Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
File: 7_ktk2igmtNvelft-9CgXZ_UDh0.mft (raw, json)
Hash identifier: ORjv7t9fi6uOeS9OhqomY4f81O3cp0gFtudKhp7CP5E=
Subject key identifier: 59:F1:5D:61:61:CB:FA:72:BB:88:D6:37:7B:F3:83:E6:27:4A:E5:10
Authority key identifier: EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
Certificate issuer: /CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Certificate serial: 01A0C66A9AB1868B8AE2A5DD96AA49F0D672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
Manifest number: 1A68
Signing time: Tue 22 Sep 2026 00:01:09 +0000
Manifest this update: Tue 22 Sep 2026 00:01:09 +0000
Manifest next update: Wed 23 Sep 2026 00:01:09 +0000
Files and hashes: 1: 7_ktk2igmtNvelft-9CgXZ_UDh0.crl (hash: CVPNcLaJVbLdN+DUhcNGvNsvVuqMfSM4ich4YngVQT4=)
2: krZVBDiWkvm4PD1vJnwzxrmFRBs.roa (hash: U9k/zcmCxVKcnCozIhgmcwJH3uFDUp/Q9q36sgU5rBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:9a:b1:86:8b:8a:e2:a5:dd:96:aa:49:f0:d6:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eff92d9368a09ad36f7a57edfbd0a05d9fd40e1d
Validity
Not Before: Sep 22 00:01:09 2026 GMT
Not After : Sep 23 00:01:09 2026 GMT
Subject: CN=59f15d6161cbfa72bb88d6377bf383e6274ae510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e0:2d:3f:10:dd:3b:6d:e9:11:ea:d8:b3:47:
3b:99:9a:90:67:5a:ba:a2:2c:53:e2:d8:d8:3e:bf:
cf:09:c1:9a:40:a6:6f:0f:1a:d7:d3:76:65:e8:ad:
51:d9:02:7a:d5:37:af:70:49:bb:97:0c:8b:65:2f:
ba:1a:50:58:8c:4b:9c:01:eb:2f:2e:ca:a0:31:4f:
21:84:53:4a:7a:d1:6e:bb:26:a8:43:c9:7b:6d:09:
16:74:6d:63:36:44:9d:ec:0a:6e:5b:f2:cc:3b:5f:
98:5a:4c:c6:4e:dc:68:72:96:90:ed:d8:c4:26:da:
21:bc:7d:47:ff:2d:e5:82:be:9f:46:d8:c8:15:f9:
b9:eb:c5:4d:a2:df:42:58:73:7b:57:fb:71:df:08:
eb:85:98:e2:b9:2b:3d:5b:a0:02:df:b0:de:b8:ad:
f3:a2:e7:4d:4a:16:e6:19:0d:f0:1c:77:23:30:a5:
a9:25:1e:c9:7d:de:4d:35:e8:39:95:3e:57:0c:0c:
04:7e:85:0f:a3:eb:ab:97:d5:72:f5:dc:5b:ed:5e:
c4:6b:c8:12:28:7a:21:0d:0c:cd:8a:a5:3b:60:45:
2b:b6:58:8a:bb:e4:1f:85:40:44:e6:65:03:91:e9:
4f:2e:b2:06:51:63:f9:75:15:26:c4:a4:1c:63:69:
7a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:F1:5D:61:61:CB:FA:72:BB:88:D6:37:7B:F3:83:E6:27:4A:E5:10
X509v3 Authority Key Identifier:
keyid:EF:F9:2D:93:68:A0:9A:D3:6F:7A:57:ED:FB:D0:A0:5D:9F:D4:0E:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_ktk2igmtNvelft-9CgXZ_UDh0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/7f7259-53d0-41ae-951d-400417c9717e/1/7_ktk2igmtNvelft-9CgXZ_UDh0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:38:d4:70:da:95:6a:12:41:f0:f7:4b:70:4a:68:68:e4:18:
