Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
File: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft (raw, json)
Hash identifier: BYWkRD4nLi1hPAfa5+M4oGvM4MLEqRY+CXKVrJ6DUNw=
Subject key identifier: EE:79:EC:6D:BA:AB:C8:2B:95:71:D9:FD:F3:1D:15:CD:37:23:E5:A5
Authority key identifier: F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
Certificate issuer: /CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Certificate serial: 019D281644B0396C277F8045D861FD40F933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
Manifest number: 0370
Signing time: Thu 26 Mar 2026 03:00:41 +0000
Manifest this update: Thu 26 Mar 2026 03:00:41 +0000
Manifest next update: Fri 27 Mar 2026 03:00:41 +0000
Files and hashes: 1: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl (hash: fDhShElh/o1dLGaZ6AnB0pUlR65v2ROVCC2DSt0/2tM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:44:b0:39:6c:27:7f:80:45:d8:61:fd:40:f9:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Validity
Not Before: Mar 26 03:00:41 2026 GMT
Not After : Mar 27 03:00:41 2026 GMT
Subject: CN=ee79ec6dbaabc82b9571d9fdf31d15cd3723e5a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:8d:59:b0:49:29:4d:2d:11:de:cb:8f:31:54:
a4:07:1e:e8:fe:f9:b1:c9:6e:a5:bd:56:66:5f:80:
14:9a:d1:fe:f0:6d:71:25:ce:16:c6:a1:87:be:68:
c5:0c:e2:a8:c0:e6:d0:7a:a1:da:99:16:5c:57:f3:
69:80:1e:c9:a6:4f:bb:03:de:ca:1b:e1:b3:59:65:
88:e7:30:82:c3:2f:fe:17:88:15:0c:b3:5d:e9:85:
f4:40:d6:4a:e2:df:3a:fe:6c:9d:34:40:b7:54:ec:
cc:64:42:11:0d:66:1e:8b:2f:8b:2e:aa:c3:19:c0:
69:25:a9:1a:83:d1:2f:04:75:3d:8a:24:02:99:38:
86:ad:dd:b4:18:4d:ad:2f:6c:79:57:5e:54:9e:b2:
36:da:ce:e9:90:15:07:98:52:55:5d:60:43:34:e6:
99:71:49:d8:00:06:d3:5d:aa:a1:4d:f2:cf:2c:4c:
cf:75:e1:c5:05:3a:00:06:5a:e4:88:7d:38:10:95:
d5:33:0a:73:22:d2:ad:c3:16:2a:76:95:6b:5e:6f:
65:9e:4b:6c:8d:ad:e1:d8:e0:39:25:4a:67:4f:8d:
0b:a5:81:a6:3f:2d:14:97:1b:8f:32:4c:0f:82:24:
ef:92:40:8d:c6:f3:6b:67:3c:a2:73:c8:18:da:a9:
ff:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:79:EC:6D:BA:AB:C8:2B:95:71:D9:FD:F3:1D:15:CD:37:23:E5:A5
X509v3 Authority Key Identifier:
keyid:F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:dd:ef:e2:15:b1:c4:80:27:e4:25:c5:ac:7f:b2:d8:ee:ab:
18:20:7c:01:99:b4:2f:f2:0b:47:74:c5:16:af:ee:16:03:66:
a0:1a:7f:0f:16:64:4e:2d:0a:13:5a:6f:b9:80:88:d8:05:c8:
7a:de:57:81:d2:35:b1:1c:cb:e3:84:09:d2:47:16:67:0f:1c:
9e:32:7d:59:94:e1:01:92:88:40:16:72:93:e0:ad:50:91:54:
d4:b3:e8:18:8c:ae:31:a2:fe:ef:54:a1:9a:21:18:46:78:ed:
7c:68:f7:a5:f0:29:6a:a6:ce:8a:26:4c:2e:5a:9a:34:92:67:
2d:93:ea:60:cc:da:ef:3a:0e:cf:33:25:eb:fe:b9:5b:4e:32:
e5:c6:71:b4:6e:62:dd:fa:f6:55:58:81:0d:39:b8:b7:41:58:
99:84:b7:57:24:39:d6:ad:67:60:91:7c:aa:09:1f:67:3a:09:
8c:99:ee:98:43:4b:0e:81:74:1d:90:01:7b:ec:76:0d:d2:15:
d4:be:64:b8:5f:42:b0:71:49:75:6b:0e:2d:84:73:f2:53:cb:
78:3d:ca:b2:33:a1:9c:56:9b:9b:b8:28:23:5f:50:d0:35:39:
ac:e2:84:21:c8:95:52:fc:36:6c:e5:be:5b:13:e1:69:9e:cf:
54:36:71:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:23:45 2026 by rpki-client