
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: lDxhvGi4w70Fp4aiM88Q4WKVrO3zii/za+cytonNqiQ=
Subject key identifier: E4:95:88:B5:FB:D6:EE:B1:98:15:D5:1F:BF:04:C6:DA:1E:F3:A4:89
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 019F8FEC764E16448977404BA17BC409D1D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 0ADC
Signing time: Thu 23 Jul 2026 17:01:06 +0000
Manifest this update: Thu 23 Jul 2026 17:01:06 +0000
Manifest next update: Fri 24 Jul 2026 17:01:06 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: bi8ZPyXaqHleTMtXKLG0Jc0nWUFw0zmggMQluI5xDbU=)
2: emnbEvWJygEiWm9VUZK5oCubv9o.roa (hash: ii00HW3z+EIyVSsqQmHcN0u5PlKx7x+pk+qTbfPvDb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:76:4e:16:44:89:77:40:4b:a1:7b:c4:09:d1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Jul 23 17:01:06 2026 GMT
Not After : Jul 24 17:01:06 2026 GMT
Subject: CN=e49588b5fbd6eeb19815d51fbf04c6da1ef3a489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e5:ca:b9:56:e5:d4:28:8f:0e:26:3b:7c:d7:
c1:ac:a6:a8:0f:da:f9:ae:f0:1b:9b:6d:01:33:a1:
19:34:a5:dd:4f:a3:3d:00:ec:19:03:2b:0f:56:41:
7d:4a:57:d2:c8:42:7b:3b:b1:2d:c0:a0:14:f6:58:
ab:06:84:81:ac:96:6d:da:05:d2:0d:de:2d:04:e5:
3e:c2:91:f9:5a:fb:17:c9:8f:89:e6:42:71:9c:f7:
7a:d2:ba:50:0b:f5:44:db:0f:bc:8e:99:5c:b1:41:
2d:5c:8f:84:fb:c5:47:ec:34:e6:0b:0b:c1:e3:92:
b5:01:72:93:50:32:6e:71:2f:a2:dc:3f:7a:bb:48:
26:a5:5c:5c:5c:81:bd:4f:d6:17:92:cb:ae:94:28:
a9:f3:bc:00:ca:1b:c6:ad:40:97:51:98:b0:00:01:
67:7a:d5:3c:5c:c2:87:ea:0d:ce:19:90:a0:20:d8:
6e:89:3c:21:55:d0:5e:37:4a:a1:74:4c:d1:1d:40:
c9:d3:d7:bb:53:a1:b3:46:01:b5:d4:ce:af:e5:0d:
fb:e6:e7:3e:15:1d:4a:bf:1b:d2:e6:99:38:f8:17:
63:da:26:38:88:bb:a6:29:5a:7d:d3:0b:65:a8:0b:
59:72:5b:1a:39:4e:ae:04:97:a9:27:45:9c:b4:d2:
9f:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:95:88:B5:FB:D6:EE:B1:98:15:D5:1F:BF:04:C6:DA:1E:F3:A4:89
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:a5:f8:ff:dc:d0:c7:46:5b:cd:87:60:17:82:77:84:1a:00:
e6:96:76:4a:76:9c:ce:f3:96:b8:d1:ac:db:90:2d:b5:9f:d2:
cc:94:31:84:81:6a:96:4f:d5:38:e2:5b:10:50:c7:5e:03:f5:
30:cd:f6:c4:5d:90:5f:15:d3:48:d3:82:91:39:0b:bb:e8:e6:
50:c3:e5:5e:b8:14:65:2d:07:1e:b3:29:9a:e4:84:35:4c:73:
7f:74:ef:a7:d1:88:b2:aa:de:cc:1c:c2:66:92:c3:d3:89:48:
75:0e:32:e6:df:06:51:71:69:45:3c:ae:ec:7e:25:76:12:58:
dd:ea:6a:4d:79:a4:69:32:35:bd:4f:64:8c:f1:2e:60:c0:98:
6c:b0:1d:ea:69:04:93:b6:7a:bc:65:d2:db:6b:a8:cf:55:7e:
70:61:4b:af:ae:5d:d1:ab:fb:dc:38:da:80:ab:c6:7a:c4:5a:
b3:95:d2:bd:8c:32:f3:f3:c1:58:73:06:05:46:04:d5:bb:82:
86:88:b5:df:8e:30:83:62:bd:be:c3:67:f9:80:b2:f1:76:1d:
3b:36:9a:f0:cc:15:a0:84:39:be:c7:18:8c:5d:51:d8:d4:69:
02:e8:5a:a6:2d:98:6b:31:96:ee:7a:b5:ae:d9:cb:5e:26:0b:
97:0a:48:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:09:25 2026 by rpki-client