Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
File: 1-EAlIIyFaM6OWN4a59g--NKydCQ.mft (raw, json)
Hash identifier: 8wu+e0FCgQP/ho1bMv1ykgIDWsdepSAtSbmNXfk3wso=
Subject key identifier: 2D:F5:89:44:33:01:4C:2B:DA:EC:7D:75:A0:75:38:BC:B1:C8:F0:3A
Authority key identifier: F8:40:25:20:8C:85:68:CE:8E:58:DE:1A:E7:D8:3E:F8:D2:B2:74:24
Certificate issuer: /CN=f84025208c8568ce8e58de1ae7d83ef8d2b27424
Certificate serial: 019D31F585611911781441AFC2E75BA9FC78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
Manifest number: F1
Signing time: Sat 28 Mar 2026 01:01:07 +0000
Manifest this update: Sat 28 Mar 2026 01:01:07 +0000
Manifest next update: Sun 29 Mar 2026 01:01:07 +0000
Files and hashes: 1: 1-EAlIIyFaM6OWN4a59g--NKydCQ.crl (hash: CDYf100O4GkvYoQJPyNoCJYXBGV1szsmnVIRuXjch5M=)
2: 5nyyp5bJ6BfhfIdrL4euf6g3prs.asa (hash: g/gn9GfPYPRaS6oGfe8vAdejuU161UnFwUAxOE+MHZQ=)
3: BNbYCTwC4UEQcd5nV0lyvO8_FF4.asa (hash: USr7fzmawFWbiL1qC8bzafm2rT8+Rqoc2eBnCHzxDMk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:85:61:19:11:78:14:41:af:c2:e7:5b:a9:fc:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84025208c8568ce8e58de1ae7d83ef8d2b27424
Validity
Not Before: Mar 28 01:01:07 2026 GMT
Not After : Mar 29 01:01:07 2026 GMT
Subject: CN=2df5894433014c2bdaec7d75a07538bcb1c8f03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:04:03:34:3e:c0:e8:4f:3c:b4:b8:54:f0:29:
18:67:a2:d1:56:66:d0:e2:a6:fe:67:65:a5:02:73:
49:b6:5f:21:d6:23:93:e3:05:2d:5d:63:8c:18:d1:
07:73:b9:76:9d:c3:4f:41:a1:ff:0a:c4:5f:a9:cf:
9f:30:cf:bc:fd:b0:ed:8a:a4:4f:70:c1:89:1d:b5:
46:dd:bd:b0:e0:b5:f6:83:38:73:06:e0:1e:e0:36:
c4:0f:a4:5c:4a:2d:06:29:a0:91:91:51:9a:ff:a8:
6b:3f:e1:e9:b8:51:47:a1:0f:e7:05:18:b1:8e:df:
85:e3:c0:76:f3:fd:62:3c:ef:25:60:9d:25:1e:e7:
e2:b1:91:8c:cb:1b:8a:db:23:79:e8:97:09:66:a0:
66:b1:68:95:9c:b4:7a:c3:93:7b:b5:92:9c:fb:88:
60:67:c0:91:1c:a2:53:e3:79:ed:e8:9d:c4:ad:13:
4e:50:3b:c0:46:62:a7:d9:fb:18:5d:8c:f4:b7:87:
7d:12:0c:e8:fc:08:8c:29:47:03:0e:97:33:46:23:
49:cd:cb:e6:61:33:4e:47:6a:52:cf:08:39:73:e6:
04:ea:fd:10:04:c7:3f:b0:20:3f:e2:22:b2:24:33:
75:b3:a0:37:5e:3e:4d:fd:6c:cb:7b:73:b2:e0:42:
bf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F5:89:44:33:01:4C:2B:DA:EC:7D:75:A0:75:38:BC:B1:C8:F0:3A
X509v3 Authority Key Identifier:
keyid:F8:40:25:20:8C:85:68:CE:8E:58:DE:1A:E7:D8:3E:F8:D2:B2:74:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EAlIIyFaM6OWN4a59g--NKydCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/cadd6e-65c6-44da-9ee9-efea65dc3020/1/1-EAlIIyFaM6OWN4a59g--NKydCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:25:04:a5:d6:83:82:92:6f:76:1e:f1:33:00:51:28:f0:88:
0b:dd:47:8e:5a:10:1d:ed:1e:36:8a:6b:b6:25:03:3f:2b:69:
6d:f8:3a:d0:13:e9:c9:8c:a0:e0:91:94:31:76:f9:23:bd:29:
ac:ea:de:1a:46:2b:44:bd:a5:e9:71:d2:d9:69:d0:f1:d1:b2:
78:42:96:6f:48:04:93:df:54:27:0a:08:c4:64:05:45:39:65:
a2:03:d4:b2:85:31:a6:b5:0d:03:df:81:26:3a:16:dd:55:06:
cb:48:42:0c:33:0d:3d:4c:2f:2a:28:99:0c:8e:e4:1d:74:84:
3d:0f:16:22:04:13:1a:91:20:42:bf:44:b0:e0:f5:f9:48:e0:
cc:c7:97:91:7c:49:c9:94:e4:db:6d:00:10:d5:cc:fa:ae:64:
f8:2e:ff:00:35:8a:30:d1:40:0b:98:5b:e7:45:76:01:4f:23:
14:94:60:f7:93:a5:b6:9e:17:78:0e:2b:28:43:e7:96:56:59:
d8:4b:ff:9d:54:11:24:71:53:5a:9c:36:50:4e:67:cf:34:00:
24:24:d3:ee:db:78:7b:4f:15:82:f7:30:dd:0c:ec:c0:71:bb:
d0:ac:cc:8c:87:e2:a2:b1:8c:5d:77:73:e3:3c:f1:c3:57:62:
f2:c4:f2:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:40:58 2026 by rpki-client