Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
File: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft (raw, json)
Hash identifier: uwzhO2TPjeYaB2/m+upbstO8GSK147yQKrI+BBbKoRI=
Subject key identifier: AF:27:7A:8F:65:39:07:AC:4C:56:49:90:E2:46:D6:0B:1F:E1:32:15
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Certificate issuer: /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial: 01A0D83BB66F3A4526CEB621EB341744D6D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
Manifest number: 0285
Signing time: Fri 25 Sep 2026 11:03:06 +0000
Manifest this update: Fri 25 Sep 2026 11:03:06 +0000
Manifest next update: Sat 26 Sep 2026 11:03:06 +0000
Files and hashes: 1: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl (hash: YCeBwde2BmSB6usOokJ94k7bofV1OVR3nZOEpNXTLtE=)
2: dWQzDZpVB7OiM0vZm0oBe4UUrds.asa (hash: g6XCHoueCq216JgmRUZR1LKQhV53b5OQSgUBfD4mvXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:3b:b6:6f:3a:45:26:ce:b6:21:eb:34:17:44:d6:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Validity
Not Before: Sep 25 11:03:06 2026 GMT
Not After : Sep 26 11:03:06 2026 GMT
Subject: CN=af277a8f653907ac4c564990e246d60b1fe13215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:51:72:29:fe:8d:f1:86:7e:48:ec:fd:fc:b2:
cd:54:3c:27:eb:a5:ac:d1:6a:d5:a3:1f:8f:43:4d:
7c:21:02:b4:4c:72:1b:5a:22:70:a5:4b:ef:df:ff:
81:57:94:09:2d:91:1c:5c:84:ff:f2:cc:02:ba:50:
08:0c:f3:2c:3f:da:89:9d:21:b8:90:c0:9c:6e:ff:
63:b4:20:7c:72:2d:3f:af:6e:18:41:65:40:9a:b4:
25:06:76:f3:d4:50:6d:10:67:e1:aa:b9:b7:e4:2e:
44:f1:e9:ba:2a:fc:84:2b:02:6d:bf:31:7d:7a:85:
79:53:72:18:5f:dd:6e:66:c2:14:ab:4e:ba:3b:33:
f4:95:fe:35:9b:bb:0f:fc:64:28:93:53:c4:b1:74:
72:45:c1:ea:c8:ae:c6:e9:ec:96:36:eb:82:db:17:
cc:f4:6b:79:e0:65:d1:03:7d:00:95:2a:39:91:03:
0a:44:fd:b9:f3:51:c4:54:3d:72:39:4a:75:24:64:
7d:58:37:2e:14:2f:d5:fe:60:ed:66:87:6d:ff:e3:
e7:96:28:35:71:46:a1:3c:f1:cb:2f:99:f9:25:71:
4d:df:89:a9:15:e2:43:67:b3:4c:06:fd:08:0f:1e:
d6:f5:f3:41:d6:59:47:98:9f:ab:94:0a:10:08:e6:
35:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:27:7A:8F:65:39:07:AC:4C:56:49:90:E2:46:D6:0B:1F:E1:32:15
X509v3 Authority Key Identifier:
keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:83:7c:3d:cf:bd:93:1f:3f:fd:8e:69:a6:0d:5e:b8:df:9d:
66:41:98:a7:94:5c:47:8f:ae:dd:c0:c6:d9:8c:a0:8a:16:e8:
3d:de:e5:ce:8a:d5:b9:d6:09:31:54:37:4a:84:f9:1b:72:b6:
68:d1:d4:b9:c9:76:25:df:93:24:9a:ab:1a:da:1e:27:35:18:
7d:27:51:c6:c1:9e:7b:4b:5a:b9:a8:a8:a4:c0:d9:1e:e3:e7:
53:d5:b0:a8:96:89:7d:e7:ae:39:e3:ae:e4:59:0c:89:ca:9e:
b1:cd:04:5d:49:32:8c:1e:0c:f6:56:4c:fd:b2:37:6d:95:3e:
1a:bd:46:5b:bc:e2:a8:05:ae:50:2e:23:a9:8b:9b:1e:d2:52:
3f:21:9f:f8:4f:6d:9b:bb:4a:7b:75:c5:49:20:3b:fc:4a:f1:
54:f1:da:6b:c0:f1:eb:72:5f:44:e5:ca:e6:a6:e4:6d:20:87:
b2:91:36:b4:70:f8:56:aa:7d:80:bc:2d:37:59:27:59:a4:3f:
d3:75:d8:61:13:5f:98:b9:f8:d9:8f:fe:0b:89:d6:7f:b4:61:
f1:93:66:1a:19:4a:01:3d:95:96:00:87:63:68:7c:eb:db:9c:
b0:00:1f:0b:a4:02:b2:85:87:06:78:66:a4:e9:d9:d7:95:8e:
15:f4:b7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:35:01 2026 by rpki-client