Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: ThypfPA7wATFXyadKkqfs0BgVf1ouB1iKrg95gVI5Oc=
Subject key identifier: A4:48:6A:5E:7C:41:6D:37:9D:68:8E:C5:25:7F:A6:9D:B5:C3:9A:0B
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 019DA52F51244936C29D07F42FEF33211A61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 10:00:34 +0000
Manifest this update: Sun 19 Apr 2026 10:00:34 +0000
Manifest next update: Mon 20 Apr 2026 10:00:34 +0000
Files and hashes: 1: 8hL0m9Fc9UNGzgjgGkhDpJap1MU.roa (hash: NlNwlvnTVX6u27vOfaFF+tRXHuEvNbAOslEtQ3I2hnw=)
2: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: rvDLg9Ej7bcRMUuEykx0lGmOrfcZqhlemW7RAVz0uZ0=)
3: sYg8Oa1Ta_lzbrdC5qTkNfuGJEo.roa (hash: QEaQMZyU5y5fYj+msGaAAUMqIN0tNFuYbbG6xKUQauY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:51:24:49:36:c2:9d:07:f4:2f:ef:33:21:1a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Apr 19 10:00:34 2026 GMT
Not After : Apr 20 10:00:34 2026 GMT
Subject: CN=a4486a5e7c416d379d688ec5257fa69db5c39a0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a0:9c:90:5f:a8:11:46:83:62:81:be:67:99:
97:13:b3:7a:53:24:7a:0b:28:ec:d4:1f:ef:91:80:
b0:7f:1e:8b:8e:37:a7:ba:a4:88:d8:38:99:41:50:
00:c0:8d:ed:38:3d:f7:7e:5e:2b:41:da:05:19:5d:
9a:20:1e:86:63:1a:dd:da:f6:26:44:12:6c:90:00:
c6:cb:85:8e:d4:22:62:96:08:03:55:a1:e5:15:1e:
b1:1d:f4:7b:49:94:e0:c7:13:91:0e:30:2b:5c:8f:
3f:bf:63:fa:53:9f:6c:8c:4f:02:81:86:1d:a9:c3:
aa:db:b5:3d:96:73:b6:12:21:05:36:ca:a8:cb:60:
bf:bc:f3:16:37:1a:ba:67:a4:be:88:ae:a5:c1:35:
fd:a7:33:29:71:93:d9:3b:5f:d3:ae:ce:ef:8d:bc:
67:7b:99:ce:a0:5c:03:50:d7:f7:18:1e:d9:eb:28:
84:20:3d:66:db:67:6f:d3:81:fe:f6:fe:7e:c8:f1:
1e:eb:ef:b0:cc:99:b5:1c:2c:d5:91:1c:48:27:1f:
e4:2d:8f:59:a2:43:22:1d:d3:23:f5:33:cd:2b:3a:
77:3a:f0:f8:a7:3c:d8:da:d9:ef:3b:30:a2:32:19:
8c:55:1f:b9:1d:df:1b:05:09:ca:c6:e3:40:7a:58:
51:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:48:6A:5E:7C:41:6D:37:9D:68:8E:C5:25:7F:A6:9D:B5:C3:9A:0B
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:99:ec:8e:df:5e:ab:67:5f:3b:a6:9d:5d:99:c1:2e:3a:23:
b1:d8:7f:d4:9a:91:f1:b9:1e:92:01:bb:5a:37:fc:54:a6:a0:
33:94:5d:8c:ee:02:cc:24:96:cf:7a:48:10:e4:90:91:57:bc:
29:4f:12:a5:f9:52:d8:74:1b:91:e8:38:4c:0f:fd:6b:be:bd:
89:bc:b7:f8:5e:3d:61:47:5c:0a:7d:80:47:e3:d2:9c:d1:f6:
98:f8:27:98:fd:bc:02:bc:3a:82:64:60:c3:65:e8:2c:d4:94:
23:c7:91:20:d8:85:93:ae:21:47:54:30:57:2e:d2:7d:21:80:
18:72:3d:71:d3:d7:f2:ec:6b:54:0d:cc:5a:40:44:07:e6:aa:
67:ed:ea:a0:f8:57:8b:bf:6e:77:03:1b:f4:15:33:55:51:9d:
c4:5e:01:7d:77:48:64:66:4c:5a:41:fa:d8:a3:35:57:3f:25:
12:fe:fc:7f:fe:f0:d2:37:cf:ba:d2:aa:69:9c:67:4a:e4:15:
05:b7:c3:60:3b:01:27:08:2c:8f:79:0e:89:58:5c:92:cb:70:
14:9e:f8:6a:b3:46:1a:dd:bf:c6:d4:03:5d:09:6f:a6:34:94:
fc:4c:88:fe:5d:eb:fb:71:88:bb:9e:62:39:f0:06:80:dd:05:
92:e9:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:19:12 2026 by rpki-client