Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier: Ipgs6F5eK25O+TYSQX4jfKf84xHzykOcljM8Zw4EnzE=
Subject key identifier: CD:C9:21:46:D5:ED:CC:7D:3E:55:10:B2:FF:B2:33:81:30:52:68:1D
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer: /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial: 019F90FF1500B4B2B132EF3A4C564AD74C91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number: 0CF5
Signing time: Thu 23 Jul 2026 22:01:03 +0000
Manifest this update: Thu 23 Jul 2026 22:01:03 +0000
Manifest next update: Fri 24 Jul 2026 22:01:03 +0000
Files and hashes: 1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: q617z6D6GPlKQhNFlva+tLGVd23MoWA1lHE2rB+o08Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:15:00:b4:b2:b1:32:ef:3a:4c:56:4a:d7:4c:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Validity
Not Before: Jul 23 22:01:03 2026 GMT
Not After : Jul 24 22:01:03 2026 GMT
Subject: CN=cdc92146d5edcc7d3e5510b2ffb233813052681d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ab:b8:cb:0d:5e:8f:eb:de:1f:b4:fa:a6:81:
5a:a8:69:af:87:c5:77:94:dc:4b:e5:cd:f1:b4:4a:
f1:0e:30:2b:36:da:35:07:3c:e2:fa:db:01:0b:d7:
87:44:bc:7a:99:2c:5d:27:d3:2e:85:bf:42:d0:56:
7b:0d:47:00:f5:a3:90:e3:81:73:89:b2:93:ae:00:
ff:d2:1f:82:63:0c:24:3f:b0:20:78:ac:9b:55:04:
06:60:87:6f:92:f8:b7:08:11:64:b3:6a:c8:12:fc:
98:46:af:04:0c:5b:be:14:9c:55:14:84:1d:0f:5b:
7b:2a:72:1c:2a:69:01:63:01:46:c2:e2:3d:a9:a7:
5c:88:a8:88:a3:fc:18:71:92:23:59:31:10:69:1e:
71:4a:cb:b2:b2:8e:4f:ae:3d:8d:db:fe:85:05:00:
e3:3f:3f:b4:1e:02:d4:f4:e6:e1:e5:e3:a9:5e:3b:
0b:0c:ec:56:65:fd:e5:22:5e:52:47:48:67:3f:ae:
0b:53:f1:78:db:73:c0:c2:ce:5c:7c:2e:12:cb:71:
45:ec:34:01:33:d1:c3:8d:51:c4:3e:97:67:36:d4:
6b:57:83:d8:9a:7f:da:a5:fd:10:6d:70:6c:7d:63:
e9:df:3d:58:27:6f:2a:eb:77:0b:48:c6:a3:86:3d:
80:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C9:21:46:D5:ED:CC:7D:3E:55:10:B2:FF:B2:33:81:30:52:68:1D
X509v3 Authority Key Identifier:
keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:4e:7b:c7:e1:95:8e:7b:3f:69:e4:eb:f3:dc:90:78:51:a0:
2a:66:05:6a:5a:ea:bb:ab:01:ec:19:03:62:a8:01:b6:0f:2f:
d7:1a:36:b7:a9:16:b8:5e:6c:bb:cf:6c:67:10:24:ea:92:fe:
7f:07:87:31:0b:30:4e:b8:6f:8c:79:33:bb:4a:77:6b:26:56:
7d:d9:a3:92:6e:f0:f8:2e:54:f6:9e:db:8b:74:38:33:1b:38:
b0:a6:52:19:68:ba:14:e8:cb:37:f6:c8:ce:01:b2:cb:a9:51:
39:57:cb:36:53:68:d9:fe:9f:d4:a1:79:00:18:8a:d7:ca:60:
dc:c5:1d:28:3a:4a:85:31:88:a9:f2:7d:32:a9:10:15:81:f9:
58:78:d8:aa:e0:de:a3:d1:22:f5:10:88:a0:67:49:cb:3f:c5:
93:69:f0:3d:f1:61:14:c1:8a:48:ec:bc:67:69:63:73:99:d5:
88:e0:4e:28:4a:9e:dc:00:b2:db:c1:42:69:6d:c8:c5:da:ff:
f3:db:ee:e9:6a:22:02:75:9f:d7:32:64:0a:6f:3e:7a:e0:16:
e1:3a:f4:45:01:95:25:70:75:6e:d7:f7:a1:18:8a:d3:50:82:
0c:0b:23:70:29:b9:9c:a7:68:fb:86:60:fc:48:ad:db:0b:88:
25:ee:cf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:12:41 2026 by rpki-client