Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: Ry38FOEm7nVwKrRZXzikQxN1+jg5t+yMQDZ4fHN1m38=
Subject key identifier: CC:FE:22:E8:DE:F0:16:B1:A9:1C:D5:A3:BA:93:6F:43:58:E4:82:04
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 019FAAF5BC185CFBA98CB1A7E60CBA1F5F6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 0AEA
Signing time: Tue 28 Jul 2026 23:00:58 +0000
Manifest this update: Tue 28 Jul 2026 23:00:58 +0000
Manifest next update: Wed 29 Jul 2026 23:00:58 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: xbZi+ellD4g6KrwOpSdDKqkjBSMQriavOZTsIeyeBpg=)
2: emnbEvWJygEiWm9VUZK5oCubv9o.roa (hash: ii00HW3z+EIyVSsqQmHcN0u5PlKx7x+pk+qTbfPvDb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:bc:18:5c:fb:a9:8c:b1:a7:e6:0c:ba:1f:5f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Jul 28 23:00:58 2026 GMT
Not After : Jul 29 23:00:58 2026 GMT
Subject: CN=ccfe22e8def016b1a91cd5a3ba936f4358e48204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:36:fe:3f:2d:f4:c9:dc:c7:8b:3a:a8:a6:37:
e8:91:66:3a:b5:dd:52:88:74:2e:be:37:b0:09:73:
74:8e:5f:51:d7:cd:98:38:6d:be:88:98:ab:24:c1:
73:dd:09:ac:b1:9e:3f:b2:ae:0a:0e:d9:47:37:d8:
a2:e7:26:bf:d3:a3:0f:17:c5:5b:94:82:d3:21:f0:
fe:55:38:6c:54:1c:0c:ea:99:dd:79:b9:9c:f1:60:
d3:a8:43:62:89:f5:b4:34:a7:c8:85:8b:72:a2:3e:
d0:d1:0e:a0:03:25:ad:6f:b8:11:9e:95:68:29:99:
7b:dd:50:fe:e0:8e:96:59:11:42:d6:fb:5d:55:02:
d5:a9:b0:08:6e:2e:ca:b2:40:96:3d:2a:65:e6:d7:
d4:42:30:7d:bc:05:0a:61:a6:99:f5:ba:ad:d5:19:
1f:8b:37:b8:7b:c4:bf:71:e7:cd:72:48:f6:09:01:
66:c9:d8:5a:00:62:74:3c:f6:e9:29:4d:3f:57:53:
7a:3d:e4:fc:9e:c2:72:cc:b3:4b:ab:7b:b9:4e:f8:
1d:ad:1c:be:20:df:e2:60:61:0b:15:84:9c:af:2d:
57:6b:71:80:d8:75:65:24:bb:e0:c4:63:c0:1b:50:
6c:c3:10:5c:1f:da:ff:29:17:79:d2:80:da:2a:db:
d9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FE:22:E8:DE:F0:16:B1:A9:1C:D5:A3:BA:93:6F:43:58:E4:82:04
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:54:9f:da:ec:8e:f9:85:dc:e1:cf:b9:7c:12:10:c8:cd:4b:
d5:70:fe:91:f9:12:00:a4:d6:79:48:c6:f5:cd:c0:92:7d:f7:
bb:1d:29:47:ba:d5:7e:64:33:7c:30:99:f9:ab:fc:b1:75:45:
9a:1b:95:9b:2b:97:9d:f0:9c:82:f1:98:d0:d6:22:c9:3e:9b:
05:68:8a:ef:92:e8:bf:f9:59:cb:a7:0c:c3:9d:ac:27:b6:6f:
6d:ec:77:98:16:b7:61:be:41:22:3f:ca:c6:9b:6d:05:d3:42:
f4:23:1b:9a:c2:b5:fa:f1:b9:fc:18:46:ba:66:89:9a:bb:39:
28:10:9d:c9:a4:62:6a:0f:84:74:7f:73:05:94:b9:79:69:35:
92:18:02:20:9b:6b:a4:d8:85:22:9b:1f:18:06:f4:9e:54:6d:
9a:da:e1:12:6d:40:89:19:3a:3f:71:fa:38:6e:a6:3c:f5:b8:
44:c1:24:28:3a:4d:f2:b0:17:6f:5a:7b:56:a1:c2:92:9a:2a:
08:40:7d:63:b3:82:a7:25:a9:5a:27:67:c0:64:ec:98:da:ed:
3c:2f:ea:d9:da:bd:31:11:83:16:d4:27:3b:86:74:cd:ea:08:
e9:0b:5b:ba:72:df:be:b7:6d:c0:b9:cb:e5:d1:50:96:3d:9b:
1f:14:79:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:58:55 2026 by rpki-client