Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
File: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft (raw, json)
Hash identifier: k4TYJI8FbbeT12dEea/po7kO00xOm+SpBGITa5BF1JU=
Subject key identifier: 30:7B:F7:19:85:A0:5C:06:A9:A0:B9:D6:E9:2B:FE:73:F1:49:48:2E
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Certificate issuer: /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial: 01A0C4E9F4E9308781E9D531711FCBC4C262
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
Manifest number: 027B
Signing time: Mon 21 Sep 2026 17:01:01 +0000
Manifest this update: Mon 21 Sep 2026 17:01:01 +0000
Manifest next update: Tue 22 Sep 2026 17:01:01 +0000
Files and hashes: 1: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl (hash: 7d24rbN9wfV5ZiLMaNkjE8m+DoCqdP7zSrL0QVPJEkU=)
2: dWQzDZpVB7OiM0vZm0oBe4UUrds.asa (hash: g6XCHoueCq216JgmRUZR1LKQhV53b5OQSgUBfD4mvXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:e9:f4:e9:30:87:81:e9:d5:31:71:1f:cb:c4:c2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Validity
Not Before: Sep 21 17:01:01 2026 GMT
Not After : Sep 22 17:01:01 2026 GMT
Subject: CN=307bf71985a05c06a9a0b9d6e92bfe73f149482e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:11:ac:b1:9c:13:d3:64:a6:3e:aa:e3:7f:ea:
03:0c:9e:af:5a:c6:b5:20:f7:8c:c1:f3:d8:66:7d:
95:1c:30:9d:6a:21:00:40:ac:9f:c3:f4:e2:98:92:
bc:81:69:88:43:d4:80:df:b3:03:d3:b4:ef:ac:00:
f6:2b:24:a1:fa:a7:09:b8:64:ba:83:8f:f7:66:bd:
ce:d6:e2:06:14:2a:f4:4d:e7:28:da:16:bc:c6:ab:
da:eb:8d:61:3b:1b:16:a2:d6:4a:1f:b1:6b:00:9b:
b0:81:1d:1d:d4:33:83:ae:b1:13:21:7d:25:23:44:
6b:f9:d8:45:7f:4d:1e:16:92:4a:b7:e8:2e:45:4d:
f5:22:a5:0f:c4:02:cf:f1:8e:a3:d8:43:91:2d:b8:
a9:a0:d0:c6:39:3f:39:c1:d8:52:46:24:4b:de:27:
54:2c:af:29:e4:c2:0a:e4:d4:b1:9b:1c:50:0f:39:
ab:fd:9d:9f:3f:06:6a:44:62:24:31:a9:00:f9:3f:
c9:2c:f8:65:72:1a:dc:01:5e:00:cd:c3:5b:70:e5:
f8:61:c3:bf:0e:71:90:75:37:5d:0a:95:c8:5a:37:
dc:42:3f:e3:2c:47:42:e8:44:8b:dc:4b:ae:96:10:
90:67:cf:b8:32:6e:2e:de:6f:4d:53:79:98:7d:50:
fc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:7B:F7:19:85:A0:5C:06:A9:A0:B9:D6:E9:2B:FE:73:F1:49:48:2E
X509v3 Authority Key Identifier:
keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:46:17:ec:dc:05:f1:9d:e5:19:dc:c7:0f:ba:75:c6:e3:8a:
dc:91:26:03:b0:a0:f7:d8:58:89:3d:85:e0:34:87:6a:9f:9f:
