Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier: 4TVRl7bk2bn6YlOjv/K96ng7/dN/tIeYWI0jJ1n1NMg=
Subject key identifier: E7:D7:1F:CA:10:F3:64:F0:2C:31:D2:AA:F1:66:20:F0:5E:86:BC:FA
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer: /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial: 01A0D94C62F3485D6AA1631780CF08DD3C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number: 0D9F
Signing time: Fri 25 Sep 2026 16:00:56 +0000
Manifest this update: Fri 25 Sep 2026 16:00:56 +0000
Manifest next update: Sat 26 Sep 2026 16:00:56 +0000
Files and hashes: 1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: yoPfbmx/2SVlWwy69uy5eaphcRJDp4qv3nOOafl2SAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:62:f3:48:5d:6a:a1:63:17:80:cf:08:dd:3c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Validity
Not Before: Sep 25 16:00:56 2026 GMT
Not After : Sep 26 16:00:56 2026 GMT
Subject: CN=e7d71fca10f364f02c31d2aaf16620f05e86bcfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b7:4e:45:b9:70:82:8b:73:1f:e7:aa:98:2f:
bb:fe:02:14:b0:c6:24:d4:c4:75:6e:5c:47:18:86:
c1:33:50:b0:7c:81:d3:1f:cd:23:63:49:ff:8f:a4:
bd:e4:8b:7e:49:bb:49:cc:2f:bd:a3:16:2b:30:71:
3e:a9:1b:62:be:e6:7d:1c:fa:f3:6e:ad:e5:a7:d4:
04:21:44:54:18:35:ff:e1:12:df:36:fa:67:62:8a:
80:33:41:ca:9c:79:05:e7:e5:8d:d5:95:80:b9:db:
51:7d:e3:3c:52:51:d8:15:b1:29:3c:7e:2f:0f:85:
ac:f7:a8:43:50:ba:86:68:02:4b:1b:8d:ab:b6:6c:
fc:87:0d:9d:bc:ff:e5:a2:22:0e:60:46:fc:82:d2:
b7:35:aa:ae:05:04:3a:c1:7f:79:ed:f4:b9:5d:c3:
65:7e:cf:a3:ca:4c:68:64:79:6d:7b:16:e7:49:ac:
68:7b:2e:62:44:e0:b9:06:24:c8:de:1f:dd:13:6a:
be:86:22:f4:2d:bc:f2:de:cd:5a:00:13:54:3f:8c:
1e:d6:98:67:5b:f6:f7:ff:b1:74:84:b6:8c:e0:17:
4d:e8:98:7b:62:e9:45:05:74:ca:26:e5:2e:a2:c4:
e8:cd:34:b1:29:4f:17:04:63:2a:c6:cf:24:f5:33:
27:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:D7:1F:CA:10:F3:64:F0:2C:31:D2:AA:F1:66:20:F0:5E:86:BC:FA
X509v3 Authority Key Identifier:
keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:5b:32:71:08:a6:da:e2:27:6a:85:dc:34:c2:44:62:13:9f:
e7:fd:ab:7c:7b:6d:99:19:35:07:f0:ab:db:fa:67:53:ff:9c:
8b:f3:5f:1c:1d:92:9d:f2:2f:0e:9c:01:4c:36:5f:29:c8:9c:
32:e2:1f:b8:f0:4b:dc:d1:34:e6:38:fe:67:21:a4:79:7a:d0:
70:4b:fb:e6:24:a0:5f:dd:ce:3c:02:24:2a:21:35:19:2c:68:
17:14:a5:20:1c:3c:d8:00:de:c0:c1:be:5c:f1:7e:67:be:68:
b9:e0:52:83:6e:db:9b:ab:8b:d7:50:73:b5:d1:c7:51:c2:51:
9e:81:b2:cd:93:0e:b1:4c:a1:31:27:5e:3d:b6:af:20:26:db:
c6:58:47:a0:55:b6:26:b8:3d:48:7f:00:a8:74:ab:39:2b:a1:
dd:81:4b:69:87:d3:98:b9:59:94:ef:6d:9a:6b:79:93:88:60:
54:de:17:e5:39:cd:65:d9:05:00:ad:4b:d5:1f:4c:f0:83:b1:
0e:b1:57:00:22:d1:4f:d7:7b:f3:3d:10:0b:41:3b:2a:1d:93:
4f:2d:62:66:e5:bd:14:b6:07:81:95:34:60:99:9e:64:a7:e0:
10:d6:b4:b3:5b:06:aa:f2:46:3f:de:42:c2:89:04:e8:0d:24:
5f:2d:77:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:47:50 2026 by rpki-client