Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
File: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft (raw, json)
Hash identifier: cBgeZaEK47gUUVfcKtukFxvBnDQH1DE++PlleEL5dkU=
Subject key identifier: E5:0A:B9:DC:01:D4:AA:1F:0C:D8:4E:67:D8:A6:B2:C5:29:60:B8:CD
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Certificate issuer: /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial: 019D9D3F67158473D4665319226A7AC1CA36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
Manifest number: CA
Signing time: Fri 17 Apr 2026 21:01:11 +0000
Manifest this update: Fri 17 Apr 2026 21:01:11 +0000
Manifest next update: Sat 18 Apr 2026 21:01:11 +0000
Files and hashes: 1: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl (hash: M1nIu3xcut5kya99Wvk+6MW1+csp64ugHeuftnRZMzs=)
2: vq_N2qG8mbDhfu-Rk_yLoVAT3Qk.asa (hash: JT0iM+8MVkraQDYJcjWc6sICRKkcPkj+0HcY/vzUozI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:67:15:84:73:d4:66:53:19:22:6a:7a:c1:ca:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Validity
Not Before: Apr 17 21:01:11 2026 GMT
Not After : Apr 18 21:01:11 2026 GMT
Subject: CN=e50ab9dc01d4aa1f0cd84e67d8a6b2c52960b8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:00:01:19:4e:1a:69:53:c9:00:e3:8d:a4:49:
b6:a2:ea:28:cc:71:bc:d7:1b:ce:eb:6d:d6:1d:0a:
14:ca:27:d0:4f:d2:08:4c:4f:19:7e:4e:1b:e0:11:
c6:a9:51:8c:ce:71:80:70:cf:ac:3a:9f:17:51:41:
f9:96:d6:28:e6:e4:fc:39:65:30:83:0f:1b:e1:fa:
3e:8e:cb:6f:75:2e:cb:60:d2:52:28:a9:f5:ed:d3:
90:15:74:ed:7d:71:08:78:79:90:59:88:64:df:e5:
60:5f:d9:09:7e:1a:f6:77:cb:23:10:db:4d:5b:19:
4a:db:42:db:4e:14:53:b6:e1:de:b4:84:ee:21:a2:
d6:ac:f3:a2:6d:1e:c0:3c:c6:94:64:b7:a7:cf:e2:
14:31:d1:0e:53:10:f0:2d:c0:e9:7a:fc:22:48:3a:
00:b0:08:b7:b5:db:81:e7:3f:6e:0c:1e:b1:22:5d:
e7:6a:43:c4:b3:54:dd:c5:2e:97:a5:f8:ff:14:d5:
3b:a5:a7:78:0c:b2:22:e1:6f:90:85:03:55:00:14:
db:60:1f:f4:8b:cd:1a:15:c9:75:be:e2:18:36:98:
04:5f:3f:d4:83:b0:9d:48:ca:1d:42:ff:8f:66:89:
8c:58:ee:02:47:ce:96:2f:1b:01:40:76:2a:66:d0:
a8:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0A:B9:DC:01:D4:AA:1F:0C:D8:4E:67:D8:A6:B2:C5:29:60:B8:CD
X509v3 Authority Key Identifier:
keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:a6:ca:d1:01:c1:ab:b9:1d:41:00:49:38:e2:d1:08:b6:a5:
73:7d:a1:b2:c4:5c:a3:ab:98:4b:f8:2d:72:9e:3b:bc:f9:11:
4d:96:a3:b1:da:87:dd:79:fd:3b:4f:6d:03:45:17:b0:1c:a8:
4e:7a:88:ce:c1:18:b8:d0:93:6a:93:7a:6d:04:c1:b4:51:cb:
48:8f:a5:ee:4c:ba:78:e0:d9:a4:aa:b5:16:23:d6:b7:29:16:
4a:d0:fc:86:6f:0f:96:17:d1:94:16:22:69:ad:4d:63:b9:50:
e0:95:df:d4:dc:96:09:e9:b0:0a:89:8c:15:13:7c:e0:32:51:
d2:b4:9b:c4:04:c5:e6:31:03:f5:a7:0c:64:83:78:d5:09:39:
22:ab:22:d7:f2:00:69:b2:5c:fc:a8:e8:86:12:a7:e7:d1:99:
b8:39:56:40:ba:61:06:0d:cc:fb:ef:ea:4d:27:95:2e:60:c4:
5a:34:46:ac:7b:a2:71:5f:77:56:7e:1d:5b:f7:88:41:7c:c8:
f2:da:3e:c0:f1:f7:ec:cf:c1:7e:ee:a8:4c:44:34:28:6e:ba:
64:84:fe:31:2d:0c:58:79:0e:01:33:5d:f2:36:ed:be:f3:3c:
48:27:af:d2:ce:15:e5:c0:ee:f3:f4:31:92:71:e9:6a:4d:91:
0a:ef:2a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:47:22 2026 by rpki-client