Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier: PkjMKr4SlkDoIAkreZfro/1c+d8l4VnuzwqPkTImpdI=
Subject key identifier: 5B:F9:A9:FD:92:BC:18:4E:4E:49:9D:3D:DB:5E:CA:D4:7B:6F:E3:A1
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 019E1CB4F928710059541B7A9941502939B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number: 1906
Signing time: Tue 12 May 2026 15:01:22 +0000
Manifest this update: Tue 12 May 2026 15:01:22 +0000
Manifest next update: Wed 13 May 2026 15:01:22 +0000
Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: Lan5lUHVrCQxnKZ6VzUm7m9Yx5wpIPl80W13LgwCVhM=)
2: EwSHe_xf-jqepkCFLSHCwEgr_AI.roa (hash: RC+AV7VwTqdY5tCu6Twk85UOef4oSKz04Y5st23WBE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:b4:f9:28:71:00:59:54:1b:7a:99:41:50:29:39:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: May 12 15:01:22 2026 GMT
Not After : May 13 15:01:22 2026 GMT
Subject: CN=5bf9a9fd92bc184e4e499d3ddb5ecad47b6fe3a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:4d:ab:20:e2:1d:8d:34:8d:57:b3:57:70:
79:c0:c5:de:fc:53:5f:39:ad:e8:0a:4a:e6:b6:bf:
c2:52:a7:8c:36:79:c3:d9:b9:11:4c:5a:d8:4b:2d:
f5:8f:7e:e4:c0:1e:4c:9e:a9:07:79:fe:f9:10:c6:
71:c0:f5:91:76:f2:7d:c3:ac:ad:63:1e:ef:6f:d7:
cc:47:06:37:6c:a1:7a:5a:f3:3d:d3:31:7d:c3:6f:
3f:be:94:a5:59:8e:9c:b2:1b:24:a8:52:58:21:f0:
c3:be:58:ea:ec:b3:0a:ec:19:88:c6:06:38:9a:6d:
20:da:57:f9:e4:4e:f0:ed:26:83:d9:c8:a8:3b:e4:
c5:b1:e4:18:89:7a:01:c6:07:dd:69:6b:2b:8c:55:
62:ed:48:12:1f:9d:c0:60:aa:e8:9e:75:93:9f:0f:
5c:fc:bc:42:6a:a2:bc:c4:30:a4:ad:25:b0:3c:0b:
09:9b:73:b1:09:22:63:43:52:55:74:f4:21:b4:da:
b5:34:3f:45:e9:a3:8b:21:fe:b0:67:1e:85:11:3d:
13:1b:95:5c:9d:75:d6:77:6c:96:ad:1d:e6:c0:ea:
1a:e4:3e:17:7b:b0:c1:c3:90:86:26:6d:1e:ed:80:
66:33:3a:bb:4e:d2:ba:21:72:da:c5:84:a8:14:66:
c5:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:F9:A9:FD:92:BC:18:4E:4E:49:9D:3D:DB:5E:CA:D4:7B:6F:E3:A1
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:02:93:cc:d4:40:fe:c8:eb:6f:4e:a9:30:0b:88:c2:d2:cb:
11:af:2f:40:6d:aa:35:be:1e:7f:4c:6e:21:5b:29:bf:5c:85:
0c:6f:9f:b9:70:e3:79:18:82:28:b4:e2:46:e7:31:bb:1c:97:
f2:9c:90:76:c8:75:52:a1:79:1e:09:56:e9:71:22:46:a8:6a:
ec:95:ae:5d:44:e6:68:d6:15:d9:2e:7b:9a:19:68:52:5e:46:
ab:90:5b:4e:b1:b3:21:bc:56:23:21:61:c1:0a:0c:88:20:73:
86:65:43:96:39:02:63:95:c5:4a:18:60:f9:37:da:5f:c4:0b:
98:ea:67:67:22:62:09:d1:48:3c:36:11:9d:09:06:7d:83:92:
e3:ed:58:85:c9:05:ae:02:6d:dd:b6:8c:05:bb:87:68:61:fa:
7c:de:1d:bf:01:3f:84:53:2b:b6:c7:2d:44:2c:a7:d9:fa:9c:
0c:bb:60:8c:c2:1f:94:28:8e:39:d4:51:f6:d6:89:e2:4f:48:
27:55:ea:fa:24:84:4b:8b:ec:a8:f1:b5:ff:bb:00:a8:8c:ee:
27:35:b0:1d:76:40:68:06:93:28:c5:96:41:91:aa:6f:e8:4d:
c8:49:3b:43:38:9c:de:d6:c1:33:56:20:e4:76:c9:db:47:94:
ef:7d:20:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:04 2026 by rpki-client