Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
File: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft (raw, json)
Hash identifier: vSm8UOEDZmW/d5+gKEcSaQU4a7GRT1kkBfy5bPGUovg=
Subject key identifier: CD:86:C8:6D:6C:5A:64:2E:78:95:65:8A:10:0A:8C:71:E3:97:BE:A9
Authority key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
Certificate issuer: /CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Certificate serial: 019D2695D7D64C70C9F50CFF623C113F6FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
Manifest number: 074D
Signing time: Wed 25 Mar 2026 20:00:47 +0000
Manifest this update: Wed 25 Mar 2026 20:00:47 +0000
Manifest next update: Thu 26 Mar 2026 20:00:47 +0000
Files and hashes: 1: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl (hash: SijLLpt8tO3+uwXnZ/9EYs48TDYFmojvS7BT9FwLrf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 20:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:95:d7:d6:4c:70:c9:f5:0c:ff:62:3c:11:3f:6f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Validity
Not Before: Mar 25 20:00:47 2026 GMT
Not After : Mar 26 20:00:47 2026 GMT
Subject: CN=cd86c86d6c5a642e7895658a100a8c71e397bea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a0:48:04:df:19:e0:ee:1e:ab:78:30:df:a7:
27:cf:5b:82:6f:7b:c7:88:f8:9b:3d:3c:ea:1c:fc:
1a:83:6b:f8:53:22:0d:e8:b8:fb:d7:a9:a8:c3:e6:
8c:65:b1:0d:5b:4e:e1:54:dc:ae:2f:71:43:ea:89:
9a:52:69:d8:40:3c:ea:89:32:c2:9f:a0:ff:d4:de:
39:1e:fa:47:82:7d:5e:7f:00:1f:63:2b:db:c6:6e:
71:ab:43:aa:6b:2a:de:ab:dc:ab:0a:b5:5e:08:5e:
9e:87:e1:23:26:ef:df:64:8a:bd:b0:89:ff:20:e1:
56:87:98:b6:5e:56:db:5d:88:87:74:4d:bf:43:d0:
b8:a3:da:de:0d:77:af:c6:1b:b3:76:30:c0:e0:c2:
25:7d:4d:b0:23:c4:74:85:61:7b:b6:af:f3:11:6c:
62:26:8d:48:92:f7:f3:42:d2:36:09:03:07:0e:a0:
88:52:86:9b:73:5d:23:d6:6c:52:d7:a7:21:49:1a:
d3:20:c1:07:7d:e1:6a:8d:15:04:35:ac:49:0b:72:
85:9a:d8:69:3f:87:25:10:58:c0:b1:c7:cd:55:5c:
4d:6d:1e:11:e9:f4:0b:19:e4:06:aa:87:57:cd:69:
88:74:e4:97:5a:cc:ba:46:2f:41:c4:56:60:0c:db:
d5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:86:C8:6D:6C:5A:64:2E:78:95:65:8A:10:0A:8C:71:E3:97:BE:A9
X509v3 Authority Key Identifier:
keyid:AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:f3:8d:00:aa:8e:ae:f2:e6:f6:07:b3:08:b4:57:5a:3e:23:
d3:88:a1:e5:f3:c0:4d:3c:04:dc:95:8c:86:6d:f2:23:b5:2e:
4c:61:03:ef:70:a8:d6:53:ed:c9:16:89:af:2e:41:97:f2:17:
c9:7a:7d:68:79:da:9b:8d:89:60:ef:c1:a5:1c:7d:6f:d7:d7:
17:50:56:ef:3c:35:8d:d4:3c:0d:3f:12:f8:72:6a:19:33:cf:
48:16:6a:8c:4f:fe:88:24:8b:87:99:74:54:4c:7d:af:ac:04:
b0:4c:61:98:6b:26:cc:fb:ad:ba:e1:da:43:6b:f4:1a:66:cf:
2b:b7:d8:c6:0d:df:f6:0f:ad:80:c3:ed:d0:76:4f:8a:8a:c2:
6a:ac:08:eb:1b:71:2e:00:69:46:76:b8:24:ef:90:1b:97:61:
89:c1:79:01:6b:b3:a2:5d:18:ff:95:00:66:58:b2:97:25:3e:
54:59:98:8e:1c:5e:a1:ca:cd:6d:da:57:76:0c:72:d3:96:f2:
a7:9a:a3:03:d6:8e:c8:af:82:a2:39:c7:80:22:44:0f:13:b1:
ce:f7:e0:5d:39:5f:46:9e:4c:db:36:e7:3a:ed:03:98:9e:f9:
6c:07:df:d9:ab:e4:cb:5e:22:ca:52:b0:07:06:1b:13:a4:5b:
b1:48:25:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:32 2026 by rpki-client