27:33:b7:56:b7:ca:ec:ea:ba:30:43:1d:ad:93:59:62:06:3e:
2e:fe:14:0a:98:86:7b:0b:8a:c8:91:56:1c:93:ff:7f:0f:6c:
8e:ca:32:8b:cd:9d:2a:be:30:f2:1f:80:34:86:3f:65:78:83:
4e:4e:70:52:84:3e:01:41:aa:83:93:c9:f6:8b:a8:59:0e:b0:
cb:80:7a:61:63:8b:92:00:3b:68:85:b3:57:3e:fc:03:e5:8a:
64:e5:bf:59:e3:e0:86:b8:6d:50:62:b3:f4:26:08:e9:12:1e:
82:13:52:d2:fd:db:b4:2c:34:ab:8c:a4:0f:6e:6d:e6:72:49:
85:e6:1f:cf:e9:7d:85:72:7a:b9:41:8e:fd:e3:0d:d3:96:8a:
86:03:33:6e:e0:bf:23:10:00:70:c7:10:a7:03:d4:72:05:7f:
dd:ea:d1:53:00:5c:49:fa:3f:ad:8c:dc:c3:62:e8:31:ec:48:
b8:53:89:ea:a2:97:e5:1a:3e:a7:84:0d:59:19:e7:7d:2f:e6:
1f:db:56:47:26:73:7f:b2:69:cd:19:f5:b2:ff:7c:24:7f:d1:
d1:ed:64:b9:f8:03:15:25:77:75:8b:c2:73:7d:5b:3e:ea:36:
a8:44:aa:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDGapqxhouK4qXdlqpJ8NZyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmZjkyZDkzNjhhMDlhZDM2ZjdhNTdlZGZiZDBhMDVkOWZk
NDBlMWQwHhcNMjYwOTIyMDAwMTA5WhcNMjYwOTIzMDAwMTA5WjAzMTEwLwYDVQQD
Eyg1OWYxNWQ2MTYxY2JmYTcyYmI4OGQ2Mzc3YmYzODNlNjI3NGFlNTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxuAtPxDdO23pEerYs0c7mZqQZ1q6
oixT4tjYPr/PCcGaQKZvDxrX03Zl6K1R2QJ61TevcEm7lwyLZS+6GlBYjEucAesv
LsqgMU8hhFNKetFuuyaoQ8l7bQkWdG1jNkSd7ApuW/LMO1+YWkzGTtxocpaQ7djE
JtohvH1H/y3lgr6fRtjIFfm568VNot9CWHN7V/tx3wjrhZjiuSs9W6AC37DeuK3z
oudNShbmGQ3wHHcjMKWpJR7Jfd5NNeg5lT5XDAwEfoUPo+url9Vy9dxb7V7Ea8gS
KHohDQzNiqU7YEUrtliKu+QfhUBE5mUDkelPLrIGUWP5dRUmxKQcY2l66wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnxXWFhy/pyu4jWN3vzg+YnSuUQMB8GA1UdIwQY
MBaAFO/5LZNooJrTb3pX7fvQoF2f1A4dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQt
NDAwNDE3Yzk3MTdlLzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi83ZjcyNTktNTNkMC00MWFlLTk1MWQtNDAwNDE3Yzk3MTdl
LzEvN19rdGsyaWdtdE52ZWxmdC05Q2dYWl9VRGgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABTjUcNqV
ahJB8PdLcEpoaOQYJzO3VrfK7Oq6MEMdrZNZYgY+Lv4UCpiGewuKyJFWHJP/fw9s
jsoyi82dKr4w8h+ANIY/ZXiDTk5wUoQ+AUGqg5PJ9ouoWQ6wy4B6YWOLkgA7aIWz
Vz78A+WKZOW/WePghrhtUGKz9CYI6RIeghNS0v3btCw0q4ykD25t5nJJheYfz+l9
hXJ6uUGO/eMN05aKhgMzbuC/IxAAcMcQpwPUcgV/3erRUwBcSfo/rYzcw2LoMexI
uFOJ6qKX5Ro+p4QNWRnnfS/mH9tWRyZzf7JpzRn1sv98JH/R0e1kufgDFSV3dYvC
c31bPuo2qESqFQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:41:29 2026 by rpki-client