Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
File: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft (raw, json)
Hash identifier: exekD/hgPJRaV/42uuhVrj3r1TL/kPp3jxG4KtcNA1s=
Subject key identifier: 91:C8:D5:56:46:F7:6A:C3:7B:0D:F8:11:6D:E1:BC:65:52:CC:8B:9B
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Certificate issuer: /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial: 019F8ED9D41624E05848676FD1FD23F506DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
Manifest number: 01D7
Signing time: Thu 23 Jul 2026 12:01:07 +0000
Manifest this update: Thu 23 Jul 2026 12:01:07 +0000
Manifest next update: Fri 24 Jul 2026 12:01:07 +0000
Files and hashes: 1: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl (hash: sOtZ3U63S41sRkdQZVmDo8eIrjKaqT3+bGYMNF6a3eM=)
2: pr2JOR_hTL_Euy3Kq36KF2V_hMc.asa (hash: qKcjHgns7GU4yyCWIsDYgUvQUyej5zuR3y+K1f0K1gs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 12:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:d9:d4:16:24:e0:58:48:67:6f:d1:fd:23:f5:06:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Validity
Not Before: Jul 23 12:01:07 2026 GMT
Not After : Jul 24 12:01:07 2026 GMT
Subject: CN=91c8d55646f76ac37b0df8116de1bc6552cc8b9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:61:b7:92:27:3b:6a:81:3f:ca:6a:6e:73:90:
57:16:cb:3b:54:7a:92:fc:46:74:9f:21:72:b8:b6:
a4:c2:25:32:8b:16:98:d8:2d:31:de:18:40:4f:7a:
e6:db:65:a5:32:68:33:91:9d:e0:b4:0b:d4:7e:fa:
d4:fb:af:4e:cc:4f:25:99:6c:b8:e9:4b:f1:d9:b1:
4c:8f:f8:f7:e1:d4:a7:00:2e:df:d3:f4:30:60:50:
91:0d:a5:a7:d5:2d:2f:7a:b7:9c:c9:5c:11:f0:e7:
92:b5:e2:70:a8:16:e0:0d:c0:88:2a:31:66:c0:5c:
e2:16:98:51:9a:cc:85:c8:a3:33:d8:6a:77:48:d1:
da:53:b8:60:cb:45:66:10:8d:69:60:64:b9:6f:ab:
c7:78:dd:8d:13:3a:c1:05:b2:bc:71:91:6c:6a:0a:
4c:7c:ca:c5:c8:0a:0e:a9:94:27:42:59:99:46:b8:
92:02:0b:47:ad:85:75:56:11:19:58:a9:f3:b9:e4:
b8:7d:59:36:e3:7d:40:13:b2:23:a7:34:a9:05:d1:
5b:fe:32:e3:4f:c3:69:88:e7:7f:f6:3f:fb:8c:00:
24:25:20:c9:5c:67:88:7a:26:c5:aa:df:c9:f4:5d:
ea:da:d7:e1:a4:66:a0:d3:c9:34:b6:69:27:ee:1f:
83:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C8:D5:56:46:F7:6A:C3:7B:0D:F8:11:6D:E1:BC:65:52:CC:8B:9B
X509v3 Authority Key Identifier:
keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:81:b9:e9:79:ad:56:70:89:2f:08:d7:f3:59:06:0d:fb:24:
5f:bc:a1:b2:a5:c9:22:c3:88:94:42:29:ef:a6:3a:da:ac:70:
61:58:df:8f:46:b6:e4:00:e4:76:4b:c3:78:54:5d:c2:cb:60:
6a:a8:65:da:b6:d7:d2:4e:a7:9f:54:c8:cd:bd:3f:14:97:02:
c9:57:00:ef:1a:7b:0d:54:51:0d:bc:6a:28:67:03:b5:46:1c:
95:63:ad:5d:a8:6c:7e:53:e5:26:03:a0:0e:5a:f1:6f:39:8a:
37:30:10:8e:62:83:a8:2a:42:b7:e1:22:d7:96:72:0c:7c:cb:
2b:44:b5:79:6c:19:b4:6d:e7:9f:1d:91:10:b5:81:ce:70:c9:
f0:2d:e0:dd:72:13:ce:2b:b3:34:18:48:74:84:5c:9f:8b:ea:
f4:6f:61:b6:02:7a:96:70:85:1b:92:f1:32:ee:94:ef:a0:ee:
46:9f:01:fc:45:33:dc:63:2c:ad:72:93:82:c6:07:b0:9f:23:
f7:35:47:0d:5a:70:80:9a:3c:da:bb:bf:89:3c:24:c6:11:26:
37:3a:51:d2:4a:a3:8b:df:20:5d:b5:cd:0e:12:33:f1:dd:a8:
01:0a:2f:5a:fa:6a:e7:6c:5c:1c:54:67:d6:24:54:47:6d:bb:
74:8e:b1:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:29 2026 by rpki-client