad065702f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:bd:6a:1b:8a:6d:7d:d0:0c:bc:8c:28:b9:94:
fa:56:5a:af:ca:aa:ff:4c:1a:5c:5c:55:a6:7a:c7:
ec:56:96:87:80:09:0c:79:b3:fd:b7:9a:3c:d6:0f:
56:ae:f0:05:1e:76:d8:08:e1:1e:7d:2e:99:aa:d3:
02:f5:3e:22:1a:e1:ec:52:7d:04:9d:82:5d:dd:0c:
8a:8e:eb:3b:78:dc:e8:a8:e5:d4:df:94:75:66:e2:
06:23:b7:f9:c0:b9:d9:ca:d3:7f:42:c0:fb:3f:d1:
f6:21:c2:b5:61:df:7b:9c:37:e0:54:3c:22:ce:cc:
d6:82:f1:90:71:dd:70:00:12:6c:5a:c3:42:b1:a4:
12:94:6f:82:13:29:e7:c3:3f:08:18:d1:8f:ff:06:
a3:72:2b:64:3e:5d:f3:3d:b9:16:1e:fd:7d:19:77:
47:d1:91:fc:ba:21:c1:ac:87:42:ab:b3:db:9b:3b:
0d:10:d1:d6:10:96:d3:9e:78:13:0a:f8:85:26:cb:
b4:e2:e1:b0:0d:f4:24:4d:11:35:1f:b4:d8:ef:5a:
56:79:6d:ad:2d:44:94:7b:0f:c4:29:c6:dc:5e:c0:
3d:3f:89:cb:8b:d2:77:f0:30:2e:7e:bd:88:40:b8:
fb:35:dd:45:8d:9f:d7:98:de:63:57:76:76:84:99:
e5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:94:C6:6C:62:45:D8:A8:DA:FA:25:7B:1A:32:35:FA:D0:65:70:2F
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6e:ed:15:d0:c5:f8:d8:c9:0c:cb:8e:60:6a:ff:14:2e:26:
e7:2e:ba:13:7b:5c:00:af:d6:0a:e8:35:9e:75:e6:74:c6:c8:
35:a5:f2:17:23:cf:24:b6:b8:3a:02:31:92:55:68:f4:c4:68:
a2:3a:56:a8:e7:e4:5a:ad:07:35:f0:79:b8:27:41:0a:47:06:
5a:6b:e7:e6:b0:6b:b7:91:e6:92:91:db:b0:df:a7:f7:ae:69:
f4:45:45:29:a8:f1:11:8d:9c:cb:46:f9:b1:4b:57:a6:5a:9c:
00:33:33:10:aa:4e:54:bc:81:68:0f:29:15:1d:9e:28:77:38:
7f:82:ff:66:1a:d1:5f:6b:4d:fc:39:e2:b5:db:7c:64:3c:9b:
e5:c6:63:26:e8:43:03:6f:6f:66:35:91:6c:53:41:9b:45:07:
00:f1:d9:80:ec:aa:f6:7f:4b:27:4b:ec:f2:79:13:3f:43:8c:
5d:98:64:99:99:30:11:a5:b7:30:f0:32:0e:4f:e8:6a:46:78:
73:f5:13:c4:7f:a6:6c:67:38:bd:48:8d:0a:5d:5f:7c:43:4d:
19:10:f2:6c:7f:ca:3d:ab:aa:83:4d:00:34:73:4e:61:f8:06:
5c:91:01:de:90:54:fc:e9:79:28:fd:c6:fb:b2:7f:30:03:13:
91:03:06:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 20:02:54 2026 by rpki-client