Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
File: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft (raw, json)
Hash identifier: 2pdZo2a0NpoPpfct9nQcyp9DlxRqoRXzRmiI/2pSfyI=
Subject key identifier: 8E:89:29:18:A4:4A:28:27:36:CC:AE:86:E2:C2:30:E2:33:28:11:F7
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Certificate issuer: /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial: 019D3262D5DF30F4E60177654852B22A2B5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
Manifest number: 91
Signing time: Sat 28 Mar 2026 03:00:31 +0000
Manifest this update: Sat 28 Mar 2026 03:00:31 +0000
Manifest next update: Sun 29 Mar 2026 03:00:31 +0000
Files and hashes: 1: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl (hash: 9YxlBdc3K4Q9kObZ3ZZ3DtRI+5L2dHczbAzpiZ7qbNg=)
2: d1Tx0BRhO0A755H4u6noDy2gPLs.asa (hash: WM47Vnnr7aAw05benty80wMA9v/i6b9NhWin81FN414=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:62:d5:df:30:f4:e6:01:77:65:48:52:b2:2a:2b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Validity
Not Before: Mar 28 03:00:31 2026 GMT
Not After : Mar 29 03:00:31 2026 GMT
Subject: CN=8e892918a44a282736ccae86e2c230e2332811f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3f:a2:04:b4:75:33:0d:48:ec:83:d5:62:8c:
cc:6b:d4:eb:67:3d:db:b8:73:c3:94:a3:ed:08:fc:
39:85:65:bd:23:2f:19:48:38:8a:24:59:50:e1:2f:
1c:c5:ad:2e:58:c5:e1:8a:a2:76:50:ad:7e:14:4c:
84:41:73:de:0a:a4:29:7c:72:0f:c3:ea:6f:a5:80:
3d:74:55:ab:b6:c8:85:01:94:c2:7b:35:60:79:17:
b2:5e:38:9f:50:c7:66:a2:12:27:cc:42:16:41:e6:
8f:58:6f:0c:f4:25:c6:9e:5c:f3:70:19:63:df:33:
c9:f7:6f:e1:1e:ee:ae:a7:91:a3:0f:44:4f:f2:ad:
4e:01:c3:09:91:0e:74:f5:74:53:db:1a:c8:d3:70:
8f:7f:bc:40:71:15:42:6f:f1:e4:c6:4c:61:70:a4:
50:00:ca:a6:5d:59:d4:25:6d:33:2d:ef:15:75:20:
9f:25:27:4c:07:38:da:0b:d4:ed:21:62:67:8f:c0:
e4:e1:06:1d:7d:e9:23:06:61:85:c7:b2:1e:84:87:
b5:59:7f:9c:cf:f9:78:06:d0:fb:59:f8:f8:cd:ce:
33:fa:40:af:3e:2f:34:43:9c:ee:c7:a3:20:e9:61:
c7:fe:8d:10:21:4c:78:24:ae:7c:07:77:92:90:83:
b8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:89:29:18:A4:4A:28:27:36:CC:AE:86:E2:C2:30:E2:33:28:11:F7
X509v3 Authority Key Identifier:
keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:37:70:c0:12:8d:6e:32:ab:27:8a:84:66:95:78:4e:44:7a:
7f:58:6d:76:67:51:e4:50:4d:5e:b1:f3:8f:3c:88:31:1c:2d:
b6:bb:59:a2:61:0a:24:8c:0a:a8:2b:6a:fc:2e:b3:9a:78:af:
1c:d4:7c:65:b7:8d:9b:2b:9e:3f:d0:48:58:c6:00:6b:b4:0c:
b0:1b:a2:eb:e9:df:05:9a:9a:7a:38:3c:61:14:27:3a:36:c5:
da:01:c3:12:b7:ef:58:ab:33:e0:39:5c:0b:a3:6b:c6:86:4d:
65:32:0f:06:2b:da:b9:60:f3:ab:a1:2c:03:01:0b:ae:39:48:
ba:31:7b:03:5c:8d:99:aa:e8:8f:d0:c2:a9:fa:e7:5e:d9:e6:
2b:01:6d:2d:85:29:16:13:00:50:be:f4:98:5d:82:b9:e4:eb:
b8:97:d0:38:bb:f6:2e:5a:aa:1c:7e:23:35:42:b6:7c:aa:a0:
2e:50:be:01:fa:5d:f8:87:90:7b:18:7f:c2:0e:7c:1a:80:0e:
80:6b:c2:a5:7d:0d:7a:67:e8:1b:d9:37:2e:d8:74:f8:6a:b5:
28:a7:a9:4e:5e:af:b6:d3:8d:98:f2:b2:ce:42:0e:86:e5:d7:
44:55:7e:f5:55:33:e2:41:06:f0:b0:eb:f2:52:a2:7a:4f:a1:
ed:0d:06:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:48:07 2026 by rpki-client