Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: nLIgzKSRC7jEzBXJAENWokFjeugqIjnQ0KadevSajdk=
Subject key identifier: 5C:5D:EA:C6:82:D4:15:4B:BF:E7:71:A4:D1:7D:3A:32:8D:AB:2C:64
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 01A0C6D79BB9F01C089876F4048715971751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 0B7D
Signing time: Tue 22 Sep 2026 02:00:13 +0000
Manifest this update: Tue 22 Sep 2026 02:00:13 +0000
Manifest next update: Wed 23 Sep 2026 02:00:13 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: 9IZAv+2VRBgqCgrtucZj/r7o6rmdFflxAAS1Wr75Ebw=)
2: emnbEvWJygEiWm9VUZK5oCubv9o.roa (hash: ii00HW3z+EIyVSsqQmHcN0u5PlKx7x+pk+qTbfPvDb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d7:9b:b9:f0:1c:08:98:76:f4:04:87:15:97:17:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Sep 22 02:00:13 2026 GMT
Not After : Sep 23 02:00:13 2026 GMT
Subject: CN=5c5deac682d4154bbfe771a4d17d3a328dab2c64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0e:1d:eb:32:34:9c:6e:f1:ec:a4:ec:b5:a5:
d9:d5:5d:97:92:1d:dd:b5:b1:bf:49:70:b9:e1:16:
02:62:96:41:32:21:96:e0:76:22:a3:b0:78:36:ca:
00:de:db:ac:de:98:19:17:42:24:42:7b:64:a0:d9:
55:61:2c:7b:1e:ba:bf:0e:7a:44:5a:27:44:a3:9f:
fd:e0:e0:14:c5:be:e4:a9:e3:db:65:d3:63:da:71:
0f:b7:72:38:20:be:14:32:85:84:fb:ab:18:53:33:
a8:d5:c5:cb:c5:16:b9:f5:6f:05:67:69:71:22:bb:
68:49:57:5a:f2:5d:54:9b:93:93:d0:3d:d0:95:b4:
ea:e0:31:e7:de:1a:43:82:c8:48:70:04:b5:50:19:
dc:3c:64:72:71:20:0a:c9:58:ca:b0:21:c7:4f:b7:
2a:39:21:fe:76:d3:eb:03:aa:1b:e7:10:4c:a7:21:
ee:61:8b:52:56:35:0f:71:e1:ba:44:9d:f0:7f:02:
a8:31:d4:96:43:d7:46:ca:b9:2e:5c:ea:45:32:e6:
b9:20:90:b1:5e:18:c8:a8:3b:99:23:99:de:21:9b:
53:a3:dc:e0:e0:09:f4:39:b6:69:45:73:86:0c:38:
f7:d6:2a:28:7a:25:0b:11:97:93:a2:24:ca:1b:d7:
e5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5D:EA:C6:82:D4:15:4B:BF:E7:71:A4:D1:7D:3A:32:8D:AB:2C:64
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:30:c8:9f:b5:7b:68:e3:b3:37:2d:ca:80:6d:97:32:51:bc:
4e:ec:5b:df:26:e0:eb:8d:4b:31:64:a3:de:df:b4:32:fd:82:
2f:dd:57:ee:17:85:78:7f:30:bd:c4:77:b5:b4:55:a7:4f:a7:
65:60:fc:80:56:89:2c:65:8d:e6:4c:06:82:93:75:ec:36:0a:
22:25:a7:5c:2f:64:58:d5:f8:56:dc:f4:4c:df:34:07:cb:cd:
ea:b7:40:5e:ef:de:8d:0d:17:83:44:d3:df:6e:82:d6:e8:7f:
35:04:5d:82:93:8b:2e:d1:11:de:4f:c5:3d:80:15:73:f1:76:
f7:e3:f7:ae:85:d3:e9:fb:9f:f4:e1:a2:c1:c8:20:4d:12:83:
e9:ae:27:4a:19:6e:b7:57:8a:38:d2:e9:a0:f5:a6:71:81:cf:
b7:79:e4:b1:b6:27:26:4c:ad:7d:a4:49:20:d1:8c:cc:de:b9:
33:39:2c:77:84:e6:28:9d:e0:d4:46:f0:b2:c9:ad:6f:1c:e1:
6a:1d:3a:64:35:dc:e9:b7:6b:0f:a7:47:3d:80:cc:81:f7:bc:
52:1d:9e:24:64:45:b6:e4:f6:11:7f:37:cb:bd:db:1a:b5:82:
2d:14:1d:3c:fa:fa:9e:7a:f4:f3:a5:27:45:8b:69:46:05:76:
c4:47:91:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:40:13 2026 by rpki-client