Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
File: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft (raw, json)
Hash identifier: w3FARFmvjHMVFrqBCJoIYQuXsk1HQ3Y0biSiofPhftY=
Subject key identifier: 44:75:26:0C:56:12:A4:B2:56:6A:B1:2C:74:B7:26:DA:91:A8:48:6A
Authority key identifier: F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
Certificate issuer: /CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Certificate serial: 019E1D596DAAEAEA0E736A80AB6E036CB676
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
Manifest number: 03EF
Signing time: Tue 12 May 2026 18:01:00 +0000
Manifest this update: Tue 12 May 2026 18:01:00 +0000
Manifest next update: Wed 13 May 2026 18:01:00 +0000
Files and hashes: 1: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl (hash: mslcGTrLc64bsW8HklOJui/O3el1OfcuY6M0tGClJxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:6d:aa:ea:ea:0e:73:6a:80:ab:6e:03:6c:b6:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Validity
Not Before: May 12 18:01:00 2026 GMT
Not After : May 13 18:01:00 2026 GMT
Subject: CN=4475260c5612a4b2566ab12c74b726da91a8486a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5f:43:d2:7e:ff:42:ab:55:04:53:43:86:f5:
3e:85:26:74:ae:86:f5:f5:e0:5a:d8:c4:6a:f6:a5:
08:76:f2:26:42:63:b0:2c:ed:51:40:bd:c9:ce:8c:
20:5b:f3:1a:79:a2:3a:76:21:23:68:33:1d:b0:46:
33:9c:a2:10:65:07:9b:46:ef:a9:58:ca:87:6f:77:
54:be:ce:e8:56:b0:ce:21:c1:54:4f:b8:fc:3c:f2:
8a:2e:47:4e:1a:62:7a:f4:83:4d:1e:b1:7a:59:fc:
88:dc:90:7c:48:9a:26:75:f4:0f:70:f6:49:49:5d:
83:da:12:70:22:1d:68:f6:d1:5f:f2:f3:62:9a:88:
2a:c5:ce:66:a1:74:19:27:70:2b:9d:4f:08:c3:a7:
35:90:a9:ab:20:33:26:1a:bb:1f:84:df:1b:23:b3:
96:0d:71:a0:c9:2b:ca:96:20:5a:a2:6c:59:f4:58:
4d:94:d7:d7:58:a8:5c:c7:77:cd:96:91:71:e8:40:
32:55:73:0f:87:31:e1:15:06:95:d0:d4:b0:5c:03:
8c:79:2e:f4:a2:f4:6c:43:0b:da:fe:dd:8d:35:ed:
88:54:36:52:44:8d:80:b1:95:43:0a:4d:23:d8:e5:
8e:49:a8:80:95:93:b2:dc:fb:33:f3:23:d9:44:e1:
2a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:75:26:0C:56:12:A4:B2:56:6A:B1:2C:74:B7:26:DA:91:A8:48:6A
X509v3 Authority Key Identifier:
keyid:F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:28:b9:d8:97:d1:0b:95:1b:57:f4:0e:41:95:4b:ce:a9:60:
6c:e5:e0:d8:2d:d3:9d:df:50:64:4f:ad:e5:c2:27:d8:9f:ef:
7a:cb:75:6f:58:f0:16:84:a6:61:90:49:59:a7:af:f4:88:21:
14:53:8f:43:3b:f4:ad:3e:d2:27:89:1c:2e:bd:f2:a9:e9:81:
ef:cb:bd:ae:fd:76:f7:9a:e2:c0:b6:9f:ae:ae:e9:50:5f:83:
1d:f7:55:a1:0d:79:d6:07:50:b5:c6:e3:50:9c:da:56:4f:ac:
9f:1a:e7:c3:c9:8a:61:07:13:49:7d:de:46:42:17:b8:c4:31:
aa:54:69:d1:fe:5a:48:78:8f:4a:e1:63:ee:d7:41:74:57:fe:
6b:80:c1:88:b4:c3:42:3c:43:e1:00:bd:a6:11:1a:01:68:c8:
8f:b9:94:3d:ed:a0:fc:e1:ed:7a:85:74:ab:34:56:d6:df:09:
56:d2:e7:6f:0f:c0:66:87:88:51:5a:af:21:68:49:bd:2e:cc:
fc:ec:98:a4:4c:cc:1b:f1:ad:d8:28:63:aa:2a:d4:dd:7e:d5:
48:be:7b:01:03:1e:25:38:0a:5a:c4:fa:b1:0f:b2:3c:d1:e3:
d7:45:f2:d3:cc:e7:09:20:b4:97:93:c2:39:73:ea:c0:cd:f4:
b3:e3:ca:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:37 2026 by rpki-client