Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier: xSfObY1hkaQ7lDdALuO3uq7KpuvDwpuVDFoSMzYGo3I=
Subject key identifier: 1F:C2:8C:39:0A:5A:B7:DD:CC:2B:7E:D9:7F:80:7C:B8:7A:75:44:E4
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 01A0D45E0673FF3FFADE2AAEDB9187C50627
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number: 120E
Signing time: Thu 24 Sep 2026 17:02:06 +0000
Manifest this update: Thu 24 Sep 2026 17:02:06 +0000
Manifest next update: Fri 25 Sep 2026 17:02:06 +0000
Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: 2jf0pYaYvGNYJlI1/TqSArwHZaJe8Cg1v4e65nz/6OY=)
2: SOEMdBmGOl9OdgU6wRKXH8ofpiw.roa (hash: wRDPax/GBrg9//RtAKm4t39dVaYciZWJGLWscmkRs9k=)
3: bS5Jm8ZE-sVj1o36QwkjwTi3nSQ.roa (hash: HkP3HjP3l5NouDXiG5SFRZ81aMR3ohNIO6a1Rp53MSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5e:06:73:ff:3f:fa:de:2a:ae:db:91:87:c5:06:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Sep 24 17:02:06 2026 GMT
Not After : Sep 25 17:02:06 2026 GMT
Subject: CN=1fc28c390a5ab7ddcc2b7ed97f807cb87a7544e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:a4:11:65:56:44:85:d6:3a:c7:11:87:03:
7a:50:9d:97:da:71:0b:cd:90:22:f7:b4:0f:39:0c:
79:65:97:f0:a6:2b:8e:c5:6a:3f:d2:24:d2:6f:e0:
19:66:61:61:e4:49:47:99:5e:11:d8:cf:b0:5f:51:
36:d4:3c:e8:9d:19:47:18:d3:91:13:05:9c:fb:47:
85:9f:f7:3c:ae:65:08:32:b3:bc:de:dd:6f:0e:ee:
95:e4:9d:97:05:e5:8d:33:76:99:c1:94:29:89:3d:
7a:fa:ad:64:2c:fe:46:07:53:d5:5c:ca:ae:6e:48:
30:a7:f2:13:e8:47:cd:17:fd:5b:73:20:f3:5a:1b:
7f:60:ae:34:ff:39:f9:3f:9d:a6:f8:16:d5:b1:dc:
64:39:08:5e:8e:f2:89:a0:a9:25:d5:01:f1:98:79:
fc:fe:d8:a7:55:35:18:63:04:10:26:3d:51:0a:2d:
11:7e:a9:67:52:df:0d:9b:de:cc:23:58:78:e5:cd:
df:d5:2e:87:0d:27:bc:da:4c:82:91:02:fc:14:ec:
28:95:34:8a:ba:f1:04:c9:01:c9:42:9e:57:9e:c3:
5b:4d:5f:86:ec:92:47:5e:f7:e1:72:00:f8:87:2a:
9e:49:9f:ba:fd:1a:dc:35:a6:87:e2:55:34:9c:8b:
32:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C2:8C:39:0A:5A:B7:DD:CC:2B:7E:D9:7F:80:7C:B8:7A:75:44:E4
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:30:fa:4f:9d:fb:de:c8:50:f1:eb:5b:42:1f:a4:78:6a:aa:
03:01:bc:96:1a:39:50:51:ef:18:3c:32:0e:dd:ed:b4:16:56:
b1:92:1f:c7:10:83:91:8a:07:97:c3:87:6f:58:0b:13:89:a4:
97:b3:ed:20:d8:51:47:9c:05:12:82:e9:37:b5:26:e8:d8:f0:
f5:01:79:e2:e1:a3:f0:ff:37:19:87:67:4e:92:8a:5d:27:50:
28:6f:14:38:eb:e6:08:a4:e5:84:aa:d7:99:ed:79:02:4d:67:
83:18:90:c4:3b:41:9d:09:eb:aa:b0:4f:f6:fe:bb:1a:54:26:
39:08:a4:42:43:46:73:14:60:0f:86:54:18:30:6f:f3:5c:09:
9c:8d:26:4c:51:bb:a4:27:62:23:66:fc:f6:4e:15:b2:34:9f:
eb:03:71:90:ec:02:f3:43:0b:5f:33:5c:c8:66:32:2f:a6:9e:
67:92:a2:73:b8:35:0a:13:f3:53:e0:29:a2:58:89:1d:d0:d5:
27:58:f3:dc:69:b4:18:d5:65:7c:bc:36:60:76:de:60:30:b5:
5c:ca:c5:d8:5b:34:ce:0d:44:5a:da:ba:2f:41:d5:79:36:3b:
f1:1d:91:0c:fe:48:01:e1:d1:e2:57:f7:2d:4b:ec:51:06:92:
d2:e0:61:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:56:39 2026 by rpki-client