Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
File: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft (raw, json)
Hash identifier: OWUtcm3MzcLn8zzDl5SXn4XYJtiC6vlrJuGHtRzWjWs=
Subject key identifier: DA:C0:65:D0:80:F9:15:B5:9D:3B:B2:79:33:40:1B:02:14:65:CE:CA
Authority key identifier: F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
Certificate issuer: /CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Certificate serial: 019FA899DDF7267FE20061F7188045CC12A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
Manifest number: 1708
Signing time: Tue 28 Jul 2026 12:01:23 +0000
Manifest this update: Tue 28 Jul 2026 12:01:23 +0000
Manifest next update: Wed 29 Jul 2026 12:01:23 +0000
Files and hashes: 1: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl (hash: W7rZiuJ4+yl7fAOjaYo5dUx4ttfOK/CHmeVbuDpCQc0=)
2: xMdg9tf8PX3rEEL_NSkeA_5BMoE.roa (hash: Fuv5QDlGS8lpVHre1lLFiZmSKdkP1J409k7DUxmhGPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:dd:f7:26:7f:e2:00:61:f7:18:80:45:cc:12:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Validity
Not Before: Jul 28 12:01:23 2026 GMT
Not After : Jul 29 12:01:23 2026 GMT
Subject: CN=dac065d080f915b59d3bb27933401b021465ceca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:95:da:e8:a4:aa:cf:44:bc:84:79:ae:7f:f7:
f7:37:63:72:bb:a9:3e:e7:8e:5e:9d:0e:6d:14:3d:
c6:20:cb:da:65:2d:ea:0b:ec:4a:2c:dd:23:80:b0:
1a:99:f7:75:2b:cb:24:cc:7e:93:6c:fd:81:43:77:
22:1c:c8:93:a6:8e:cc:d9:38:c1:53:50:69:41:d1:
0e:84:34:d2:49:82:a7:21:b8:5c:8b:97:8a:64:0f:
30:fb:13:46:36:12:1f:aa:1e:07:ab:e3:85:23:7c:
94:2f:28:f4:08:99:80:1d:f9:c5:68:12:cc:8e:74:
ca:80:9f:c7:48:ad:8a:b5:32:67:43:77:a8:0f:3a:
33:a6:c7:1b:01:81:83:9a:39:fb:eb:6d:ca:9d:bf:
c7:6a:6c:63:99:19:ab:2b:4c:f0:c1:5d:f3:85:2c:
ce:8f:21:aa:25:e2:36:bb:26:60:25:e3:4e:e6:da:
93:9a:33:d2:2f:95:f6:3a:ad:eb:34:66:11:8c:fb:
a3:2d:0b:7c:da:8c:1a:72:e1:7f:ea:3d:b3:14:9a:
5f:b9:18:28:e4:05:c5:0d:b8:25:1d:ba:ee:77:76:
16:21:34:9d:f8:52:c0:de:0c:06:2e:74:75:4b:ef:
52:6b:cc:b8:66:26:79:51:81:f9:00:76:b4:e9:e2:
31:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C0:65:D0:80:F9:15:B5:9D:3B:B2:79:33:40:1B:02:14:65:CE:CA
X509v3 Authority Key Identifier:
keyid:F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c6:16:cc:0b:f0:b5:74:47:01:b2:0d:de:c7:c1:b2:7f:a0:
c7:12:77:ae:b4:ba:fe:72:88:9d:e4:17:73:dd:b6:4b:81:c3:
a5:12:8a:4f:ef:05:e3:a4:85:da:33:bb:c6:4d:6b:43:14:81:
6c:d3:04:a2:1d:9c:cb:0d:de:ea:98:2b:e9:c2:51:b7:9d:0b:
f4:79:7e:a6:6a:26:c2:ee:1d:93:90:fd:e4:fa:48:77:1a:d6:
04:14:96:32:a5:ee:94:51:66:c1:f5:f7:6a:d8:3e:9f:3c:40:
27:09:b6:ad:27:7f:f4:3e:6b:53:90:dd:f2:c3:58:26:b6:81:
91:37:40:1a:8f:e4:f9:c5:a9:4c:d2:61:c4:c4:9c:5e:bc:d7:
0e:f1:51:cc:32:a1:dc:03:b4:8c:f0:fd:fb:75:16:18:a5:55:
5c:eb:ba:30:36:30:03:f7:37:8b:29:b0:be:ef:72:9d:34:a6:
da:26:5d:1b:a0:5e:8c:27:27:34:08:60:ef:0b:e0:8e:93:b8:
6f:fe:29:9b:cb:f2:a5:b2:00:f6:8d:66:f8:82:dd:17:99:c4:
f5:a9:60:b1:8f:f8:38:31:10:63:9e:18:c7:a6:ae:6f:0c:9a:
7a:33:c1:20:ce:cb:b1:23:97:8d:25:be:ae:b3:a6:5c:19:1c:
0c:05:4a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:12:55 2026 by rpki-client