Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier: N2xdbFgSyP6JS0gkI99Zf4XDBDBZ5aHbPxGFrygdIZc=
Subject key identifier: 61:CE:66:58:4E:DE:71:8C:28:FD:3A:B7:E7:7B:F8:22:14:65:10:08
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 019D29607C5843B47AE3756F6FA9F36B6F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 09:01:22 +0000
Manifest this update: Thu 26 Mar 2026 09:01:22 +0000
Manifest next update: Fri 27 Mar 2026 09:01:22 +0000
Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: 9xtc6n0z+qV1PNJoAXneocgiNbko6/d/ByCfsdEMkcw=)
2: EwSHe_xf-jqepkCFLSHCwEgr_AI.roa (hash: RC+AV7VwTqdY5tCu6Twk85UOef4oSKz04Y5st23WBE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:7c:58:43:b4:7a:e3:75:6f:6f:a9:f3:6b:6f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: Mar 26 09:01:22 2026 GMT
Not After : Mar 27 09:01:22 2026 GMT
Subject: CN=61ce66584ede718c28fd3ab7e77bf82214651008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4b:ff:44:e3:5e:d4:3b:70:07:d6:7e:f9:a2:
04:4e:09:3f:7b:f6:24:b4:82:d8:a4:69:de:1f:68:
55:26:4d:85:3f:ed:6c:fd:d1:c9:5a:00:19:8f:96:
15:98:6e:e0:66:93:bc:c2:b4:2e:14:70:de:81:0d:
0d:54:61:6f:3d:69:f5:e5:70:e9:42:52:02:9d:b4:
8f:d1:42:0f:c8:ba:27:26:55:15:99:89:ac:ae:7d:
32:24:3b:45:3c:10:fd:13:53:cc:3f:60:e8:0d:b0:
95:a8:71:f5:51:45:c5:3a:6e:db:35:1b:59:84:6d:
1c:b3:8a:4f:c6:9f:3d:b5:fa:0b:c2:0a:db:5a:a0:
d9:66:4c:12:e5:96:05:25:9d:4a:a1:b3:d4:8c:cf:
70:7f:dd:9b:62:e7:b4:f6:16:69:9a:59:ce:84:e8:
05:ef:5d:5b:d5:a8:8d:1f:dc:d0:0d:19:40:e1:d7:
77:22:46:73:44:4f:c9:54:08:60:10:38:ec:16:43:
de:0f:2f:eb:ce:e9:27:72:46:8a:ce:47:9c:a1:da:
f8:0b:20:d1:d6:a0:a4:ee:32:47:5c:a9:15:fd:d2:
5a:29:fa:1b:a2:03:dc:65:2a:a8:f2:98:11:33:02:
0d:bf:fe:b0:71:ef:08:c3:2b:e3:fc:2a:cb:b8:12:
9a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:CE:66:58:4E:DE:71:8C:28:FD:3A:B7:E7:7B:F8:22:14:65:10:08
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ed:6e:6e:42:67:fe:d4:b1:df:84:3c:76:9f:8f:58:1d:7f:
b7:6f:5d:04:26:cb:e8:de:d0:86:89:c1:4e:69:ab:ff:1e:bc:
3a:c4:09:ca:e4:da:41:d9:dd:75:17:10:e2:b4:62:03:d8:ce:
0d:aa:da:34:ef:59:6a:8d:2d:f5:be:72:4f:1b:89:c5:00:fe:
b3:d9:25:8a:4c:a2:1d:31:7e:ed:cb:ad:e7:b6:eb:96:ba:7d:
5e:07:a7:69:dd:9b:d1:cd:70:a3:2b:9a:1c:4b:ca:5f:11:ba:
d3:0c:43:5f:d1:71:37:2b:bb:9c:c7:25:3c:61:17:d9:e5:f1:
66:47:07:75:97:51:56:59:ba:e9:ca:b3:24:53:06:be:cd:43:
46:f5:bf:5b:19:d4:13:57:ea:e0:c0:10:e2:f7:f6:da:62:5d:
d2:6d:db:44:39:d8:ac:82:a2:c9:9d:ae:9d:64:c4:14:f8:4f:
7a:e1:2b:53:e8:a3:5d:c9:07:82:ac:76:d3:8b:1e:68:d3:6f:
da:4e:64:bc:54:8e:e1:36:78:50:30:44:f4:c9:4a:0f:54:86:
f4:b5:8c:f7:83:6e:0a:a6:85:12:3f:47:f7:cc:68:d1:6a:83:
cf:c0:64:be:c4:11:38:a5:11:f9:c3:50:f7:65:3f:b4:92:00:
eb:90:62:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:02:44 2026 by rpki-client