Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier: yLxDMKMp1SsGZDABxX7JeGYwPrA2QT8I3ClMiCoyrLI=
Subject key identifier: 2A:AE:62:27:1E:03:0D:8F:83:C9:53:CC:6C:7D:72:DA:6A:13:C8:72
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer: /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial: 019D27040CA912EA1FD705E990C6E694F285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number: 0BB5
Signing time: Wed 25 Mar 2026 22:01:09 +0000
Manifest this update: Wed 25 Mar 2026 22:01:09 +0000
Manifest next update: Thu 26 Mar 2026 22:01:09 +0000
Files and hashes: 1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: o8/rxY6dc+nlg1+kGDZP4HPgSE8ZE+pROVb1bh2z9Ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:0c:a9:12:ea:1f:d7:05:e9:90:c6:e6:94:f2:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Validity
Not Before: Mar 25 22:01:09 2026 GMT
Not After : Mar 26 22:01:09 2026 GMT
Subject: CN=2aae62271e030d8f83c953cc6c7d72da6a13c872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9a:e5:c4:cd:03:fe:9d:58:1d:5b:78:4e:24:
dc:94:7d:d2:81:0f:01:f8:c4:83:01:94:96:ef:5c:
e6:e3:ed:01:d4:4c:c9:ff:67:ea:6f:4c:c7:0d:b9:
14:e1:7f:1a:3f:02:20:f4:cf:cd:5a:05:3b:99:37:
5b:32:87:0a:4a:c5:e0:88:86:2f:c8:30:6f:45:35:
a8:3a:49:b7:d5:22:ad:46:e9:aa:63:7f:ea:8d:b6:
cb:50:4e:ac:c7:a9:56:c4:c0:41:b7:1a:29:88:60:
6c:27:41:2c:c5:84:80:6a:2e:99:94:09:e4:d9:03:
86:0e:48:c5:07:7a:f6:33:ce:fc:3d:19:bf:3d:90:
46:c7:b2:f6:8f:70:3e:9b:93:14:92:ab:f0:a5:c6:
38:8d:4d:8f:6b:e8:ce:40:90:9b:b0:d6:e5:1e:21:
20:3d:46:49:99:96:05:62:fc:4c:e0:bc:af:03:9c:
b2:19:cb:50:bb:01:73:b4:38:80:d5:bb:af:13:83:
b0:c9:1e:88:33:de:37:49:11:8c:5c:59:7b:86:f1:
c0:df:a5:72:fb:cf:01:6f:f9:a8:88:0e:13:b7:06:
a8:b5:70:63:e5:3c:ab:07:17:8b:c2:bc:8f:2d:42:
87:f4:cc:d3:b6:c9:5e:b8:f9:84:be:8f:d7:af:f0:
7c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AE:62:27:1E:03:0D:8F:83:C9:53:CC:6C:7D:72:DA:6A:13:C8:72
X509v3 Authority Key Identifier:
keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:e1:ae:25:04:ad:ab:dd:51:41:6f:b0:27:e2:e0:5f:4b:f1:
e3:4e:9b:26:1c:a0:53:02:b5:c8:3d:b3:a6:ae:a7:33:14:e7:
6c:18:0b:8b:9d:9d:aa:36:fd:a0:37:21:8d:c3:42:98:02:2e:
2f:ac:26:d2:ca:c3:93:e3:6b:78:c1:ad:0a:05:4d:75:5a:02:
98:dd:5f:47:2e:e8:10:bd:b3:1c:2d:3d:cb:74:40:69:c2:e7:
1a:73:03:b2:40:cd:9b:ac:11:71:ee:40:a9:93:25:93:19:64:
d6:46:ca:52:55:9e:3c:4b:c5:35:9d:17:fa:95:d5:d9:6f:dd:
a6:ee:1d:60:fe:4e:64:a9:61:51:6d:3b:ca:fa:30:97:2b:a1:
50:f8:8a:00:80:28:fb:2f:0d:a1:72:8f:e6:09:ad:17:43:c3:
fa:93:a1:70:fb:0a:01:8a:fd:64:22:ba:8a:03:fa:b1:3b:ad:
22:c1:69:b3:26:c9:cd:50:d9:8c:0c:33:41:2c:84:83:c2:c4:
94:c7:b8:d8:34:25:dc:e5:de:36:77:41:7f:c3:55:73:a6:fb:
d5:18:00:4c:f9:99:02:e3:e9:93:4c:79:9d:01:10:4e:ce:58:
21:34:86:c3:cc:c6:51:47:2b:8e:0b:fd:ab:c6:83:50:93:c9:
f8:b2:79:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:17:24 2026 by rpki-client