Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: huCLx6H/lnw9tGJ4oehpLSWFP49XZzlY9AbHPhHhqqE=
Subject key identifier: 38:D3:34:0F:B3:A8:63:99:3D:76:DC:78:36:14:AB:B9:B5:27:54:44
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 019FACAD4026C1E310828794E661147C48FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 07:01:02 +0000
Manifest this update: Wed 29 Jul 2026 07:01:02 +0000
Manifest next update: Thu 30 Jul 2026 07:01:02 +0000
Files and hashes: 1: 8hL0m9Fc9UNGzgjgGkhDpJap1MU.roa (hash: NlNwlvnTVX6u27vOfaFF+tRXHuEvNbAOslEtQ3I2hnw=)
2: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: iV75Ytar/nOjCW1f4dIHj++IHzb47D6Ud8k+gmrfcYY=)
3: sYg8Oa1Ta_lzbrdC5qTkNfuGJEo.roa (hash: QEaQMZyU5y5fYj+msGaAAUMqIN0tNFuYbbG6xKUQauY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:40:26:c1:e3:10:82:87:94:e6:61:14:7c:48:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Jul 29 07:01:02 2026 GMT
Not After : Jul 30 07:01:02 2026 GMT
Subject: CN=38d3340fb3a863993d76dc783614abb9b5275444
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:22:f7:26:02:ab:9a:8d:32:fa:25:b4:13:30:
35:80:e3:7f:e6:e6:28:c8:18:69:1c:c6:b6:ce:f2:
f6:1b:bf:ab:2c:20:bb:17:cf:1b:06:26:e6:27:89:
79:85:1d:79:37:1f:9a:c7:0d:9d:e5:df:1a:59:10:
c8:15:e8:f8:0a:d7:17:74:27:ae:37:96:48:e2:b6:
62:02:de:ee:13:d9:8e:83:99:3d:51:58:2f:23:60:
cb:1a:c1:39:4b:b8:6b:ef:24:35:c9:32:bb:cc:18:
2e:e2:83:47:49:9d:c0:22:aa:76:e5:8f:81:fb:20:
72:be:9e:30:34:05:f8:8a:bd:3a:77:16:f9:89:32:
31:bb:e5:1e:20:42:a7:c5:f8:54:48:9b:a1:3d:20:
79:e3:a6:3f:2b:87:f0:60:2a:5a:3f:2e:7c:4e:51:
bc:27:fd:dd:73:49:75:a5:ef:0b:42:e7:f1:3a:60:
d2:0c:2f:4f:5c:68:49:28:5d:f3:14:8d:83:f9:39:
b4:e5:05:87:80:33:76:38:57:91:95:83:c7:bc:f3:
38:ae:38:b5:df:02:12:9a:89:c5:db:89:69:48:db:
05:73:c5:5e:69:9b:bf:9c:4d:e4:1e:16:f8:a4:b5:
98:3f:66:82:73:53:53:ab:49:d7:aa:48:7c:2c:fc:
95:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:D3:34:0F:B3:A8:63:99:3D:76:DC:78:36:14:AB:B9:B5:27:54:44
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:10:d9:eb:18:67:96:0f:54:3c:a8:33:a8:e8:bf:07:d5:52:
e6:87:54:7d:76:bc:82:e4:fe:1a:7b:50:26:33:d4:63:fa:0c:
41:05:b7:7d:cd:e2:c7:9c:6f:06:6f:66:67:90:b5:3d:40:68:
23:d7:36:93:b1:f9:15:28:46:22:b5:99:95:79:96:94:46:b6:
25:63:38:ca:c4:1f:43:de:13:85:48:0e:d3:ec:c4:49:49:f4:
85:2c:c5:a2:ca:8c:44:0f:c7:7d:17:02:27:e3:69:91:6d:82:
3c:5b:da:c6:fb:81:3c:95:bf:0d:d8:ed:20:59:77:b2:6f:35:
18:24:dd:18:f6:5f:05:4b:5a:e1:d2:76:e4:7c:94:98:dd:04:
ef:35:98:c7:76:98:19:35:b7:eb:57:2d:92:94:8e:db:88:ad:
17:04:ca:69:55:cd:4d:0e:63:87:58:0f:3d:a0:f0:5b:d8:fe:
c8:8e:2f:65:ca:a9:0d:03:d0:62:1f:bd:21:b5:9a:78:00:7c:
d4:ed:1f:16:9b:e2:c4:bd:49:74:4e:55:5c:37:11:01:ea:06:
ea:84:41:f1:a0:4e:36:ab:08:19:d2:5c:67:35:6b:2b:db:19:
9e:3d:25:b0:86:7e:c9:66:17:77:32:46:bc:33:b8:90:34:e8:
f5:fb:fc:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:02 2026 by rpki-client