Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
File: 1KA5ru5iEDsojGyLlpLPWAh0PiE.mft (raw, json)
Hash identifier: mMNN4n6CAWciumiEffh130xcwTgrB+smY8XCIjoEN84=
Subject key identifier: B9:97:50:A7:7F:65:76:52:0D:2A:6D:AD:DD:CC:ED:0D:3A:0F:7E:AE
Authority key identifier: D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
Certificate issuer: /CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Certificate serial: 019FA9AC6FC59A9143C8D56F013EFAE37BCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
Manifest number: 1966
Signing time: Tue 28 Jul 2026 17:01:17 +0000
Manifest this update: Tue 28 Jul 2026 17:01:17 +0000
Manifest next update: Wed 29 Jul 2026 17:01:17 +0000
Files and hashes: 1: 1KA5ru5iEDsojGyLlpLPWAh0PiE.crl (hash: P0RV6x1RZU3Qz6JsTdk2GrHiJY5BgjnajP0iKCisckU=)
2: xmPDT0qXzI-WfyPj03f5LiDX-UE.roa (hash: bKQt5YSuFEZd8wxQPDeL7WmtwFEyplerjSwRLOQ9NRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ac:6f:c5:9a:91:43:c8:d5:6f:01:3e:fa:e3:7b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a039aeee62103b288c6c8b9692cf5808743e21
Validity
Not Before: Jul 28 17:01:17 2026 GMT
Not After : Jul 29 17:01:17 2026 GMT
Subject: CN=b99750a77f6576520d2a6dadddcced0d3a0f7eae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:aa:b3:98:de:fa:a8:d5:5c:98:41:a4:de:f1:
b7:b8:43:27:25:b3:da:5b:2a:9a:49:78:a5:65:6b:
a6:3a:0c:6f:69:80:a2:82:fe:07:cd:69:fc:a5:37:
25:ba:cb:0b:94:0d:31:af:c4:e9:7e:ca:df:a8:00:
79:17:66:36:a8:68:0e:85:ca:cd:fc:2a:0c:82:f6:
47:55:3f:20:29:4a:85:50:14:2f:29:b3:09:0f:bd:
2b:04:be:5c:b3:76:af:6e:fe:65:05:06:78:5a:21:
5e:22:07:cf:13:9d:f4:9f:7d:8d:5e:5c:8f:76:fa:
0f:d8:99:ab:94:28:23:d1:1e:f8:24:31:73:36:1f:
bd:82:c5:6e:2d:72:54:f2:a1:97:2f:d1:cc:ba:da:
f6:dc:58:da:01:8b:4b:d4:ee:1f:0f:6b:f4:45:f3:
4f:62:da:73:a1:25:6c:4a:ef:1e:52:78:2a:eb:68:
93:c0:08:f1:d5:aa:ee:25:16:bf:47:e8:3d:93:8f:
ea:77:27:32:2f:90:18:28:d5:3e:b4:18:2c:82:e1:
bb:28:51:59:74:cf:c4:86:df:3e:9c:24:e0:6a:97:
2f:6e:69:0b:9a:e2:46:42:f1:06:fe:7f:27:c7:6e:
ac:d0:2f:e9:d6:56:1c:46:be:9a:01:0c:47:fd:ec:
29:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:97:50:A7:7F:65:76:52:0D:2A:6D:AD:DD:CC:ED:0D:3A:0F:7E:AE
X509v3 Authority Key Identifier:
keyid:D4:A0:39:AE:EE:62:10:3B:28:8C:6C:8B:96:92:CF:58:08:74:3E:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KA5ru5iEDsojGyLlpLPWAh0PiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/e54e89-7b6b-417d-9bc9-62ce84f7075e/1/1KA5ru5iEDsojGyLlpLPWAh0PiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:04:bd:85:3e:9d:dd:d0:1a:b8:e6:4c:69:7a:3d:9b:b5:58:
e2:d7:45:59:f6:9e:56:44:72:d9:6d:54:8f:2d:48:a4:b9:f9:
23:43:e4:2c:a0:4d:07:3c:2e:2b:55:d6:3f:00:5b:97:9c:c4:
80:65:81:f3:e6:7f:8f:d6:72:74:40:ad:11:ca:69:00:cf:1a:
09:23:b6:1a:5d:6e:c5:46:0d:f7:aa:51:b7:18:38:05:7b:48:
e8:9d:2b:a5:57:71:77:c0:a0:f1:26:3b:f9:31:c3:c6:56:99:
75:bf:73:8e:c1:34:5b:be:d9:8e:59:72:16:22:a1:61:63:f0:
cc:3e:08:02:75:a8:af:f8:06:9d:95:d6:49:b9:28:f3:0c:13:
99:95:25:c5:3c:76:39:21:3b:79:1c:4a:54:79:07:42:68:6a:
c3:0e:46:33:24:9b:81:99:3b:c9:dc:20:3f:1a:a8:91:ef:39:
b4:9d:45:a4:8c:d6:b2:f6:1b:6c:4f:a9:a5:1d:eb:89:18:39:
b8:67:a0:3f:a4:04:25:e4:b3:4f:c6:15:11:0e:8c:e7:87:03:
eb:20:18:c5:00:21:60:d6:a2:4c:fb:7c:8f:de:c7:cb:b8:f4:
19:6e:3c:40:05:e0:62:30:d1:51:b4:c5:6a:92:2c:8e:b8:3a:
4f:9a:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:10:01 2026 by rpki-client