Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: pwg8PGxUgksXMCGvkC3HTOUWltkjZA8zwj7LTI7Vu8g=
Subject key identifier: A1:1D:2F:5C:15:3C:64:4B:FC:1E:0F:C8:3E:B2:E2:8E:D1:85:2A:8D
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 019E1CB4BAE1539BBA6C0C9A20F7D25EAAB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 0FEA
Signing time: Tue 12 May 2026 15:01:06 +0000
Manifest this update: Tue 12 May 2026 15:01:06 +0000
Manifest next update: Wed 13 May 2026 15:01:06 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: ZrLBnPuk8+6p0LZ2PivN30UvvtjamMWHr4F8PlT7XDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:ba:e1:53:9b:ba:6c:0c:9a:20:f7:d2:5e:aa:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: May 12 15:01:06 2026 GMT
Not After : May 13 15:01:06 2026 GMT
Subject: CN=a11d2f5c153c644bfc1e0fc83eb2e28ed1852a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a6:a8:18:30:81:2c:fa:f0:fe:d1:24:48:92:
b5:db:56:7a:a5:00:52:3e:da:0e:90:35:16:68:cd:
8f:6c:94:8b:00:41:f9:34:cd:35:e0:20:a1:37:55:
0a:7e:f3:5e:74:4f:f9:30:9e:c1:2e:81:04:6e:fc:
df:10:03:da:d4:b5:c0:c1:59:cd:f3:76:9a:93:9d:
e4:3d:d4:10:de:66:79:15:c4:64:45:84:ec:6a:72:
ef:19:05:dd:f0:32:41:fe:7e:a2:2a:2d:f7:8a:ad:
c8:9d:ec:17:4f:96:dd:5b:bc:6d:2f:1f:fe:70:d1:
fd:fe:9e:a1:81:39:e0:db:92:61:a4:ff:59:5e:71:
54:fb:79:d2:de:90:83:6f:a8:0a:8f:da:e3:35:75:
5c:d0:7b:0a:d6:83:77:bc:df:9f:d8:3b:91:88:ee:
73:82:85:1a:f7:b4:6d:85:7c:bf:c5:f0:48:db:87:
24:9a:3e:60:42:96:ab:47:60:70:59:a2:3a:47:63:
85:a1:11:f7:c2:98:8e:d1:6f:91:05:7c:07:13:a9:
f7:d5:d8:79:3c:5e:1d:92:7d:5c:e2:76:90:84:eb:
da:48:3a:52:f5:4d:8c:1b:a1:eb:90:80:81:b8:a8:
26:b3:46:5a:c3:10:8b:59:b4:ac:b3:37:a4:18:4c:
8a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:1D:2F:5C:15:3C:64:4B:FC:1E:0F:C8:3E:B2:E2:8E:D1:85:2A:8D
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:37:1a:e4:b3:68:c8:3f:8d:08:01:89:0a:86:59:f0:ba:97:
9f:d3:73:e2:a9:46:53:8c:a9:bf:12:b0:68:1a:a6:d8:7c:b8:
60:23:64:e5:ee:56:aa:f3:e9:e6:31:7a:7b:a4:7b:e9:98:1b:
66:35:ee:50:6b:01:95:6a:2f:44:84:6c:b2:f0:5f:fe:3b:8a:
f5:0a:76:16:c5:27:a3:60:35:35:a5:85:d4:12:e9:43:9e:26:
4e:29:48:7a:10:21:87:a4:1e:1e:2c:7f:6c:4d:f9:cb:cf:00:
b5:17:ad:29:ff:e7:22:43:57:df:cb:58:40:22:f8:a2:07:48:
4b:b1:1c:31:20:ab:68:96:f2:23:7c:00:b0:65:37:ed:2b:c5:
f0:78:0f:24:ac:cd:55:0d:00:c1:1d:e5:0e:33:c9:24:de:6f:
8b:6b:f9:7e:b7:fb:d4:a4:55:ce:e1:67:16:49:9f:0d:e8:e3:
00:e1:ab:2e:a0:71:35:6d:f1:d0:1c:0f:21:77:64:e2:fd:bf:
d7:43:5d:fe:c3:ca:6b:62:50:c1:3c:0d:1e:d0:d0:16:50:60:
0e:cd:91:de:15:a2:df:ae:1d:e4:49:36:49:bd:cb:4e:3d:d8:
12:4d:fd:51:03:1a:57:09:6e:11:45:72:2f:d4:a5:8a:12:85:
7e:d1:8e:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:49 2026 by rpki-client