Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
File: k7R00FVx3z1E9jzKIbQLbhLDktk.mft (raw, json)
Hash identifier: /p0xIWGcQm4G/ickyLCqtGi5U8SAZjBaAjyljxN1Jps=
Subject key identifier: FD:6C:F4:8C:6E:E7:22:63:9F:95:9B:22:16:8F:63:7F:13:02:D0:98
Authority key identifier: 93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
Certificate issuer: /CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Certificate serial: 019D9A7508EF1501F0DE09B55165ACFD2EF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
Manifest number: 0FA7
Signing time: Fri 17 Apr 2026 08:00:54 +0000
Manifest this update: Fri 17 Apr 2026 08:00:54 +0000
Manifest next update: Sat 18 Apr 2026 08:00:54 +0000
Files and hashes: 1: AUxe3iOnW0R9FRzl8aepQlk_j-s.roa (hash: F/5QY2qH/5oxR7eNEMu85fTdScF+CggMDUwObVNbh98=)
2: XwZeP_FjPRrGyxH7if_auVWhw38.roa (hash: 4bEVXi89j8g7Wnq/i2v5YpIAVxtMtfePuFt8ghONBAw=)
3: k7R00FVx3z1E9jzKIbQLbhLDktk.crl (hash: JvNDmWVed8UbY177Unr5kPE3Jimg2+HeZMJ+v+MzZ9g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:08:ef:15:01:f0:de:09:b5:51:65:ac:fd:2e:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b474d05571df3d44f63cca21b40b6e12c392d9
Validity
Not Before: Apr 17 08:00:54 2026 GMT
Not After : Apr 18 08:00:54 2026 GMT
Subject: CN=fd6cf48c6ee722639f959b22168f637f1302d098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:32:c1:5b:d2:ef:95:9c:db:57:99:f1:cf:05:
d0:96:33:aa:9c:77:10:9b:5a:01:85:8e:8d:5f:0f:
98:68:01:53:36:46:0d:71:7c:8e:0d:b4:11:30:24:
40:1c:21:f3:4c:e4:dd:5c:97:9b:26:ce:05:22:d8:
eb:fd:8b:a5:9c:45:9e:5a:5b:35:f4:79:69:6f:12:
ca:96:8d:fe:85:56:06:b5:74:6e:94:dd:0f:88:18:
a2:31:cb:92:b8:55:d9:52:92:de:f0:d1:b1:0a:04:
86:00:d1:ab:e7:36:cf:ee:7a:c4:2f:dd:70:23:a8:
ef:4a:77:e1:91:2f:55:2b:cd:b0:87:c2:1c:62:7b:
cd:5f:13:ff:41:5e:b0:0a:4d:ee:24:48:c8:78:1d:
91:ea:25:46:26:c2:42:13:72:12:f8:88:46:5d:88:
96:2d:14:7f:ff:b9:37:38:94:3c:91:5d:fa:24:d4:
b9:6a:2a:bf:de:43:e8:88:bb:2f:fe:60:36:7b:ec:
c1:60:3c:1a:a0:9d:3a:43:10:9c:b0:a3:32:93:1f:
f9:f2:12:e3:a5:8c:c0:02:d1:e7:9a:10:58:16:07:
f1:ba:de:cd:87:9c:43:7c:72:2b:2e:9e:79:49:98:
5e:6a:58:2b:85:3f:ce:43:c6:5c:81:6c:bd:73:17:
18:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:6C:F4:8C:6E:E7:22:63:9F:95:9B:22:16:8F:63:7F:13:02:D0:98
X509v3 Authority Key Identifier:
keyid:93:B4:74:D0:55:71:DF:3D:44:F6:3C:CA:21:B4:0B:6E:12:C3:92:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7R00FVx3z1E9jzKIbQLbhLDktk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/8da624-31c5-4509-bc5a-2049f6abfd9d/1/k7R00FVx3z1E9jzKIbQLbhLDktk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:75:24:f3:af:87:a3:56:92:51:30:11:a4:ea:71:e9:de:af:
09:4a:e0:1c:60:f5:9c:ff:ee:9b:ab:3c:47:a5:ad:95:a7:7f:
ce:aa:ba:f6:e4:3e:1c:a2:53:b3:6d:d4:3d:06:94:28:e0:87:
6d:1f:c9:22:fa:71:54:83:0c:c4:b6:53:d8:bd:eb:a4:b8:df:
38:43:1f:3d:b0:35:99:cc:a9:62:e7:a6:27:7a:61:51:ec:a8:
f4:39:3d:fe:c9:b8:e0:81:9a:c3:69:b0:f7:52:99:e4:2d:34:
bb:ba:1c:e0:1f:ed:d5:f4:27:ea:f3:22:23:7e:da:66:84:77:
99:37:7e:6d:4f:97:e9:f5:68:91:80:7f:33:d3:82:9f:1e:57:
99:c1:ba:ae:10:cb:23:10:bd:c8:da:8d:64:44:ce:72:fb:36:
56:b2:e7:4e:6c:61:88:10:a1:ed:57:53:cb:39:01:63:7b:62:
d8:63:b5:62:77:c0:68:fa:56:f4:e7:51:ff:3f:28:a0:f0:5a:
22:77:86:c3:d8:8e:93:ed:d2:bc:4a:c7:ca:bd:a2:3d:1b:86:
86:1e:59:2f:9e:45:ff:96:dc:38:08:01:e9:8d:bb:ce:b0:4f:
77:fd:9f:21:2a:58:69:71:b6:7e:a0:e9:f2:fd:58:79:69:6c:
8a:9b:1c:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:50:50 2026 by rpki-client