Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: 5CsBZ6npOmcBZQGqJUb3Kk3ByHvlDxYsMPJ1A/0iw3c=
Subject key identifier: 49:E9:60:71:DC:6F:AD:34:31:11:5A:81:52:05:35:4C:10:A7:51:A3
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 019D2583CD37011BB164BB0EA02577DCE320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 0F6A
Signing time: Wed 25 Mar 2026 15:01:27 +0000
Manifest this update: Wed 25 Mar 2026 15:01:27 +0000
Manifest next update: Thu 26 Mar 2026 15:01:27 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: GL9mBkdndf0es8cQSWamf+B/KhJW+pZ7hWzBtOT0ZRQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:cd:37:01:1b:b1:64:bb:0e:a0:25:77:dc:e3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Mar 25 15:01:27 2026 GMT
Not After : Mar 26 15:01:27 2026 GMT
Subject: CN=49e96071dc6fad3431115a815205354c10a751a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7f:da:5a:42:aa:00:e8:b3:e0:39:f9:2c:53:
1f:70:8f:4b:0f:da:8e:f9:0e:c7:cf:47:6c:6b:86:
44:42:2e:6f:8a:e2:f1:04:6a:76:d7:46:a1:8c:cd:
e3:68:85:cb:6d:1f:1f:9f:d8:66:11:1a:ba:58:61:
03:cc:6f:21:d0:7e:7a:97:06:41:c0:8f:2f:db:d6:
75:3e:cf:5e:b2:64:cc:4d:4f:f8:e5:0a:1e:3b:c7:
24:6b:8a:d2:ba:a2:eb:8c:ff:e3:dd:a7:5a:cf:fa:
da:2e:f9:9c:b3:8b:19:ad:b5:d3:46:1c:a4:58:b9:
cc:fc:57:4f:f8:2a:b7:b7:1f:16:0e:7c:21:84:19:
05:f0:72:56:7a:3b:1f:46:95:43:c1:dd:92:41:d5:
8e:6a:2b:fc:dc:70:96:88:b2:67:ac:7b:c5:52:02:
75:5c:ce:84:29:2c:fb:7c:3a:76:ec:fa:23:67:d4:
6d:04:f0:21:61:42:85:20:23:2d:9b:cf:99:eb:92:
fd:a1:7b:61:2f:0e:35:3c:f3:7d:e3:e0:23:23:52:
e4:4e:a5:97:a4:7f:51:85:4c:af:24:f5:dc:9c:f2:
b9:00:3e:f9:01:77:6e:22:fc:83:7e:3d:b2:6e:16:
2a:20:e9:7f:2d:e1:4c:61:9d:17:c8:5e:b5:d2:83:
fe:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E9:60:71:DC:6F:AD:34:31:11:5A:81:52:05:35:4C:10:A7:51:A3
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:04:1e:fc:fd:09:28:8d:64:dd:dd:e5:b8:9a:dd:59:bc:cd:
81:88:55:d7:d0:9d:bc:75:de:2f:14:bc:e8:3e:92:8f:66:e2:
b5:8c:12:2e:a0:1b:5a:04:9c:16:ec:3c:24:61:d9:57:3a:f6:
20:2a:27:c6:41:c4:60:eb:e7:fa:26:0a:00:b2:dd:fc:4d:78:
a8:dc:80:b0:01:18:38:b5:d2:01:88:90:32:51:21:ba:ab:18:
89:4c:10:cc:bc:34:12:1e:d7:92:47:04:cb:06:5c:80:49:56:
34:db:34:09:71:98:1e:59:98:eb:b0:36:9e:dd:70:cd:97:c5:
50:95:66:65:7c:92:98:b1:72:07:46:0f:55:fc:20:a2:04:8e:
87:8d:69:c6:e3:d4:07:ac:e0:99:49:cf:a8:da:01:e1:8a:f5:
30:53:1c:58:77:50:8c:8c:cc:59:bc:15:1e:40:d8:a5:95:c4:
96:03:5b:cd:6f:d2:de:f7:ab:1a:91:42:fd:cc:ad:63:b0:3c:
b9:37:f2:b0:31:b1:42:a0:7a:5e:10:31:1c:be:2f:2f:e9:ad:
98:b3:a0:6f:9e:b6:32:59:d0:91:fe:45:20:a5:43:16:f6:81:
a8:0a:f7:9d:cc:18:43:3f:3a:2a:84:a3:3c:01:d5:36:81:50:
00:29:f3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:35:06 2026 by rpki-client