Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: 8lHS3p5lblk6yyMUTkp8QnO/RQVGIvBPV9SLUjCW5Vo=
Subject key identifier: DF:C4:84:BA:A0:50:C7:F4:BB:DC:CF:1F:36:5A:B8:AF:C5:F8:EB:8F
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 01A0DFBC90812886A855FC49763081459CBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 1A74
Signing time: Sat 26 Sep 2026 22:01:11 +0000
Manifest this update: Sat 26 Sep 2026 22:01:11 +0000
Manifest next update: Sun 27 Sep 2026 22:01:11 +0000
Files and hashes: 1: 8hL0m9Fc9UNGzgjgGkhDpJap1MU.roa (hash: NlNwlvnTVX6u27vOfaFF+tRXHuEvNbAOslEtQ3I2hnw=)
2: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: ndamis2xEXA/yB0nzDVt7D65nfadKfa50Gj5hdYBakQ=)
3: sYg8Oa1Ta_lzbrdC5qTkNfuGJEo.roa (hash: QEaQMZyU5y5fYj+msGaAAUMqIN0tNFuYbbG6xKUQauY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:df:bc:90:81:28:86:a8:55:fc:49:76:30:81:45:9c:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Sep 26 22:01:11 2026 GMT
Not After : Sep 27 22:01:11 2026 GMT
Subject: CN=dfc484baa050c7f4bbdccf1f365ab8afc5f8eb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:25:4c:74:31:1b:ab:0a:59:7a:43:cd:8c:87:
65:d9:bf:86:b7:d3:9f:1d:0c:89:4e:73:37:96:c1:
07:fa:30:1e:07:59:f0:da:65:26:d1:12:5b:fa:f6:
66:72:36:ef:47:41:3e:ea:76:38:8e:56:54:54:ee:
0e:97:88:a8:f1:60:b5:85:56:61:26:c4:df:04:8f:
88:d4:c1:48:ff:c2:06:ca:65:0b:41:4f:32:ef:75:
21:ba:c8:99:c1:82:1e:78:94:12:2c:dd:7a:ca:be:
51:43:06:55:a8:e7:ab:e8:44:99:03:9d:28:50:7e:
6c:c8:53:0b:1d:e8:3a:f0:bf:8e:be:7d:e0:fd:52:
b8:32:9b:15:2f:04:02:00:b9:d7:69:5e:45:37:b6:
58:5a:7e:1d:e2:44:ae:e9:6d:da:41:2a:7f:39:7a:
5e:94:d9:bc:c7:39:9d:2e:88:43:92:bb:1f:0b:dd:
72:48:78:a4:03:4b:42:e9:a6:10:b4:01:0c:0c:75:
b4:4c:5c:ce:8f:a7:73:0b:88:83:05:9d:e8:42:e9:
c6:4c:8f:21:5f:3d:e5:2b:87:be:86:2c:0e:b2:e7:
5e:9f:f9:f9:3a:7a:3f:da:48:c4:12:c0:56:eb:c2:
89:09:24:f4:50:a4:7c:b5:65:bc:66:25:0f:21:8d:
bc:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C4:84:BA:A0:50:C7:F4:BB:DC:CF:1F:36:5A:B8:AF:C5:F8:EB:8F
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:10:19:48:75:ac:12:6d:8d:04:45:ee:36:70:f2:41:b0:5e:
9b:f2:87:c0:1d:be:43:ac:5e:13:3a:46:45:ef:33:69:1f:c7:
0d:d1:6b:0d:5c:6f:a2:e8:b2:a1:c1:9e:5b:7b:55:cb:f5:7c:
e4:35:d4:0a:ac:e2:b4:25:81:5c:af:e0:12:46:e1:ff:42:61:
64:e9:51:01:17:48:d7:ed:81:d0:af:4f:48:0d:6c:5e:74:f6:
2e:55:34:90:98:fb:55:6a:58:3f:df:66:10:d3:48:5a:8e:cf:
d9:87:3a:1f:09:b2:82:94:f6:6d:3e:07:6b:11:ba:2f:dd:11:
23:33:3f:d7:d5:34:d1:ba:72:3a:ed:0c:9c:e5:ad:77:39:7c:
f2:d0:ee:07:0b:43:0e:c9:5c:f5:f2:c6:60:9b:1d:c6:33:68:
f6:d6:bf:59:1e:a5:24:6d:b0:f5:f6:cc:8c:83:ff:89:f4:00:
8c:e4:72:2a:e0:05:d9:cd:45:31:d6:e1:2a:79:ac:9a:ef:1c:
1a:25:10:37:05:bf:35:c2:49:b3:61:b7:b6:2b:a1:2d:36:b8:
ba:18:50:24:08:e3:1d:56:31:03:a4:b6:44:bc:62:6f:55:57:
31:63:15:8a:5a:39:77:ab:27:13:53:86:20:b6:69:a4:a8:55:
80:24:9c:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDfvJCBKIaoVfxJdjCBRZy7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYjkxZWVmYTZkODA0NmQ5MThlMzY0MDQ1NjA0OTUyNjQw
YmMxNWQwHhcNMjYwOTI2MjIwMTExWhcNMjYwOTI3MjIwMTExWjAzMTEwLwYDVQQD
EyhkZmM0ODRiYWEwNTBjN2Y0YmJkY2NmMWYzNjVhYjhhZmM1ZjhlYjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSVMdDEbqwpZekPNjIdl2b+Gt9Of
HQyJTnM3lsEH+jAeB1nw2mUm0RJb+vZmcjbvR0E+6nY4jlZUVO4Ol4io8WC1hVZh
JsTfBI+I1MFI/8IGymULQU8y73UhusiZwYIeeJQSLN16yr5RQwZVqOer6ESZA50o
UH5syFMLHeg68L+Ovn3g/VK4MpsVLwQCALnXaV5FN7ZYWn4d4kSu6W3aQSp/OXpe
lNm8xzmdLohDkrsfC91ySHikA0tC6aYQtAEMDHW0TFzOj6dzC4iDBZ3oQunGTI8h
Xz3lK4e+hiwOsuden/n5Ono/2kjEEsBW68KJCST0UKR8tWW8ZiUPIY28NwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/EhLqgUMf0u9zPHzZauK/F+OuPMB8GA1UdIwQY
MBaAFJO5Hu+m2ARtkY42QEVgSVJkC8FdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iYWJlZjktMDc5ZC00MGY0LWEyMTEt
MzU4NmFhZTEzZGE3LzEvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iYWJlZjktMDc5ZC00MGY0LWEyMTEtMzU4NmFhZTEzZGE3
LzEvazdrZTc2YllCRzJSampaQVJXQkpVbVFMd1YwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohAZSHWs
Em2NBEXuNnDyQbBem/KHwB2+Q6xeEzpGRe8zaR/HDdFrDVxvouiyocGeW3tVy/V8
5DXUCqzitCWBXK/gEkbh/0JhZOlRARdI1+2B0K9PSA1sXnT2LlU0kJj7VWpYP99m
ENNIWo7P2Yc6HwmygpT2bT4HaxG6L90RIzM/19U00bpyOu0MnOWtdzl88tDuBwtD
Dslc9fLGYJsdxjNo9ta/WR6lJG2w9fbMjIP/ifQAjORyKuAF2c1FMdbhKnmsmu8c
GiUQNwW/NcJJs2G3tiuhLTa4uhhQJAjjHVYxA6S2RLxib1VXMWMVilo5d6snE1OG
ILZppKhVgCScZg==
-----END CERTIFICATE-----
Generated at Sun Sep 27 07:49:10 2026 by rpki-client