Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
File: k--iv5CiNyiFJyfxJu3mUobDymc.mft (raw, json)
Hash identifier: XQL3IwGPJS84TMOaKRTLHPwRJeuwEnYqk+/CCIwRW/U=
Subject key identifier: B7:D6:0B:C2:EA:3F:F5:41:78:EA:E0:6C:BE:F8:20:5B:98:A9:CA:8E
Authority key identifier: 93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
Certificate issuer: /CN=93efa2bf90a23728852727f126ede65286c3ca67
Certificate serial: 01A1DCB96A7E3E7FB4AC88ADB26E95362466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
Manifest number: 08D3
Signing time: Sun 15 Nov 2026 01:01:41 +0000
Manifest this update: Sun 15 Nov 2026 01:01:41 +0000
Manifest next update: Mon 16 Nov 2026 01:01:41 +0000
Files and hashes: 1: LSLbnDZiHhCOrT_yK0lWxWhtaL4.roa (hash: pYOcAInwoaBdBqwdnOl2LKnyq1LEUHJTYWGU6e5q7Sk=)
2: iB6KHq0M_Ll9NmkNFX9KsutshGQ.roa (hash: O1DFifratFlrGzAHHdlug9Pg7yS953P24R7lQn8mKb0=)
3: k--iv5CiNyiFJyfxJu3mUobDymc.crl (hash: jUSWqIVs4ztw3UqqF8fTAUVmlXUroO6OEaxV1AGIEw4=)
4: lKE1YhYljilXzVN1CJKmawj9GS0.roa (hash: zT54sF+hrkCx758/vhS5vDBHWfzA8aPoGQA76kgbIv8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:b9:6a:7e:3e:7f:b4:ac:88:ad:b2:6e:95:36:24:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93efa2bf90a23728852727f126ede65286c3ca67
Validity
Not Before: Nov 15 01:01:41 2026 GMT
Not After : Nov 16 01:01:41 2026 GMT
Subject: CN=b7d60bc2ea3ff54178eae06cbef8205b98a9ca8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:05:76:bb:70:27:e9:ce:a3:50:94:01:e3:13:
be:e8:5f:da:42:33:1e:02:ed:58:3c:df:01:d6:69:
9f:8e:c3:5d:dc:35:e0:78:3b:28:44:29:c1:ad:dd:
d6:af:74:d8:55:72:3e:21:f4:bd:7e:eb:99:e0:ba:
b7:c3:ad:02:85:d4:49:1a:34:41:b1:f2:c7:28:1e:
3a:de:b2:33:9b:a3:0a:0c:42:e6:ea:28:aa:47:70:
4c:ae:02:f1:34:b8:d8:e9:fa:dc:36:1a:8b:ec:f5:
e2:77:17:66:07:f5:a3:41:8d:1a:da:1c:93:1c:81:
a1:b7:c4:8e:be:fd:1d:8d:64:60:7d:92:02:50:16:
e9:78:23:a3:62:57:dd:11:86:ee:ab:64:7d:42:a1:
59:ae:fa:1c:59:26:62:c0:54:32:12:16:26:75:79:
30:7c:41:93:f1:a4:dc:bc:38:fd:6f:1f:3a:d0:63:
7c:ce:09:e5:41:e9:bc:50:a6:d5:ed:74:c4:37:36:
3f:ab:13:80:2c:73:08:bd:9e:74:ac:39:95:00:68:
38:00:56:98:9d:64:e8:66:70:6a:1a:9e:be:35:a4:
24:e1:2e:ca:87:1d:10:0b:bf:c6:7f:c4:30:3c:8b:
ba:00:14:c6:5b:02:76:d8:3f:41:aa:91:c6:90:52:
87:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D6:0B:C2:EA:3F:F5:41:78:EA:E0:6C:BE:F8:20:5B:98:A9:CA:8E
X509v3 Authority Key Identifier:
keyid:93:EF:A2:BF:90:A2:37:28:85:27:27:F1:26:ED:E6:52:86:C3:CA:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k--iv5CiNyiFJyfxJu3mUobDymc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/a92eb2-b2ba-4efd-bd09-6abb1ccb6153/1/k--iv5CiNyiFJyfxJu3mUobDymc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:d5:32:00:d9:b5:62:6b:6c:8b:8a:e7:68:c5:4c:47:4f:bf:
57:18:2e:84:08:35:05:71:92:aa:30:30:e8:ea:8a:d0:69:26:
6b:d2:0c:d5:04:f7:68:7d:0b:36:bf:22:f4:74:e2:19:93:97:
61:ca:5b:23:a7:54:c7:e8:ad:fc:80:7a:e4:11:b8:6d:32:5c:
fe:13:0d:39:0b:fd:82:c0:a3:b9:9b:c9:61:b8:d2:d6:1d:50:
83:0b:42:9b:41:2a:42:71:30:b7:a4:18:1a:2e:0f:b3:a4:47:
b8:70:dc:c7:76:4b:32:91:73:7d:04:d4:38:13:9c:e6:ae:40:
50:9b:91:43:0e:32:5d:67:3e:9e:57:0a:d5:20:ac:21:74:23:
1d:eb:72:3b:d0:a6:37:10:04:86:cb:23:4a:93:8d:a5:f1:aa:
52:a6:65:9c:57:32:1d:f7:bb:bf:bd:fa:a2:7a:5c:15:9d:e7:
80:67:14:bb:77:e9:a5:99:5d:f9:5a:2d:67:65:26:ad:f3:e7:
c1:72:fa:5b:7d:7f:b6:71:b8:f4:f4:d9:8e:ab:c3:79:1b:30:
31:09:24:bc:60:7f:7a:65:be:4b:ce:ca:89:d0:23:6a:7e:52:
6d:90:a4:77:8c:8d:21:b5:56:4b:59:7c:bc:21:45:ab:95:c1:
41:c0:5f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:15:54 2026 by rpki-client