Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier: h/aL8147cCPTiesIun9PNY8GX0TMz4d5dNI+N/hcEc4=
Subject key identifier: 03:98:E8:6F:66:80:D6:64:E8:E9:42:37:E4:19:6C:AD:A9:D2:98:9F
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 01A0D012E0BB721C3DF20507AA5B2BC4C1F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number: 1A6C
Signing time: Wed 23 Sep 2026 21:01:33 +0000
Manifest this update: Wed 23 Sep 2026 21:01:33 +0000
Manifest next update: Thu 24 Sep 2026 21:01:33 +0000
Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: KT2R7fhMojTdcee/2bon1uwpXXkL/5hbYW7hVD/6uXk=)
2: EwSHe_xf-jqepkCFLSHCwEgr_AI.roa (hash: RC+AV7VwTqdY5tCu6Twk85UOef4oSKz04Y5st23WBE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:12:e0:bb:72:1c:3d:f2:05:07:aa:5b:2b:c4:c1:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: Sep 23 21:01:33 2026 GMT
Not After : Sep 24 21:01:33 2026 GMT
Subject: CN=0398e86f6680d664e8e94237e4196cada9d2989f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8f:84:69:8b:60:4b:fb:ec:72:8f:37:77:e6:
84:ce:b9:9a:6a:78:3c:55:33:dc:49:8f:5f:c9:0a:
a1:4b:a7:e9:09:9e:db:df:9f:44:04:47:04:f9:3d:
2e:98:0d:0c:43:f8:52:84:05:c2:0b:bf:7d:f7:42:
64:52:0b:f0:ae:65:43:e0:a4:07:00:9f:79:f8:57:
de:a3:c5:f3:44:1c:c8:92:d5:fe:4e:f9:cb:64:e7:
5c:85:f6:26:8f:20:3e:34:1c:1e:81:89:2c:25:6f:
d3:7b:20:b1:31:c3:7c:40:a5:17:d0:cc:a8:bd:04:
a1:7d:50:a9:f5:28:09:85:6f:21:23:8e:eb:86:95:
a9:8b:80:45:ab:36:b9:ac:6d:8c:19:9a:33:95:7e:
43:8b:43:ac:9e:90:d0:ce:89:fc:fc:80:76:5d:b6:
2d:9f:03:4d:4f:a6:81:3e:99:7f:5b:c0:80:a2:ad:
42:d0:02:4d:fb:09:c1:6a:04:41:9e:dc:e9:2d:08:
ac:3d:98:d2:36:70:09:33:8c:0c:4d:fe:08:a5:61:
e0:9b:54:30:79:37:39:ee:53:da:4d:e3:7d:29:de:
be:a8:a3:7c:6f:cd:83:8f:8d:e7:40:18:5c:cf:92:
33:0b:85:a8:0d:18:f2:81:9d:db:44:b7:dd:d9:8c:
67:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:98:E8:6F:66:80:D6:64:E8:E9:42:37:E4:19:6C:AD:A9:D2:98:9F
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:01:0b:75:3f:05:d5:5a:9e:be:63:b8:50:3e:37:46:16:6a:
06:82:e0:bf:e3:83:f0:f8:0f:b9:4c:a8:1f:8e:b3:9c:97:b8:
2b:a8:69:32:86:a3:2d:2f:74:f5:81:bc:c9:6c:3a:6d:74:91:
42:a8:bf:4d:33:a4:27:af:47:5c:75:d9:8a:3d:41:25:81:f9:
60:f0:f5:da:0b:00:c6:2e:8c:eb:fd:2c:5a:fa:50:96:44:98:
53:fb:1a:55:bf:fd:f1:3f:99:63:83:c9:51:6d:87:69:a2:84:
2c:3b:06:6d:58:c2:d3:47:3d:ba:8f:fe:30:50:a9:5b:44:68:
63:e0:b2:f8:4d:bc:d9:ce:87:6c:6d:5c:e1:5a:b1:eb:58:1f:
73:01:c9:d4:a0:0a:81:ad:d3:9e:ff:96:17:0f:d0:b1:66:53:
f7:bc:54:c8:63:b9:5e:bd:44:99:ee:1f:52:ce:70:d4:42:2f:
32:6b:02:43:54:75:6f:79:19:e7:cf:8a:6e:38:ff:d1:41:2e:
c0:03:db:f9:9e:61:64:e4:bb:56:cc:21:a1:34:81:29:f7:1a:
e5:31:92:fd:c8:f0:b3:e0:34:0c:79:25:8e:e1:92:b2:14:10:
74:28:ef:ea:81:0c:de:b9:e8:ee:53:ea:7e:a8:1e:ad:60:12:
fd:ea:7e:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:54:24 2026 by rpki-client