15:1b:9c:0f:4e:91:e0:c2:ba:07:90:79:b8:01:6a:9c:a8:81:
b7:9d:dc:e4:75:a8:10:1b:f9:24:8d:4f:a7:fd:10:43:9c:f1:
6d:3b:12:8a:73:7f:56:4d:69:65:c5:f6:3b:4c:46:43:80:32:
bf:95:dc:61:ea:43:d4:24:d9:c8:c1:d9:de:f1:86:dd:16:a0:
05:c3:5f:76:bd:11:fd:e2:60:1c:73:35:75:0a:98:ff:0a:bf:
8b:38:b7:62:46:58:61:1e:d0:b7:d9:57:96:82:93:2e:5b:d4:
f2:72:29:d2:83:2b:88:16:7b:14:97:5f:e6:c5:44:32:db:7d:
81:76:0a:69:d9:87:a4:0e:1d:52:dc:85:d5:a3:dd:45:db:4e:
ca:5c:f9:61:af:3d:d8:69:f2:1b:98:76:02:75:d2:1b:ce:e0:
e5:63:d0:77:f2:dc:19:3a:c8:e8:73:74:84:50:fd:eb:65:74:
cd:26:48:55:89:03:b8:79:2f:d4:41:99:52:70:23:de:d5:5c:
83:df:01:ed:44:7c:12:bb:50:2d:92:27:90:b7:23:aa:36:39:
d2:80:7e:9f
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDE6fTpMIeB6dUxcR/LxMJiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNDY1NWFhMjljYjRjODM5NDdmNWZhNmM2OGYwNGMyMzkw
YjUxMjIwHhcNMjYwOTIxMTcwMTAxWhcNMjYwOTIyMTcwMTAxWjAzMTEwLwYDVQQD
EygzMDdiZjcxOTg1YTA1YzA2YTlhMGI5ZDZlOTJiZmU3M2YxNDk0ODJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxGssZwT02SmPqrjf+oDDJ6vWsa1
IPeMwfPYZn2VHDCdaiEAQKyfw/TimJK8gWmIQ9SA37MD07TvrAD2KySh+qcJuGS6
g4/3Zr3O1uIGFCr0Teco2ha8xqva641hOxsWotZKH7FrAJuwgR0d1DODrrETIX0l
I0Rr+dhFf00eFpJKt+guRU31IqUPxALP8Y6j2EORLbipoNDGOT85wdhSRiRL3idU
LK8p5MIK5NSxmxxQDzmr/Z2fPwZqRGIkMakA+T/JLPhlchrcAV4AzcNbcOX4YcO/
DnGQdTddCpXIWjfcQj/jLEdC6ESL3EuulhCQZ8+4Mm4u3m9NU3mYfVD8EwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDB79xmFoFwGqaC51ukr/nPxSUguMB8GA1UdIwQY
MBaAFPpGVaopy0yDlH9fpsaPBMI5C1EiMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1rWlZxaW5MVElPVWYxLW14bzhFd2prTFVTSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvZjQ5ZDg0LTRhMWMtNDBmZC1iYWE2
LWM4NjE1YTU0MGNkZC8xLzEta1pWcWluTFRJT1VmMS1teG84RXdqa0xVU0kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I4L2Y0OWQ4NC00YTFjLTQwZmQtYmFhNi1jODYxNWE1NDBj
ZGQvMS8xLWtaVnFpbkxUSU9VZjEtbXhvOEV3amtMVVNJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0YX
7NwF8Z3lGdzHD7p1xuOK3JEmA7Cg99hYiT2F4DSHap+fFRucD06R4MK6B5B5uAFq
nKiBt53c5HWoEBv5JI1Pp/0QQ5zxbTsSinN/Vk1pZcX2O0xGQ4Ayv5XcYepD1CTZ
yMHZ3vGG3RagBcNfdr0R/eJgHHM1dQqY/wq/izi3YkZYYR7Qt9lXloKTLlvU8nIp
0oMriBZ7FJdf5sVEMtt9gXYKadmHpA4dUtyF1aPdRdtOylz5Ya892GnyG5h2AnXS
G87g5WPQd/LcGTrI6HN0hFD962V0zSZIVYkDuHkv1EGZUnAj3tVcg98B7UR8ErtQ
LZInkLcjqjY50oB+nw==
-----END CERTIFICATE-----
Generated at Mon Sep 21 20:35:17 2026 by rpki-client