Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
File: k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft (raw, json)
Hash identifier: R4hcXNXmJw1fE3nHNJiQeZzst/wT3oUX4qskxE1gVEY=
Subject key identifier: 62:E3:18:09:3B:CC:B3:06:D8:15:E9:58:58:D8:63:DA:C8:FF:C5:2C
Authority key identifier: 93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
Certificate issuer: /CN=93501077db80d52b16d49f863a61ea41a124bc59
Certificate serial: 019FAAF620BDC41EB3BA7DD3FDD279DD9E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
Manifest number: 08E5
Signing time: Tue 28 Jul 2026 23:01:24 +0000
Manifest this update: Tue 28 Jul 2026 23:01:24 +0000
Manifest next update: Wed 29 Jul 2026 23:01:24 +0000
Files and hashes: 1: S_Jp9m9blIUps0OicsJ0YR9eOvE.roa (hash: Be16CYxyexdW5EkOG7OmNRTbUwOGD3q//e7OhhleAMQ=)
2: k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl (hash: Iny6Ub5JiSKWdvGZtC6I49TlSpvNmiJNWNA2tFUctt0=)
3: yIOWYvs8zmXxlBajX3odsYxOM8Y.roa (hash: d8ux5xGWiDuWJb9M/rhcfhWw34lH4Et949GrjMpaIAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f6:20:bd:c4:1e:b3:ba:7d:d3:fd:d2:79:dd:9e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93501077db80d52b16d49f863a61ea41a124bc59
Validity
Not Before: Jul 28 23:01:24 2026 GMT
Not After : Jul 29 23:01:24 2026 GMT
Subject: CN=62e318093bccb306d815e95858d863dac8ffc52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:32:d7:bc:96:40:ad:15:93:39:e5:a0:30:7e:
9a:80:e6:76:64:f9:e7:51:88:15:32:29:34:2a:da:
46:67:87:4c:d0:e2:19:07:38:03:d5:14:30:4a:6f:
44:62:e0:87:58:58:b4:cc:fb:47:ef:f3:b4:5a:ec:
4b:7a:ec:d9:76:7a:97:ef:b6:92:8e:48:a9:10:ec:
9d:bb:38:28:4b:a5:79:8c:b8:0d:62:b4:3d:70:34:
bc:83:46:32:15:2e:2f:2f:79:c1:26:8d:25:a1:8b:
e5:02:6d:c1:8d:16:98:c8:de:c0:73:cf:56:e8:40:
d9:84:02:b3:93:26:fd:67:68:f3:11:b2:0b:05:d4:
9a:e2:fa:6c:0c:32:67:07:55:10:48:12:1d:8c:4c:
ba:59:b0:1a:e0:dc:2c:57:99:91:83:e2:30:68:96:
b8:c4:1e:16:9a:88:ca:17:b3:68:b0:58:b0:8c:b5:
22:35:f0:73:29:1c:2e:04:4b:50:ab:f3:11:a6:38:
7c:2a:77:34:7f:6f:8a:d1:98:30:ac:2a:a4:4a:cd:
56:fb:05:31:69:00:e7:08:26:c9:3a:2a:d2:c9:93:
e3:74:13:1d:cc:6c:0a:2d:e4:09:28:03:42:91:7c:
dc:b0:e8:54:8d:53:53:5b:ba:60:49:fe:d9:a1:18:
46:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E3:18:09:3B:CC:B3:06:D8:15:E9:58:58:D8:63:DA:C8:FF:C5:2C
X509v3 Authority Key Identifier:
keyid:93:50:10:77:DB:80:D5:2B:16:D4:9F:86:3A:61:EA:41:A1:24:BC:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k1AQd9uA1SsW1J-GOmHqQaEkvFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/d0bcf3-4b21-4161-b82e-79d1a27cd993/1/k1AQd9uA1SsW1J-GOmHqQaEkvFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d6:6d:a2:5c:37:6a:62:e4:15:db:89:76:8e:8c:bd:a8:38:
78:01:1f:06:ec:01:ec:71:da:79:15:f9:ba:0d:50:99:93:25:
02:ba:df:13:99:45:70:66:d5:a7:c9:3e:d4:4d:dc:c0:d2:e2:
81:3d:2b:05:69:e7:58:d1:8b:19:8f:ff:d7:b6:04:9a:da:22:
f6:0e:da:62:5f:44:cd:14:ea:d3:b5:90:15:90:66:e1:cb:e6:
46:b5:2e:f6:4d:60:1e:e2:96:61:d1:cc:93:65:9a:e2:6b:28:
27:bc:3a:57:f4:b1:db:d1:9f:da:14:ef:52:01:08:12:29:6b:
92:f3:d0:b6:4d:b6:e6:83:3a:64:e5:d5:fd:36:7b:5b:99:46:
a5:aa:aa:0a:13:3f:26:68:eb:fa:fd:a4:2d:45:6c:dd:b1:6b:
48:3e:35:4e:c6:e2:67:56:ac:87:68:6f:96:c1:2b:65:84:2c:
36:fe:1e:bf:7e:72:1d:2d:e6:12:7e:66:29:32:5e:6f:5c:7c:
00:8f:50:56:37:6f:3c:b9:4a:4c:20:08:c8:76:b0:c3:c7:a9:
c1:fa:ce:c1:64:e5:81:06:59:32:9f:22:26:14:30:d5:57:d8:
e8:2e:a1:f1:b1:10:fb:32:ee:f4:56:28:22:58:12:68:8f:3c:
3a:18:bd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:12:17 2026 by rpki-client