Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier: UCkBCORwYICfI2zPT4gG8stfQBOse9nLFI8zLiNq3nY=
Subject key identifier: 9A:CD:9A:AB:60:94:EF:1E:FE:06:05:9D:95:3A:90:73:9A:C2:24:3F
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 019E1D22A41F512731D1CF32D6367796B47E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number: 10A6
Signing time: Tue 12 May 2026 17:01:09 +0000
Manifest this update: Tue 12 May 2026 17:01:09 +0000
Manifest next update: Wed 13 May 2026 17:01:09 +0000
Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: tTeRlfHijO23ACpDZ1taRWHyemf9b44CtgPCJkR3m+4=)
2: SOEMdBmGOl9OdgU6wRKXH8ofpiw.roa (hash: wRDPax/GBrg9//RtAKm4t39dVaYciZWJGLWscmkRs9k=)
3: bS5Jm8ZE-sVj1o36QwkjwTi3nSQ.roa (hash: HkP3HjP3l5NouDXiG5SFRZ81aMR3ohNIO6a1Rp53MSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:a4:1f:51:27:31:d1:cf:32:d6:36:77:96:b4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: May 12 17:01:09 2026 GMT
Not After : May 13 17:01:09 2026 GMT
Subject: CN=9acd9aab6094ef1efe06059d953a90739ac2243f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:40:9f:35:7a:a8:08:b3:85:bb:45:82:6a:
37:b9:79:66:dd:16:03:3d:60:23:e2:65:57:51:01:
a7:5e:48:73:e3:af:ac:d0:1a:6d:f2:5e:8c:bc:88:
24:f0:28:4f:8e:25:f8:21:b5:7e:67:2a:2d:fe:ca:
a4:c2:d6:8a:08:e2:69:c8:0a:44:41:d7:1c:47:79:
f8:0b:5f:ac:02:59:bd:17:00:34:cd:33:ec:82:db:
d2:f7:cd:dc:9d:b8:e6:7d:a5:44:39:e4:08:6d:d4:
3e:57:48:b2:5b:40:55:5c:7a:26:f6:f0:d8:b6:43:
60:01:fd:d8:12:43:1a:e6:72:61:24:bd:93:49:aa:
4c:cf:f0:bf:13:2f:55:f2:c2:34:54:34:20:05:07:
7c:e0:bc:ac:52:ef:35:a0:5b:0d:69:82:fe:56:40:
aa:1d:7d:68:bd:f9:b8:c5:eb:6c:88:68:af:7d:ca:
c0:73:5f:23:52:82:23:8a:f3:d4:1e:b7:55:53:dc:
aa:69:cc:aa:f5:3a:f4:86:e3:61:a8:cb:4d:b7:b7:
02:f7:f9:47:9c:72:69:f2:f0:30:5c:5b:c8:4d:92:
56:5f:a6:0d:15:c9:6f:96:93:4e:1b:e3:9f:31:fe:
60:6d:8a:b2:79:79:f9:f7:c4:88:09:e8:fb:59:ee:
8c:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CD:9A:AB:60:94:EF:1E:FE:06:05:9D:95:3A:90:73:9A:C2:24:3F
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:48:51:a9:c2:3f:be:aa:cf:eb:f3:13:9f:26:d7:b3:41:cb:
ca:de:a3:37:fd:02:aa:70:cd:00:04:d4:67:f6:ef:b6:54:85:
86:39:44:7b:ff:92:2b:ae:46:07:08:69:53:7d:30:02:5d:d1:
cb:3e:26:fb:a7:72:78:36:72:96:ee:b4:df:66:cf:e6:62:57:
49:a9:de:a0:5f:1f:f2:28:7a:9c:f0:47:9a:d0:be:fb:7e:04:
12:88:e6:a2:b8:fc:1f:25:a1:bc:2c:b8:72:91:8f:d1:d5:59:
55:b9:77:6f:04:24:1f:ad:86:c6:2b:54:45:e7:04:5c:0c:10:
4c:70:08:e1:0b:b8:8c:2a:ff:2a:2c:38:af:ad:3b:c1:e5:fc:
0f:b6:51:e9:b5:4d:82:67:64:0f:57:b3:34:2f:7c:ff:8c:a9:
d2:f1:68:c6:1d:97:bb:6a:66:13:b6:26:6d:31:d5:d5:74:69:
fd:42:b9:80:c3:a6:0b:ae:bd:36:f1:2b:4d:57:d4:75:b0:42:
2a:f6:7f:b5:86:cf:2c:af:86:03:a2:02:66:69:47:79:f4:1c:
82:37:d4:e1:40:df:84:6a:9c:ef:ac:91:22:a2:25:32:0f:03:
47:7a:cf:20:be:43:91:d2:fb:85:c3:76:70:08:9c:2a:6b:a1:
ce:62:12:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:52 2026 by rpki-client