Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier: oXteSgRIPv8mZy2OFkTlNL1/IQQVxLG6FqIz4EuK/Ic=
Subject key identifier: 3F:3A:76:62:D6:E7:BA:0C:D7:81:4A:1E:0C:BD:AE:D2:C5:C0:E2:C0
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer: /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial: 019E1E35DB27CAD50CDF525ED9F1FD841007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number: 0C35
Signing time: Tue 12 May 2026 22:01:46 +0000
Manifest this update: Tue 12 May 2026 22:01:46 +0000
Manifest next update: Wed 13 May 2026 22:01:46 +0000
Files and hashes: 1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: JWLdGOhfTCXgap3+VUMfU5XZ+1v7Nei/TckiuEnAC1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:db:27:ca:d5:0c:df:52:5e:d9:f1:fd:84:10:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Validity
Not Before: May 12 22:01:46 2026 GMT
Not After : May 13 22:01:46 2026 GMT
Subject: CN=3f3a7662d6e7ba0cd7814a1e0cbdaed2c5c0e2c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8c:fa:87:30:5f:57:88:21:77:68:d3:c9:97:
12:53:8e:2f:ca:38:e6:88:09:d6:f5:47:95:c5:b3:
0f:34:ea:1f:64:75:26:bc:f0:3f:eb:4d:a6:a0:53:
2d:07:42:ec:a0:68:c1:f5:06:5f:1b:85:40:34:3b:
28:c8:9a:1e:af:37:3a:f8:6b:f6:7d:88:1b:c8:b4:
34:67:96:81:86:71:58:9d:4a:d4:fe:41:4f:5b:15:
71:af:c6:2d:76:67:41:fa:de:28:36:55:6b:19:ab:
4a:71:2d:6a:bd:c1:65:6a:b8:e5:90:db:f2:33:d4:
1b:9e:61:2e:5c:82:b6:23:89:5a:8f:6a:a4:5f:2b:
9e:4c:5b:59:ad:ec:ed:73:cd:da:40:2f:85:2d:90:
91:c5:6d:d0:87:e1:bd:89:9e:ba:89:13:00:17:f6:
8b:d7:1c:dc:71:c6:c7:87:5c:36:d9:26:5e:88:8b:
58:21:63:f1:24:f1:fe:11:23:a3:64:3e:0e:ad:40:
2e:1f:7d:08:8f:55:bf:1f:ec:b3:c6:fe:0f:16:9f:
55:76:cb:01:7f:f1:94:d3:50:2d:6d:49:16:f6:35:
9e:01:60:6e:4c:a6:dd:db:31:d5:90:e8:d7:1e:02:
f8:6f:9b:b0:87:ea:ba:f9:09:7a:8d:a3:55:61:14:
eb:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3A:76:62:D6:E7:BA:0C:D7:81:4A:1E:0C:BD:AE:D2:C5:C0:E2:C0
X509v3 Authority Key Identifier:
keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8d:15:98:07:ea:b1:c7:6b:24:48:43:b6:6a:24:b0:0a:e2:
e4:f1:6c:b2:74:f0:15:36:ea:b6:f2:34:af:19:a4:2e:0d:29:
ed:9c:b0:4f:2d:63:30:72:fd:9d:d1:01:88:b5:f7:6a:7e:de:
fd:77:ae:dc:39:d1:a9:ac:51:cd:e1:94:94:83:ee:27:bc:1e:
c8:f5:f4:35:00:4c:ab:7f:62:0d:c4:25:b0:38:30:7a:96:08:
82:fd:9f:4f:77:84:05:ce:65:49:50:71:4b:af:c5:06:26:5b:
e2:a4:a5:57:eb:ea:16:ee:32:b2:bf:f8:8a:3a:12:5f:fb:60:
8c:a0:37:0e:a2:89:6d:38:1d:64:26:35:c4:c8:52:ac:4c:38:
5d:47:42:cd:fa:af:d7:02:86:6a:fb:75:a4:2d:72:69:5e:8f:
12:54:5b:03:db:59:76:a3:3a:5b:59:5f:5e:bc:21:10:1a:23:
00:d6:e1:81:fe:4f:11:72:e4:62:f9:aa:1c:36:2b:5e:8c:52:
ab:33:1a:b5:50:36:cb:44:e4:07:fd:38:b7:94:9d:12:4e:f3:
85:3b:18:32:0f:83:e8:9c:1d:9f:58:06:8a:39:28:83:2c:20:
6e:c3:80:95:d8:90:9b:19:56:7d:aa:6d:07:a3:89:7b:a9:a9:
9a:0c:af:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:42 2026 by rpki-client