Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
File: 1KAH7S_gjUM-DwoC9DynrLJvWg4.mft (raw, json)
Hash identifier: 34B5Ov0Xkwl9YlXUB30pcyqnIQpfVH8u3UUK9tdH+oM=
Subject key identifier: FB:EA:16:0D:4D:32:A4:29:5D:F4:7C:7A:35:ED:19:37:0F:8D:7A:EA
Authority key identifier: D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
Certificate issuer: /CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Certificate serial: 019E1E6C5041CB0C7180BCF90570AC781546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
Manifest number: 074A
Signing time: Tue 12 May 2026 23:01:15 +0000
Manifest this update: Tue 12 May 2026 23:01:15 +0000
Manifest next update: Wed 13 May 2026 23:01:15 +0000
Files and hashes: 1: 1KAH7S_gjUM-DwoC9DynrLJvWg4.crl (hash: eWLutsWRvvl3OY5XGAEDTZeZMjmavMKSt9Fy84snXrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:50:41:cb:0c:71:80:bc:f9:05:70:ac:78:15:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Validity
Not Before: May 12 23:01:15 2026 GMT
Not After : May 13 23:01:15 2026 GMT
Subject: CN=fbea160d4d32a4295df47c7a35ed19370f8d7aea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:17:04:fb:5c:f3:85:20:2a:ee:2f:6c:0e:6f:
d7:3d:2f:0b:45:f4:ee:ff:31:1f:25:bd:70:d5:d9:
4c:85:27:9a:60:89:dc:1c:3a:b1:c1:2e:f5:5f:b0:
a1:bf:d6:38:a8:70:b9:e0:a8:25:46:b2:2d:bd:30:
e1:e0:9d:d5:e2:d1:d7:d9:91:2a:66:71:df:2c:59:
68:1f:9a:48:23:c2:4b:0a:6c:99:bd:bf:f3:64:69:
57:3e:05:db:50:82:78:b5:81:c6:bd:06:9b:e1:99:
09:4b:09:19:7b:a5:29:2c:82:04:62:9c:d9:fd:3a:
a8:33:5a:44:d9:82:95:b3:17:82:c6:94:68:48:45:
16:5c:fb:1c:9b:f5:bf:d9:ad:71:9a:30:d9:21:fa:
4e:6a:6e:ba:d0:94:f9:1b:92:f2:df:39:16:cb:c3:
13:d7:ed:73:f8:43:f6:88:e8:b6:c4:cf:43:88:e1:
c5:af:f3:a8:6e:f5:a7:8a:bd:4d:dc:83:39:6c:44:
a5:43:96:30:3c:e6:90:bc:6f:b1:62:7a:3a:82:8c:
ac:39:0d:8b:c8:19:32:6e:ca:ba:2a:b7:e3:8f:2a:
5f:9a:64:85:f5:ca:0d:8f:17:a2:05:84:a0:45:2d:
62:d5:71:e8:50:90:53:9e:70:54:45:e0:f9:61:fa:
21:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:EA:16:0D:4D:32:A4:29:5D:F4:7C:7A:35:ED:19:37:0F:8D:7A:EA
X509v3 Authority Key Identifier:
keyid:D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:70:cc:50:0d:40:fe:55:02:3b:b0:1c:22:2f:2a:b4:9f:21:
12:4d:ab:da:e3:53:74:90:ba:6d:d5:18:d4:7a:5a:f6:1a:d1:
2a:8d:e7:e7:d4:71:5a:95:f3:42:8c:da:77:76:ba:f4:7a:e9:
e4:f0:ef:39:85:cd:d4:54:1b:3b:84:59:a0:3a:69:79:ee:22:
6d:20:78:d5:bf:89:01:cb:51:da:b6:4e:fd:bd:2b:43:c0:b4:
c8:43:de:9f:3c:de:f5:ee:83:77:2d:36:d1:3f:1a:6a:93:e1:
29:85:9b:db:49:a3:0f:53:de:04:87:a3:7c:f4:08:e7:92:69:
92:da:6e:77:a1:a7:55:98:1c:d3:67:ad:ec:5b:ef:1e:18:1d:
04:9b:e8:62:79:91:ad:12:95:0a:d8:9f:ed:c9:47:8b:d6:d1:
f7:f0:27:3e:56:56:da:78:f2:ee:6f:2c:2f:a5:39:f7:2c:0c:
c5:17:42:3b:84:47:58:39:07:af:58:8d:90:62:87:53:c1:e2:
23:84:86:b4:e7:48:bb:88:c3:26:37:42:df:03:11:6b:15:17:
c1:31:7c:0d:c2:c4:8d:c2:77:67:10:d4:fd:b5:a9:a5:2f:b5:
ae:ca:a2:30:c2:d6:d2:13:03:53:82:a1:4c:8e:22:74:87:59:
87:d1:e2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:33:34 2026 by rpki-client