Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: d5PLCv/NHdd6DWWqVn92rFe12rQ4hpOebYFzphvpgCU=
Subject key identifier: 2D:7E:6D:07:9E:99:EF:7D:00:5F:C8:59:A8:C3:EE:A1:27:09:43:5F
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 019EC148D0E2522D2DBF917D4F22A9249B2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 0A71
Signing time: Sat 13 Jun 2026 14:00:35 +0000
Manifest this update: Sat 13 Jun 2026 14:00:35 +0000
Manifest next update: Sun 14 Jun 2026 14:00:35 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: s57q8TGcDdDqSwU3mRqqbr18VTrXoZQXXrCuLKNlTig=)
2: emnbEvWJygEiWm9VUZK5oCubv9o.roa (hash: ii00HW3z+EIyVSsqQmHcN0u5PlKx7x+pk+qTbfPvDb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:d0:e2:52:2d:2d:bf:91:7d:4f:22:a9:24:9b:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Jun 13 14:00:35 2026 GMT
Not After : Jun 14 14:00:35 2026 GMT
Subject: CN=2d7e6d079e99ef7d005fc859a8c3eea12709435f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e8:46:af:54:ad:a8:5c:26:80:8c:be:76:99:
6a:67:6f:22:be:c5:36:ec:f6:d9:5c:ce:96:17:3f:
1b:09:3d:82:5e:96:96:b2:ca:c4:bc:cd:48:8e:c3:
28:b9:ce:15:df:6a:52:2e:b8:6b:87:03:16:d0:f9:
88:88:9b:7c:f3:a3:ff:27:41:03:e5:80:f8:0d:33:
b4:21:27:ec:49:4b:31:b4:4c:d5:8b:0e:09:01:f6:
eb:62:7e:62:86:3c:4d:39:d4:f9:6c:9f:d1:3b:e0:
42:63:2e:6a:2a:e5:d4:f5:e9:34:8a:93:e7:50:f9:
91:3d:bb:e6:17:cd:18:e7:c3:46:42:f4:60:57:af:
9a:b7:00:7f:16:35:39:2c:22:dc:b9:c1:7f:55:be:
5e:3b:74:69:dd:b2:3a:dd:c0:36:7b:e1:23:57:16:
b9:cd:0f:99:2a:9f:50:76:db:63:ad:93:71:f6:82:
32:6b:0f:59:74:94:8a:47:af:74:13:6d:5a:81:75:
59:d9:b7:69:30:ca:41:87:74:0e:73:00:5a:ab:a9:
f8:dd:13:85:24:62:7b:f0:72:4e:bb:07:b1:76:1a:
e9:9c:51:b3:54:96:01:ce:4f:d0:d9:b4:70:68:08:
12:5f:21:16:35:75:6b:50:23:3d:bd:50:e1:bb:43:
56:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:7E:6D:07:9E:99:EF:7D:00:5F:C8:59:A8:C3:EE:A1:27:09:43:5F
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c3:92:70:e9:49:ee:2a:35:3b:b4:73:a6:51:bc:39:f7:c5:
f1:59:81:af:4f:5e:8e:e4:3e:56:70:6a:e2:6f:b3:f6:a0:71:
fc:75:98:50:b2:5f:bd:43:de:57:79:0a:9b:02:fc:12:cc:e0:
09:c0:0b:d3:aa:a9:eb:7a:45:d0:d3:67:9c:ce:23:d8:7f:f3:
c4:29:8d:80:24:d7:46:5b:7c:c9:c1:5b:91:e4:7b:c3:13:e7:
46:d1:d1:39:4d:b6:81:47:44:0a:73:0c:d8:5f:f5:8a:8c:1e:
01:57:87:10:7f:e4:c9:87:b6:4c:78:c7:87:5e:38:c5:04:07:
c3:11:ef:27:1a:2f:76:84:c2:ec:5b:96:b3:15:89:24:d9:0d:
fb:38:40:18:42:90:78:be:74:73:3a:3e:d5:d5:da:c0:7c:2d:
73:9c:82:27:3e:52:0f:3f:dc:4e:b5:bd:96:d9:d3:e3:de:65:
1e:bf:7f:2b:4d:a9:ce:62:38:45:d6:aa:50:35:24:69:b3:0f:
e1:e4:c0:0f:b3:73:cf:d4:c5:08:8d:ca:50:3a:99:ba:cf:df:
ca:17:71:7f:30:80:94:2e:8e:fa:f6:a0:e9:bc:16:2e:5d:b9:
60:2f:fa:82:43:ad:6e:72:7c:2d:2b:a2:d4:68:0e:e7:9a:6e:
a7:b6:48:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:19:33 2026 by rpki-client