Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: Y9zB1FmRO14a0FqXvhHev84tde+L53GEBhcBF/R3KHk=
Subject key identifier: DD:FD:D4:93:04:7E:3A:13:0B:A7:C2:93:C4:8D:E2:F5:9A:BD:24:36
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 019F8F7ED54DBC1E84761F4B0BB460B3D8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 10AA
Signing time: Thu 23 Jul 2026 15:01:21 +0000
Manifest this update: Thu 23 Jul 2026 15:01:21 +0000
Manifest next update: Fri 24 Jul 2026 15:01:21 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: RAdczv7sFtv/pSrcAmUjY/L6dMhQrhZ/uLmpCp4o57s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7e:d5:4d:bc:1e:84:76:1f:4b:0b:b4:60:b3:d8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Jul 23 15:01:21 2026 GMT
Not After : Jul 24 15:01:21 2026 GMT
Subject: CN=ddfdd493047e3a130ba7c293c48de2f59abd2436
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:46:08:9a:76:a7:19:c0:92:2a:ff:aa:79:
ae:02:a7:47:5c:ff:89:2f:99:00:33:fd:17:f4:be:
4c:d2:21:95:9b:5a:1a:44:df:63:cc:d8:35:88:13:
68:34:c3:dd:fa:6d:40:0d:5e:93:22:00:4c:a8:7d:
12:15:d0:13:60:83:4e:dc:6c:fd:63:48:de:dc:b0:
73:b4:1e:2d:66:68:df:f1:00:e3:35:d9:69:5e:11:
28:f3:32:53:66:c2:27:d5:43:32:5c:62:df:49:ec:
73:06:cb:22:09:b1:ab:27:ef:7d:a4:ca:5d:a6:2d:
be:65:94:8c:3a:3f:cb:e2:2d:1f:9d:ec:c6:4f:e5:
0a:42:f1:4c:b3:e3:8a:06:00:f0:a7:f0:1b:93:0e:
44:42:2b:90:75:fa:5d:ce:0f:6a:4b:36:6f:93:8d:
e0:51:fc:40:00:f3:34:e3:1e:63:1c:97:27:11:d8:
62:37:94:bc:70:09:d7:41:fc:67:0f:2d:27:ce:6a:
58:c8:3c:94:ba:e5:ff:9b:90:b3:c3:0f:5f:40:40:
d4:ea:03:26:7f:72:18:86:04:d1:35:85:cf:b6:42:
92:10:e0:4a:f8:df:4c:e3:7d:79:24:f6:c0:31:4e:
a4:1a:71:4f:29:88:4f:ae:34:82:db:ca:3c:88:72:
1b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FD:D4:93:04:7E:3A:13:0B:A7:C2:93:C4:8D:E2:F5:9A:BD:24:36
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:c6:dc:91:43:2b:ee:d8:70:44:66:6d:09:a7:60:ca:d9:e2:
cf:be:3a:ae:24:5a:c0:8b:18:12:86:b2:cd:b1:d1:65:5d:20:
f6:f8:ea:0f:6b:bf:0e:2b:45:ed:c1:84:11:86:eb:87:4e:e3:
5d:a7:a0:c9:fc:76:2a:08:85:08:2d:f8:d3:d5:e0:ed:18:64:
b2:49:d8:1f:c4:e0:8f:81:74:22:92:b8:b7:c4:32:f8:f2:f6:
67:c6:6e:e5:97:d5:88:3b:6d:d4:9d:c3:a2:10:18:83:59:27:
b7:bf:c8:c5:d0:7f:d8:ee:d3:81:b3:47:54:a4:fd:06:97:cb:
93:37:f8:ce:d6:25:98:12:03:0a:cc:5e:95:30:e7:9a:67:af:
71:16:1d:6e:ed:53:a3:68:54:3e:df:a2:de:38:d5:34:56:73:
94:4a:b7:00:6d:b4:0f:10:96:20:c7:3c:e7:4e:5d:76:67:33:
9f:7a:1c:0e:c2:62:50:ff:af:39:43:90:44:de:ab:bc:a9:94:
13:67:00:62:e5:13:a5:01:71:f4:46:5e:0d:73:b3:de:41:03:
23:5b:e6:cc:3b:e3:01:43:d3:2c:2d:08:60:48:ed:41:49:77:
1c:bb:62:b3:f6:e9:75:18:05:22:eb:49:98:81:86:37:a3:c8:
3f:95:57:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:54:16 2026 by rpki-client