Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
File: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft (raw, json)
Hash identifier: cEflXZX05e1mXmMVWSqAQWoMvyizLfC1VEuZ1EdrQNU=
Subject key identifier: 3C:EF:4F:A9:4A:32:56:A3:AB:3E:3C:BE:9C:31:65:FB:46:A6:35:74
Authority key identifier: F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
Certificate issuer: /CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Certificate serial: 01A0DA5FA54A467848EB4A1DBA6F4602CB56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
Manifest number: 055A
Signing time: Fri 25 Sep 2026 21:01:36 +0000
Manifest this update: Fri 25 Sep 2026 21:01:36 +0000
Manifest next update: Sat 26 Sep 2026 21:01:36 +0000
Files and hashes: 1: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl (hash: Bb8PsKQObQXNI9yM6PDzZI6yiP2cypa4Ti/uxe5qRDg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:da:5f:a5:4a:46:78:48:eb:4a:1d:ba:6f:46:02:cb:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Validity
Not Before: Sep 25 21:01:36 2026 GMT
Not After : Sep 26 21:01:36 2026 GMT
Subject: CN=3cef4fa94a3256a3ab3e3cbe9c3165fb46a63574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:3f:81:6e:81:fe:9d:48:a6:b5:85:2a:d1:13:
05:c4:31:c8:55:04:14:02:88:85:f3:01:0d:a1:56:
c6:4b:2c:25:c5:b0:87:9e:57:49:ec:3b:65:08:cd:
ae:e8:57:18:fc:54:45:92:f5:20:f4:38:db:c1:de:
b5:9c:35:61:7a:61:ee:30:07:af:2f:70:51:f1:60:
29:3e:4c:9c:e4:14:43:76:20:90:30:8b:4e:ab:40:
96:51:cb:c5:e2:62:86:9d:2d:95:b0:96:44:19:3b:
16:e3:b0:26:80:48:ef:af:8b:7d:78:06:ce:8b:52:
eb:1b:6d:69:fe:37:d7:45:64:60:90:f8:46:f7:df:
17:af:aa:67:c4:02:3b:88:2c:5d:43:d4:3f:b8:e0:
c4:50:87:c6:32:f9:e2:fb:38:e4:7c:95:7d:4b:6a:
92:47:d5:33:8a:98:36:bd:c0:c3:6b:53:08:3f:a5:
b3:d4:6a:37:37:e9:9b:91:aa:b3:42:05:bb:e4:31:
db:ab:a1:75:e7:ce:37:d2:3a:a9:0b:1b:46:e3:b9:
45:07:29:6f:d5:45:b4:09:56:f1:34:59:88:ca:5b:
7d:f3:aa:6a:8c:13:82:5e:a9:3c:d7:12:ae:12:b2:
1e:c6:b0:c3:b2:a1:f4:2e:41:98:25:a6:cf:85:80:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:EF:4F:A9:4A:32:56:A3:AB:3E:3C:BE:9C:31:65:FB:46:A6:35:74
X509v3 Authority Key Identifier:
keyid:F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:d1:20:60:35:4d:a4:69:2b:25:7b:29:98:6c:3d:78:28:2d:
a3:bf:c7:83:f7:d6:81:5f:b8:c2:99:b4:df:27:88:ec:4b:e0:
2e:eb:63:1c:84:af:0a:fe:22:18:6e:f9:9b:02:fe:e1:b4:db:
53:3e:0e:76:f0:c9:55:68:44:99:69:08:ee:58:d7:04:d6:b9:
1a:60:5c:36:78:43:ec:67:37:cf:22:7c:bd:7d:d5:a5:07:86:
4c:5e:f5:aa:e9:0f:71:82:cb:b4:55:0c:e5:2a:55:86:7c:19:
31:9c:a1:13:ab:ff:3e:5b:b9:3d:c7:cd:77:d2:55:51:d1:d1:
ae:43:cb:1f:4a:59:1d:41:e0:d0:40:f4:8d:56:29:2d:a9:af:
c4:87:4c:25:ef:d4:90:da:83:71:4d:aa:52:52:ff:fe:67:49:
63:1f:bb:48:54:b1:ff:88:76:9a:41:fa:58:b1:c7:17:c8:21:
e1:90:a1:7d:d7:8e:7d:01:ad:56:cf:f6:6f:35:4f:d7:f8:85:
83:c5:5d:82:cc:76:cf:19:00:72:7d:47:46:72:4c:7e:3a:27:
45:19:1d:67:35:01:bf:fc:28:b8:c0:68:7c:b9:67:7f:eb:d4:
72:50:87:ff:70:e2:ca:13:30:88:78:fa:ce:4b:9e:66:dc:35:
f9:7a:9b:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:42:09 2026 by rpki-client