Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: hruRBEXrgARaWGdcIVdOkETiExAR729hU/ndvXovO0o=
Subject key identifier: 2D:88:F1:A2:59:E5:C6:6C:31:1D:5E:A0:0A:34:86:65:73:DF:82:A9
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 019EC112118DC01434EEE6771AE4A21CA1AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 195B
Signing time: Sat 13 Jun 2026 13:00:47 +0000
Manifest this update: Sat 13 Jun 2026 13:00:47 +0000
Manifest next update: Sun 14 Jun 2026 13:00:47 +0000
Files and hashes: 1: 8hL0m9Fc9UNGzgjgGkhDpJap1MU.roa (hash: NlNwlvnTVX6u27vOfaFF+tRXHuEvNbAOslEtQ3I2hnw=)
2: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: hMbkdpDzScL7kRH10nYViltjjGgaKfsMn2qiB86JBMg=)
3: sYg8Oa1Ta_lzbrdC5qTkNfuGJEo.roa (hash: QEaQMZyU5y5fYj+msGaAAUMqIN0tNFuYbbG6xKUQauY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:11:8d:c0:14:34:ee:e6:77:1a:e4:a2:1c:a1:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Jun 13 13:00:47 2026 GMT
Not After : Jun 14 13:00:47 2026 GMT
Subject: CN=2d88f1a259e5c66c311d5ea00a34866573df82a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:36:2a:d1:90:cb:80:22:54:bc:7d:e6:f8:cd:
1b:51:54:fa:6d:6c:60:bb:85:47:a1:08:c9:e1:a4:
5e:ec:6f:7d:43:cf:6a:da:f0:92:c3:3f:92:eb:fe:
45:7e:38:9a:29:3e:11:db:08:bc:19:d4:f7:4f:d3:
cc:29:59:82:c8:1f:2d:7d:23:0c:f0:52:94:5d:90:
29:82:cc:b8:54:8c:c3:04:30:db:ee:32:2f:76:ec:
59:b1:46:56:3b:75:c7:97:99:85:e1:2e:5c:51:ba:
dd:2d:39:7e:a7:4b:3c:8c:31:04:eb:e1:af:78:09:
1b:40:c3:df:e0:4c:37:28:91:61:19:01:14:08:c8:
94:aa:a4:16:13:15:c7:4d:16:dd:b7:cf:55:c2:67:
b3:b2:9b:4d:91:f5:7a:b0:d0:3c:49:6f:b2:0a:85:
de:52:42:b2:c8:2c:ee:ea:5a:11:04:82:b1:aa:75:
24:f6:06:c5:23:03:64:a0:f4:ea:5f:a3:34:72:24:
3b:c9:35:cf:67:0e:d6:ea:19:0c:94:4c:d5:fe:a0:
68:e3:e2:a3:45:f5:00:69:48:6b:ba:46:f0:a3:e8:
53:55:56:f3:dd:f3:94:0c:1e:f9:79:ab:8a:53:c0:
ab:2d:b4:bf:2c:06:96:c5:0b:d9:bc:22:b0:e2:61:
ce:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:88:F1:A2:59:E5:C6:6C:31:1D:5E:A0:0A:34:86:65:73:DF:82:A9
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:76:2f:14:d0:b7:85:07:93:27:c0:5e:75:aa:05:c7:66:6e:
82:e1:71:25:1c:c6:e5:42:b5:d6:9b:df:7f:65:75:b0:b9:aa:
56:ff:ac:0a:24:43:da:40:5a:8b:04:cc:d9:da:bd:0c:3d:2f:
ff:4e:04:20:2b:31:08:bc:98:cc:30:ee:1d:65:1e:d0:5f:8f:
ae:33:4f:f2:6d:be:3b:47:15:ee:f1:e9:1e:d6:09:4e:8a:04:
dc:20:38:85:6d:cd:37:97:09:4a:2e:6d:3c:07:50:ec:12:5f:
b4:c7:cd:be:66:a3:b6:fc:30:99:11:64:68:aa:85:b8:e7:a3:
70:b2:94:2c:e8:d0:66:52:ff:09:cc:ae:f1:0e:8f:e4:bc:1b:
b2:f6:87:99:37:85:9d:b6:b5:8e:98:fb:f9:0b:0f:20:41:e7:
75:78:89:b9:2c:90:e5:74:31:7a:c4:45:1a:31:5c:00:51:57:
e9:e9:dc:ce:07:c0:3a:3b:d5:4c:68:b0:b9:fa:c3:59:39:4c:
af:89:d8:3d:9f:ac:bb:99:34:51:23:0b:c7:70:a5:a9:7c:c7:
4b:e2:41:b0:59:33:e8:af:aa:fc:5e:37:74:58:e5:ba:ba:dc:
92:76:4a:e1:9b:5a:f0:09:75:19:38:73:c8:f3:49:ba:8e:bc:
2a:ff:68:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:32:39 2026 by rpki-client