Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier: CjmcKE1Xx80F5OcG+pOV9bnZONE8H7vnoVchc5OHolA=
Subject key identifier: DD:32:74:17:63:E4:80:60:8B:73:80:41:CA:4D:72:A9:6A:D7:2E:6E
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 019F8FECBDF63B743736BDF9903396709B47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number: 1166
Signing time: Thu 23 Jul 2026 17:01:24 +0000
Manifest this update: Thu 23 Jul 2026 17:01:24 +0000
Manifest next update: Fri 24 Jul 2026 17:01:24 +0000
Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: uT4rh+q6liKHWL0wtlXicjfy5cq1ViJCaj0DHFcJmes=)
2: SOEMdBmGOl9OdgU6wRKXH8ofpiw.roa (hash: wRDPax/GBrg9//RtAKm4t39dVaYciZWJGLWscmkRs9k=)
3: bS5Jm8ZE-sVj1o36QwkjwTi3nSQ.roa (hash: HkP3HjP3l5NouDXiG5SFRZ81aMR3ohNIO6a1Rp53MSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:ec:bd:f6:3b:74:37:36:bd:f9:90:33:96:70:9b:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Jul 23 17:01:24 2026 GMT
Not After : Jul 24 17:01:24 2026 GMT
Subject: CN=dd32741763e480608b738041ca4d72a96ad72e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:a6:59:a7:3a:cd:7e:76:8a:f9:06:4e:e6:
43:21:80:f6:95:2c:11:91:8e:26:ee:16:aa:c5:30:
d6:e5:68:01:16:c0:da:6d:14:a3:e6:70:93:7c:51:
66:e3:f0:77:fc:9a:33:6d:c6:c4:ae:4e:d2:40:99:
51:42:87:09:ec:5a:2e:c8:4d:fe:45:d2:8e:3c:3e:
22:96:39:37:75:e0:f8:b7:2c:a6:d4:68:74:fa:44:
e4:4a:82:d7:dc:61:16:51:aa:0f:a4:74:08:af:58:
eb:5f:2b:6c:70:5f:fa:87:ff:cb:aa:f2:9b:a7:68:
78:2e:9f:86:b4:73:8a:09:e9:10:67:10:bd:96:c5:
20:5b:68:cc:ba:df:82:b8:38:e5:0a:8b:bf:36:bc:
50:96:61:7b:77:ec:d7:b0:15:99:3d:b0:4a:ab:e5:
09:5f:5f:11:58:2f:59:8f:7c:ff:d2:41:66:5d:91:
8a:b7:6d:de:0e:ec:dd:01:a7:ab:45:a2:91:8f:0b:
de:bc:e0:80:6e:ce:f7:14:ca:45:e3:94:9e:11:ef:
90:2f:4a:b4:1e:58:e7:bc:cd:fd:27:08:d6:32:27:
b3:eb:0c:01:8e:d2:f5:0a:4f:1d:80:30:9b:87:80:
0f:43:26:e8:55:59:4d:2b:8d:06:fe:2e:6a:04:3b:
b3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:32:74:17:63:E4:80:60:8B:73:80:41:CA:4D:72:A9:6A:D7:2E:6E
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:30:ee:b5:40:74:89:f1:13:ca:aa:fb:56:90:e5:aa:a7:52:
9e:3b:b9:ba:91:04:5b:04:83:bd:74:fc:a3:0b:3c:5b:0d:f3:
85:91:5b:20:67:ee:6b:ba:0e:10:41:8a:69:77:42:a5:02:17:
3d:ad:ed:67:e8:d0:c1:ce:0e:39:57:9e:31:55:ef:ce:e5:14:
88:23:bb:88:a3:9a:f9:2b:9d:36:1f:80:57:0b:f4:18:0e:5d:
cb:bf:10:1e:f4:75:99:09:f5:88:7b:c2:79:be:e6:aa:8f:b8:
38:cb:94:36:95:57:f9:01:af:f3:26:18:68:5f:21:5f:47:0e:
64:3c:c0:cd:12:f1:a2:5c:d8:70:b5:9f:79:28:ef:78:e2:b3:
3f:4a:0b:3f:ad:0b:45:dd:16:12:b0:91:da:32:de:ea:a2:ba:
17:85:6e:f7:b4:58:69:c6:d8:59:01:a1:86:9b:b6:05:f4:74:
68:eb:61:7c:01:1e:99:e3:29:b9:f1:c9:b4:8b:e7:31:ab:3b:
26:94:cf:73:b0:ca:da:cf:dd:00:84:2f:ed:fa:f6:3d:2a:8d:
d2:a2:4e:97:63:fd:42:ac:c9:aa:92:e7:2b:bc:a4:b6:bc:d4:
c0:5a:8c:4f:6a:00:ec:4a:6a:4a:b2:5a:33:25:9e:1c:0e:ce:
36:b2:f9:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:53 2026 by rpki-client