Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: kDPNu2JaKJ+80ldDPbCiiULkwoxl7RBf186sxlGb+pE=
Subject key identifier: 8D:30:58:25:AC:FD:8F:B4:73:25:66:43:B8:65:4B:87:94:29:49:D7
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 019F8FEC8EAB1BB30C2921E20D4071E693E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0DF1
Signing time: Thu 23 Jul 2026 17:01:12 +0000
Manifest this update: Thu 23 Jul 2026 17:01:12 +0000
Manifest next update: Fri 24 Jul 2026 17:01:12 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: nNZDgJ4AD6g3I/0qGC91cb5jz4UtjE+g5O7WVn76w9Y=)
2: FSiX4t_tg_y7oF-_55Q5bbdUsQ8.roa (hash: +22ogCrtLyYe516AYe3BcHerNsIQmbIA9oXfV6jBDmc=)
3: hTDr1ZrFtma_8PT0j_czy4cp_gk.roa (hash: KaADjjZM/0gRfnbSGNaVQZNcDLCw6Df/2sVnzc09HOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:8e:ab:1b:b3:0c:29:21:e2:0d:40:71:e6:93:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Jul 23 17:01:12 2026 GMT
Not After : Jul 24 17:01:12 2026 GMT
Subject: CN=8d305825acfd8fb473256643b8654b87942949d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:85:58:64:74:9c:55:dc:29:24:d1:e3:cf:
10:63:eb:de:c1:02:77:7d:1e:39:d3:d3:23:9b:e3:
6a:ab:06:c6:05:a4:b3:e3:51:b1:4f:3b:b8:07:a3:
16:a5:2c:31:45:4e:93:66:1c:75:b3:98:45:04:da:
ec:c7:e2:b5:b3:67:be:da:08:9e:6c:fe:d5:55:4c:
a7:71:9c:fd:18:fb:5a:a2:21:1b:b6:49:29:3b:f9:
e9:50:bf:12:2a:e7:89:a7:f3:2e:84:dc:02:d4:31:
7f:3c:a5:ab:c5:3e:71:34:12:88:73:e8:4b:17:c7:
70:05:75:31:5a:b1:b0:42:bb:ca:52:89:46:db:7e:
3d:a1:9d:8c:c9:b1:14:a4:4a:14:d8:11:b1:a6:2c:
ff:33:1d:6c:2f:36:f6:49:b0:2c:50:85:97:ae:5d:
26:89:81:ad:6b:3a:1d:6c:16:a3:43:50:5b:eb:68:
b1:42:5c:93:43:60:a6:b0:63:c4:13:dd:c7:8c:b7:
39:d9:dd:8a:93:64:2f:73:99:52:93:6d:05:c6:31:
18:96:19:da:90:0f:9f:6e:bc:bc:28:62:b2:b5:a4:
8c:67:50:41:ba:78:d5:09:64:ef:48:98:63:e7:9f:
2c:11:1d:04:39:77:b3:d8:6c:98:c6:88:c7:f8:3a:
83:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:30:58:25:AC:FD:8F:B4:73:25:66:43:B8:65:4B:87:94:29:49:D7
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:0a:46:62:d7:4e:bb:9f:0f:5c:b7:1d:41:6c:ac:a2:d2:1b:
4c:e8:8a:b0:41:5d:49:a1:a8:46:a4:91:d4:b9:26:e6:0e:00:
a2:bc:d7:f1:3a:a0:5b:0f:85:9a:03:2b:12:f2:29:1f:d4:a7:
db:2c:f4:1b:e1:4d:56:c3:d7:44:ef:e3:92:c5:7c:93:f8:8e:
12:8a:7b:d9:2b:d5:e6:94:c4:19:b1:40:60:0d:a1:2d:a2:f7:
70:cc:d1:b0:65:82:90:f4:63:42:70:bb:ff:5e:bc:77:64:52:
53:4d:3e:60:90:31:c1:7d:22:ca:4d:41:72:98:ba:8b:10:97:
f7:fb:60:6f:78:15:c7:16:0c:78:1f:b0:00:4a:bc:7d:52:91:
e8:f4:1a:03:a0:d5:2a:83:11:c5:25:b8:2a:c1:ed:51:8b:e5:
fb:85:4d:ee:ca:15:60:3b:b4:99:b8:ff:a9:7a:7b:18:25:78:
66:e1:34:d1:a7:f5:30:ea:5d:7d:13:a5:5d:72:5d:97:37:52:
db:b5:82:02:d2:50:2f:eb:05:ca:5b:de:26:0b:11:a2:2a:d8:
cf:3c:c5:da:20:37:29:34:2b:3c:d4:d6:9e:e9:5d:4e:13:68:
4d:e6:65:59:d1:1d:43:ab:06:f7:65:72:6b:29:6d:89:67:a9:
8e:2c:1b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:42:06 2026 by rpki-client