
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
File: kar8rbbFKYTjVYnrd1jwUKrO_HY.mft (raw, json)
Hash identifier: xWPpM2+y4SD8jq7dQGKsCxlMoEQx7AEZL+LmkTcbrpQ=
Subject key identifier: C7:77:C9:3C:0C:04:39:4C:9C:4A:74:94:E6:CB:4D:D1:86:57:E8:31
Authority key identifier: 91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
Certificate issuer: /CN=91aafcadb6c52984e35589eb7758f050aacefc76
Certificate serial: 019FAC3F6A6CB27AF96D0FE350BA7E925293
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
Manifest number: 13A7
Signing time: Wed 29 Jul 2026 05:01:04 +0000
Manifest this update: Wed 29 Jul 2026 05:01:04 +0000
Manifest next update: Thu 30 Jul 2026 05:01:04 +0000
Files and hashes: 1: 9JiBhWSFTpZG4uWkY6bZHLtEy8E.roa (hash: xBA6Wqol2nOd0+Q4qs7TkzktF5SaUyh8B1lRNcW7BRY=)
2: kar8rbbFKYTjVYnrd1jwUKrO_HY.crl (hash: wxrtvYb9m4Gs7J/0gV8C/1vUEPIwHaZpmJaySPky2Jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:6a:6c:b2:7a:f9:6d:0f:e3:50:ba:7e:92:52:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91aafcadb6c52984e35589eb7758f050aacefc76
Validity
Not Before: Jul 29 05:01:04 2026 GMT
Not After : Jul 30 05:01:04 2026 GMT
Subject: CN=c777c93c0c04394c9c4a7494e6cb4dd18657e831
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e3:93:fd:ba:03:c1:0a:85:bf:ec:a5:b7:d5:
95:90:ca:c4:b4:ac:55:b1:37:99:e1:65:9f:ce:95:
05:00:da:11:2f:d1:56:93:0c:bd:d8:2f:43:52:91:
2c:47:5e:97:f2:ae:21:a0:c7:22:81:f6:e4:20:f0:
bc:8a:94:c2:e4:10:e2:f3:f7:ed:d2:67:9e:2c:2f:
5b:02:4f:be:43:bf:22:31:15:60:01:0a:c3:92:ef:
96:3c:c5:a2:eb:53:22:53:57:e6:1c:d1:21:6d:a8:
84:45:ed:62:53:61:05:69:76:42:64:2c:86:6c:86:
d2:ef:ad:e3:70:bf:b5:f9:86:4b:96:d3:2d:ed:6f:
40:92:45:d3:98:c8:09:74:00:e7:ce:3a:db:56:52:
b7:88:25:40:4f:27:84:7d:c6:cb:21:8c:26:a9:24:
63:99:ea:b7:ab:11:9f:87:c8:fa:f8:0f:fc:65:7d:
d6:99:14:5a:e3:f3:97:d1:df:5b:39:ff:3b:1e:cc:
2c:38:7c:6d:0e:6c:8c:e3:f7:2d:2d:bd:2f:cb:11:
d9:f3:87:08:e0:1a:a3:3d:18:e5:aa:09:3e:0d:61:
42:5e:8d:3a:e4:ce:10:c8:46:28:a9:ed:24:e6:99:
e2:67:42:d0:26:56:03:33:67:91:5f:4d:3c:38:2b:
90:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:77:C9:3C:0C:04:39:4C:9C:4A:74:94:E6:CB:4D:D1:86:57:E8:31
X509v3 Authority Key Identifier:
keyid:91:AA:FC:AD:B6:C5:29:84:E3:55:89:EB:77:58:F0:50:AA:CE:FC:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kar8rbbFKYTjVYnrd1jwUKrO_HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/a12b0a-d48d-4d3b-bc47-0557bd7217f1/1/kar8rbbFKYTjVYnrd1jwUKrO_HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:de:13:03:ac:8f:3b:0b:8e:8a:32:5b:b3:a8:40:f1:cd:3f:
98:e0:1c:19:3e:de:29:ee:93:85:ad:fb:10:fc:ca:59:a2:2b:
35:01:a7:ef:26:0c:8d:0d:2b:fb:94:fc:76:8b:6e:64:d3:8a:
98:77:d3:7f:4a:cf:21:cb:00:32:6a:98:a4:29:7a:85:5c:64:
9e:c0:93:47:a1:2b:94:5e:d4:5d:0f:f4:cc:13:d4:6a:84:b1:
47:e3:cc:f0:0c:84:4f:de:b7:fa:66:88:ed:04:a3:48:4e:01:
90:3b:fd:b5:9a:d8:82:4b:1f:78:c1:f1:d3:b2:68:ed:7b:39:
a7:6e:9b:83:62:8e:f0:22:9d:ab:1d:b1:b1:19:d9:a2:0c:8c:
3c:89:d8:7d:e3:fc:17:b1:27:75:a9:0b:39:78:7a:63:4c:b0:
8f:11:07:a0:bb:c3:8c:10:77:ee:2a:d0:6e:04:5a:81:43:4e:
0c:a6:2c:53:b5:7d:8a:89:05:0e:de:68:d4:60:0d:f9:28:69:
9b:72:32:ae:ba:6e:35:df:e8:f7:c6:1f:d7:cb:49:51:7e:6c:
7a:56:2c:9c:27:d2:df:ef:5b:98:a6:91:63:45:6b:93:ea:c9:
11:9a:a7:11:54:6f:ee:18:a3:75:a7:2d:42:34:9f:26:5f:99:
72:a6:f4:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:54:20 2026 by rpki-client