Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: jjNowhB4EVZGPxWyrqCeZTsiuLflsQGOy5gG/zT82VI=
Subject key identifier: 51:7D:76:47:2A:56:21:4C:DE:23:A7:99:BA:64:02:DD:10:F5:81:0D
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 019D99CFD55AE6752D37C578B216136CA52D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 09D8
Signing time: Fri 17 Apr 2026 05:00:27 +0000
Manifest this update: Fri 17 Apr 2026 05:00:27 +0000
Manifest next update: Sat 18 Apr 2026 05:00:27 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: sM8dcbv9b9YryJA/RO+KP3RfHcOjSp48JUiqhE1AFfk=)
2: emnbEvWJygEiWm9VUZK5oCubv9o.roa (hash: ii00HW3z+EIyVSsqQmHcN0u5PlKx7x+pk+qTbfPvDb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:cf:d5:5a:e6:75:2d:37:c5:78:b2:16:13:6c:a5:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Apr 17 05:00:27 2026 GMT
Not After : Apr 18 05:00:27 2026 GMT
Subject: CN=517d76472a56214cde23a799ba6402dd10f5810d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:32:5a:21:91:7d:8a:ab:27:cf:f4:0f:f9:5b:
eb:f9:1c:03:1e:48:7c:a3:4e:15:28:55:63:67:46:
c1:1e:01:5d:aa:ab:92:c4:85:be:86:21:4f:4b:3e:
6c:71:69:5e:af:24:85:a8:30:a8:d2:eb:82:8d:5f:
1b:23:e0:f1:7f:fc:22:57:65:b4:ea:c9:0e:68:ee:
08:57:42:80:c7:8f:4e:55:bb:53:04:b1:0a:ea:32:
91:b9:bd:3e:5a:b9:f9:a8:c5:90:58:98:54:c0:c1:
32:3c:12:59:50:48:66:85:03:e3:75:78:19:7c:0c:
af:e2:65:fd:3f:c3:c9:9c:d0:77:5a:d1:5b:1e:ae:
c0:14:15:02:6d:59:e2:2e:cf:4c:10:5c:74:b5:e4:
1e:bd:f2:ad:b2:d5:bb:23:43:f7:af:ee:9e:9d:f6:
b2:64:dd:1e:89:e0:85:4c:04:61:58:be:ba:cd:62:
73:a0:39:30:a4:bb:05:4a:86:05:2f:68:bf:34:4d:
d6:12:fb:9b:4d:51:f3:2f:59:c3:3f:4d:70:41:7b:
b9:74:fa:90:12:fa:7f:f6:48:5c:be:d7:6f:a3:4e:
e2:13:bc:59:57:e1:53:2d:b9:22:53:db:4c:16:b4:
1f:25:62:82:03:78:d0:b7:76:2f:50:ad:af:93:ea:
3f:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7D:76:47:2A:56:21:4C:DE:23:A7:99:BA:64:02:DD:10:F5:81:0D
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:f3:71:8d:8b:2b:85:8a:69:f9:f2:70:91:1e:12:95:e6:87:
ab:34:12:90:72:6f:4c:cd:6c:db:66:7c:04:41:a7:f9:90:60:
89:1f:c0:d2:f6:9e:f1:b5:f7:ff:45:7d:c8:2d:37:48:82:28:
89:a5:0b:6d:64:b1:17:f7:95:a5:73:ca:c8:ef:e7:95:b9:4e:
e8:41:4e:d0:f8:dc:13:99:b6:92:fe:2a:76:41:65:5f:66:c4:
ee:28:d5:9d:f9:7a:b6:84:5a:19:21:8a:f5:a9:42:4a:cf:ee:
3c:fe:bc:c5:21:09:0f:f3:85:c3:fd:3d:90:a2:ac:85:25:06:
1e:f1:60:a5:6d:24:68:fd:dc:d2:62:01:ea:35:7c:52:db:cf:
c9:70:be:c3:66:92:36:a9:0a:46:a2:8f:34:ff:d1:1d:95:18:
2e:88:b2:db:b7:48:05:c9:d4:ff:9e:26:2a:b4:3f:e2:45:b1:
69:63:65:e2:46:8a:a7:aa:5d:c7:ef:71:b4:0a:aa:78:0e:2b:
7e:5f:59:ba:1f:36:5a:65:27:c2:74:08:34:12:98:7e:93:a7:
1e:1a:5a:7a:c1:26:ac:d5:a4:b2:b2:38:f6:fd:cb:55:9a:c6:
03:35:c3:5e:c0:d6:f4:62:2c:54:b5:e1:6a:05:8e:21:9e:0d:
74:ff:36:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:50:22 2026 by rpki-client