Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: cUHS8aAfYccfBTtemL7frw97xHrTwP1t6k/ebc9xtZc=
Subject key identifier: BD:DE:A1:4E:33:E0:49:1F:5C:57:5A:6F:27:C7:A4:21:D7:04:11:82
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 01A0D07F7FAD5BD12BED7A51BEBC2D0F67EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 0B82
Signing time: Wed 23 Sep 2026 23:00:11 +0000
Manifest this update: Wed 23 Sep 2026 23:00:11 +0000
Manifest next update: Thu 24 Sep 2026 23:00:11 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: EFhhjEmGHCtsZjFG3qqALhjcsG/R4N7p94m2/AHpGzk=)
2: emnbEvWJygEiWm9VUZK5oCubv9o.roa (hash: ii00HW3z+EIyVSsqQmHcN0u5PlKx7x+pk+qTbfPvDb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:7f:ad:5b:d1:2b:ed:7a:51:be:bc:2d:0f:67:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Sep 23 23:00:11 2026 GMT
Not After : Sep 24 23:00:11 2026 GMT
Subject: CN=bddea14e33e0491f5c575a6f27c7a421d7041182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:d9:0d:52:af:4a:72:14:69:bd:30:5e:cf:
d0:e7:55:37:2c:33:c5:7d:25:b9:34:74:1c:79:50:
77:9f:86:c4:8d:44:b3:06:89:ad:f1:ed:10:54:cf:
1b:57:21:16:59:b3:85:59:47:02:cf:b3:74:91:a3:
c9:1a:86:c6:35:c0:53:ac:af:79:b3:da:62:f9:4d:
d4:1c:bf:87:7b:66:00:61:41:54:2f:1c:1f:74:36:
56:34:fd:01:33:9a:53:f3:0c:9b:ef:b5:15:43:c6:
6a:b7:99:cf:42:05:f3:66:a3:4b:84:2f:d7:92:fe:
f6:ca:f6:1f:df:15:02:99:d7:03:91:d4:21:45:6e:
90:b1:4b:97:38:4d:09:5b:c8:e1:eb:26:5d:3a:b1:
dd:4a:35:2d:cd:76:96:b3:cb:c8:dd:34:1b:0e:bb:
cd:fc:bb:e8:59:c7:80:49:36:33:f6:b3:ea:b4:c0:
ea:a6:63:59:45:6d:55:73:76:00:3d:e8:b7:8a:3e:
c4:e7:f4:38:34:99:ee:d1:37:8b:59:07:92:1f:fb:
ef:73:a5:25:03:c3:15:49:85:96:0c:22:45:3b:67:
20:94:20:f8:e5:b6:20:b3:7c:47:4c:37:96:c9:06:
3d:49:94:fd:d1:5e:44:95:be:a8:f2:d6:31:8f:ac:
f2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:DE:A1:4E:33:E0:49:1F:5C:57:5A:6F:27:C7:A4:21:D7:04:11:82
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:fd:95:f0:10:bd:91:5c:c3:bb:f8:b9:c4:0f:9d:c5:f7:9e:
9d:87:87:72:9c:6e:68:a3:3d:f4:d9:62:6b:ec:52:36:32:4e:
c5:bd:05:5c:58:bf:4b:ab:1c:73:78:61:eb:de:4c:84:24:70:
ce:4e:87:88:88:d9:d4:fb:46:13:1f:19:9d:07:0b:00:b4:58:
aa:83:e7:95:84:9c:3d:0f:22:d1:8d:52:04:74:66:bc:42:cc:
dd:a7:e7:0d:75:83:29:bb:81:b5:aa:c9:38:6a:bf:a6:22:be:
90:8b:11:63:05:42:82:77:53:09:dc:bd:c3:c3:9f:8f:fc:25:
e4:92:84:1b:86:8b:6b:f7:80:22:fc:4d:ce:97:46:79:85:01:
63:8d:b3:fe:b2:39:00:ac:d7:8b:2a:84:ae:85:40:34:77:1f:
ae:b4:95:6d:37:ea:17:83:12:5a:77:8e:ff:e6:bc:20:9b:26:
25:73:26:81:61:c9:0c:53:7a:6f:3c:78:29:4d:58:dc:82:7a:
4a:b1:00:e9:8b:66:98:16:64:71:eb:14:bb:26:d8:fc:57:7d:
16:ee:d6:a8:ca:10:55:8f:02:de:d6:99:cd:55:a3:4f:87:ed:
e5:04:ea:0e:6a:62:a6:f3:a2:ec:f6:e1:3e:7a:56:23:2c:6b:
0b:b1:78:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:44:28 2026 by rpki-client