Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: ASbA3T5tpOAPMRstl72eK1hAie4R8wSMMcbDeWoOqco=
Subject key identifier: F7:97:DD:C1:C9:CC:03:18:65:3B:8F:AE:CA:3D:DA:95:F7:54:BD:26
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 019E1D22D3DBEAEE0CB57EC07E8F48DF88B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 0A1C
Signing time: Tue 12 May 2026 17:01:22 +0000
Manifest this update: Tue 12 May 2026 17:01:22 +0000
Manifest next update: Wed 13 May 2026 17:01:22 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: NtVbnj80sU4VbdyQ3ukkahN0r5xd4Jg8phtgXHOAl1w=)
2: emnbEvWJygEiWm9VUZK5oCubv9o.roa (hash: ii00HW3z+EIyVSsqQmHcN0u5PlKx7x+pk+qTbfPvDb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:d3:db:ea:ee:0c:b5:7e:c0:7e:8f:48:df:88:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: May 12 17:01:22 2026 GMT
Not After : May 13 17:01:22 2026 GMT
Subject: CN=f797ddc1c9cc0318653b8faeca3dda95f754bd26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7a:76:ae:56:f3:be:94:0b:95:f5:71:e6:c1:
e0:1a:ac:2d:7c:d9:61:e4:a5:1c:d2:d7:d0:6f:b4:
04:08:1c:2d:02:60:c4:11:9f:d2:22:e6:42:dc:f3:
25:58:e7:8b:82:38:0d:d0:59:34:ad:b1:1e:b1:0a:
f8:9a:a7:3d:0e:b7:aa:b3:33:03:64:db:0b:c6:93:
14:f5:d8:b1:19:62:c9:8e:ca:c2:ed:5b:76:c4:ca:
fc:74:92:ab:0c:0d:f1:ea:4a:68:e0:30:61:ab:63:
a8:81:c9:1e:75:ff:53:23:79:d1:35:6c:05:4b:5e:
2f:8f:4a:36:94:8b:8d:54:0c:72:f4:2d:1c:34:2e:
0c:84:d8:cd:31:83:8a:9c:21:45:b9:2c:41:85:f4:
1e:10:7d:7d:41:56:73:56:6a:7a:aa:f1:17:b9:9f:
ee:6a:8e:20:7d:4d:07:a1:e3:38:ff:bc:d5:19:bb:
3c:68:55:73:f0:59:86:43:d2:6c:0b:7d:4b:10:5c:
99:96:8f:ce:7b:55:ac:85:e3:a7:09:86:13:34:a6:
a2:29:12:74:5f:39:e3:c5:d3:34:c1:0a:3d:7c:16:
86:f4:cb:32:5f:1b:79:8a:fd:24:e5:bb:d5:a0:89:
cf:9c:2f:8b:95:92:47:30:de:b7:18:34:9f:a5:08:
63:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:97:DD:C1:C9:CC:03:18:65:3B:8F:AE:CA:3D:DA:95:F7:54:BD:26
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:06:c3:75:8f:1e:e5:53:32:ff:eb:98:a7:e1:f2:bd:ba:5f:
79:53:79:d1:6d:3e:a8:e5:3a:a0:e9:05:45:95:71:4a:c8:7d:
9b:c1:4a:7a:0f:7a:dd:91:b5:05:25:39:3b:2b:fb:70:5f:20:
68:98:04:36:e1:6d:7c:e9:23:96:26:1a:a0:47:ee:4c:40:6e:
21:05:a3:57:79:cd:fd:e0:03:b1:8b:dd:02:79:17:04:51:ea:
52:33:aa:cd:0e:2d:0a:e7:a8:d4:9e:8b:88:18:90:d8:ef:6b:
33:d5:23:07:5d:4c:50:45:c7:0f:9c:7d:0c:be:43:a1:7c:23:
c1:85:ce:dc:7a:3f:bc:af:97:52:bd:e5:8b:24:ed:f7:96:16:
54:82:36:f7:ab:34:59:f4:0b:30:1e:b6:78:79:6b:f9:84:8e:
e8:f0:96:bc:dc:f2:24:81:16:8a:24:56:5c:4d:1b:28:11:3d:
36:4d:32:bb:ce:47:0d:ec:4d:9f:03:1a:66:f7:1e:3d:ee:11:
e1:1a:f2:36:73:0a:06:12:fd:72:79:17:61:44:99:36:c0:76:
cd:9d:f6:a3:78:1c:bd:31:e7:ca:a5:91:15:c0:d9:16:1e:02:
62:af:33:67:70:fe:3b:bd:2d:cd:a3:1b:ce:09:05:2c:a2:18:
a8:6f:29:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:30:48 2026 by rpki-client