Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
File: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft (raw, json)
Hash identifier: XTmsDNnE5n701ng0cpNkDmjuy2Jrvbs5711haQz5tXs=
Subject key identifier: 90:52:09:0C:D3:AE:4D:44:CF:3D:CA:E9:9E:87:69:C3:97:7C:F3:62
Authority key identifier: F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
Certificate issuer: /CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Certificate serial: 019E1CB5622BA8467305E580E62BFB4E2E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
Manifest number: 163B
Signing time: Tue 12 May 2026 15:01:49 +0000
Manifest this update: Tue 12 May 2026 15:01:49 +0000
Manifest next update: Wed 13 May 2026 15:01:49 +0000
Files and hashes: 1: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl (hash: 5DT2kgPzSISU84/2d8qnpSYGWFbYoR85EFIU5cSPGvk=)
2: xMdg9tf8PX3rEEL_NSkeA_5BMoE.roa (hash: Fuv5QDlGS8lpVHre1lLFiZmSKdkP1J409k7DUxmhGPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b5:62:2b:a8:46:73:05:e5:80:e6:2b:fb:4e:2e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Validity
Not Before: May 12 15:01:49 2026 GMT
Not After : May 13 15:01:49 2026 GMT
Subject: CN=9052090cd3ae4d44cf3dcae99e8769c3977cf362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f9:b5:f6:ec:fe:ff:4d:2c:d9:8c:f9:30:e7:
84:68:e5:4f:8b:c6:2c:d7:d0:1c:fc:8c:b0:13:40:
f3:c3:40:26:ca:c5:8c:48:4a:db:7a:e0:cf:8c:64:
ab:85:45:7d:c2:ea:13:80:74:cb:fc:18:e3:db:e6:
38:2b:45:fb:6f:40:6d:c7:d9:0c:97:50:14:df:6a:
42:32:75:4b:88:81:3b:84:10:66:82:14:17:2c:49:
27:e2:18:45:c4:e2:cb:89:f7:11:9d:9c:f7:09:ee:
3d:7e:3a:04:a4:38:ca:6b:86:98:95:fb:8b:e5:3d:
58:e1:63:f6:9a:cf:f4:0e:63:3e:8a:28:4e:57:a3:
7f:09:1f:5a:6c:07:4d:c9:ac:38:10:a0:7b:c1:c4:
63:9f:52:a5:d2:7a:9d:f4:67:a4:67:22:1a:6a:a3:
c5:04:60:90:d2:c1:77:db:80:a5:da:55:4f:49:83:
d3:fd:d1:1d:7e:43:8f:89:73:b4:5a:e9:ee:90:ca:
88:02:e0:fd:8d:74:2f:54:f9:e4:f3:48:49:93:0e:
fe:9e:78:f0:f7:f4:d4:e7:81:b6:51:c0:91:f0:f4:
90:32:99:c8:c9:21:45:a6:5a:fa:19:e0:7d:a1:10:
51:9c:91:95:76:f4:df:84:39:f5:c4:b7:85:85:25:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:52:09:0C:D3:AE:4D:44:CF:3D:CA:E9:9E:87:69:C3:97:7C:F3:62
X509v3 Authority Key Identifier:
keyid:F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:3d:33:1c:5c:90:3f:80:29:3e:56:cf:79:b3:a3:a8:07:e0:
fb:7b:92:6c:16:97:10:c2:55:d9:d5:93:6c:75:a1:6b:1f:30:
49:00:9f:46:8a:a4:82:7a:79:ef:84:d9:cc:26:79:62:3d:87:
b7:20:05:8f:19:03:e2:fb:99:44:93:3b:69:e6:7d:b2:7a:33:
f0:ec:4f:2e:b9:9c:16:54:9a:d7:5b:e9:54:17:64:c4:95:31:
81:09:f2:51:a5:68:dc:8c:d7:31:3d:e1:15:16:8b:37:8a:5d:
50:9f:3d:82:47:fa:9a:28:cc:1e:61:97:47:1a:58:22:28:50:
0d:78:b0:74:b5:b3:07:ee:38:30:e6:50:b4:a4:bb:54:78:07:
72:ad:fe:ca:aa:92:8c:8c:a2:43:06:20:5e:1c:50:42:61:bf:
56:02:00:f1:b9:07:3d:23:04:88:3f:20:99:03:08:e3:18:f7:
86:1a:2f:59:52:fc:c8:f7:1b:b3:5f:1d:fb:90:7f:9d:17:f2:
81:95:d5:53:bc:2a:1d:9e:0c:ab:80:1f:c2:d2:fb:65:7e:c2:
e2:29:ed:92:82:6a:ca:4b:eb:24:50:47:3e:b2:47:52:01:ef:
7d:03:95:f4:45:04:7f:d2:a3:92:b6:fc:2f:4e:a5:2e:e0:8a:
7b:82:f8:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:54:44 2026 by rpki-client