Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
File: ks_7H6VV_DWhSvymELOBBf1cZFw.mft (raw, json)
Hash identifier: dzAZotSKpHJ6mUOqjQRh2EbMSiYwl5p4W20fpiGfMxQ=
Subject key identifier: 1F:57:AB:E9:D1:FA:D8:5C:B6:ED:84:A0:EE:84:CE:CB:AC:DC:6F:0C
Authority key identifier: 92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
Certificate issuer: /CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Certificate serial: 019CA97D5F7446144994156B989BBDB0BCF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
Manifest number: 1042
Signing time: Sun 01 Mar 2026 13:01:31 +0000
Manifest this update: Sun 01 Mar 2026 13:01:31 +0000
Manifest next update: Mon 02 Mar 2026 13:01:31 +0000
Files and hashes: 1: ks_7H6VV_DWhSvymELOBBf1cZFw.crl (hash: 49gvV0d0UwrYRCV9xf6JTNXdEXvm9WTd4fRVpaF9d7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7d:5f:74:46:14:49:94:15:6b:98:9b:bd:b0:bc:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92cffb1fa555fc35a14afca610b38105fd5c645c
Validity
Not Before: Mar 1 13:01:31 2026 GMT
Not After : Mar 2 13:01:31 2026 GMT
Subject: CN=1f57abe9d1fad85cb6ed84a0ee84cecbacdc6f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:93:5d:ef:43:af:b9:80:f2:92:5b:f0:fa:d6:
75:79:b2:4d:e7:34:82:ca:cb:ed:d8:07:7d:51:d9:
29:31:51:4e:cc:21:a3:14:03:c0:ec:6c:1a:b2:aa:
f3:9b:b5:01:f1:9d:21:9c:9f:51:80:2d:08:28:b8:
99:30:73:c1:92:e9:18:f0:d1:fa:68:fa:c1:5c:9e:
f5:54:d1:d0:dd:82:b7:9b:a2:ab:62:c7:a3:a7:e8:
bb:7d:52:74:13:df:03:4f:a9:24:ff:27:14:23:c7:
f9:cb:5d:42:5f:dc:b1:3c:53:96:ec:2e:0d:1a:87:
cd:21:e3:77:4d:5a:b9:e1:29:aa:1e:29:54:92:9d:
92:c1:71:58:30:17:59:8d:b8:f5:cb:d2:92:b3:73:
82:80:4f:e3:51:a2:de:a7:d1:ef:12:81:90:79:33:
7d:b9:3c:cb:bc:4a:88:f7:61:bd:67:ce:1a:73:cb:
31:56:f0:d6:dc:d4:59:25:87:d3:bd:53:59:0d:83:
4a:c1:55:bb:e9:86:fc:6d:29:1a:d9:1d:ad:49:b5:
0d:a1:76:84:86:f2:27:ab:e2:bf:f1:73:9d:d8:91:
21:35:64:04:ab:62:51:0b:22:5a:f3:41:3f:ce:c8:
ee:92:c6:e1:65:70:05:1d:a6:fc:b2:f2:3a:dc:71:
65:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:57:AB:E9:D1:FA:D8:5C:B6:ED:84:A0:EE:84:CE:CB:AC:DC:6F:0C
X509v3 Authority Key Identifier:
keyid:92:CF:FB:1F:A5:55:FC:35:A1:4A:FC:A6:10:B3:81:05:FD:5C:64:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ks_7H6VV_DWhSvymELOBBf1cZFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/ff51a0-a1b1-419b-8518-6bb5d4d2e539/1/ks_7H6VV_DWhSvymELOBBf1cZFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:d5:e6:2d:61:d8:96:78:0f:e8:95:60:94:8f:f8:69:6f:9c:
47:b3:9b:a9:24:38:47:6e:39:fc:c5:52:2d:42:20:61:b1:6a:
8b:dd:27:b4:e9:d9:1e:aa:94:60:f7:86:e8:de:5a:bd:40:dd:
f8:5e:3c:2e:68:e1:54:29:04:c5:12:3a:5b:fd:c4:14:a9:b7:
48:21:22:fc:d9:2f:64:5f:b4:6d:b9:bf:6d:b8:9c:a6:af:42:
a5:94:82:de:e3:a4:d5:ca:6a:a4:b7:29:ca:e7:09:fe:8d:48:
d1:a2:93:c5:b0:8b:b5:12:15:58:9b:60:6f:d7:c3:5a:00:b0:
22:a1:c8:71:0b:b0:ec:62:e2:ec:bb:63:48:e3:c0:d0:24:27:
58:f1:a3:6a:05:79:33:9d:02:cf:b2:44:3f:9f:65:6c:30:62:
d2:57:38:38:a9:b0:c7:20:aa:2a:b4:76:c9:45:9a:40:37:8b:
8c:66:b7:5b:7d:e4:ca:f7:cc:03:74:31:09:c2:29:32:e9:a9:
3e:a5:38:c1:dd:c4:28:7c:fc:44:43:f4:1f:28:d1:2d:59:40:
19:f6:49:02:20:8d:46:d2:b9:45:43:66:7c:e9:fc:91:e6:88:
2e:31:c8:32:97:a9:e4:1e:78:90:34:15:a2:d4:a0:9f:9a:d3:
c9:a4:87:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:47 2026 by rpki-client