Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
File: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft (raw, json)
Hash identifier: pMXKsSAFWMB+nGFhYMqw9BHtufLkt/eEPNYN+AExKr0=
Subject key identifier: EF:5A:69:00:1C:D6:D5:4E:D2:53:FA:34:8D:6D:2C:54:6E:1B:E5:E2
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Certificate issuer: /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial: 01A0D26E3606DB7A3F3FB82E0BD1348796E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
Manifest number: 0282
Signing time: Thu 24 Sep 2026 08:00:33 +0000
Manifest this update: Thu 24 Sep 2026 08:00:33 +0000
Manifest next update: Fri 25 Sep 2026 08:00:33 +0000
Files and hashes: 1: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl (hash: pK7jn2mgacPhpFrc4OO5D6ny3eFGkiPPQQkV1VPmQ+8=)
2: dWQzDZpVB7OiM0vZm0oBe4UUrds.asa (hash: g6XCHoueCq216JgmRUZR1LKQhV53b5OQSgUBfD4mvXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 08:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:36:06:db:7a:3f:3f:b8:2e:0b:d1:34:87:96:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Validity
Not Before: Sep 24 08:00:33 2026 GMT
Not After : Sep 25 08:00:33 2026 GMT
Subject: CN=ef5a69001cd6d54ed253fa348d6d2c546e1be5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:98:fc:f0:41:4a:64:e1:59:90:98:07:10:
08:a7:be:bb:c6:7b:c0:b8:e5:60:d9:9c:50:03:b7:
7f:ef:50:64:70:c2:06:88:c3:81:84:7a:2f:6d:df:
49:4b:ad:12:7f:03:76:12:2d:5a:6b:18:eb:0a:7c:
6f:08:1f:10:81:a4:e9:1c:84:23:3d:55:5a:1b:66:
e3:91:4f:9b:71:5c:79:0d:8e:39:43:24:d5:e8:56:
42:a2:28:3d:22:8d:a3:ee:dd:9e:7d:6c:10:5e:8a:
24:de:77:d2:92:a8:98:79:0c:58:0a:43:4c:d9:f3:
ef:b8:01:3a:03:f0:17:95:7b:30:fc:d0:2e:e2:ed:
4a:97:c2:82:71:6d:0e:9b:46:a0:d2:fd:43:2b:73:
c9:ca:59:0e:20:cc:96:bb:cf:12:29:f3:39:89:05:
2d:9d:d9:5b:a4:be:69:52:da:95:58:d4:e5:7e:68:
a5:92:c9:41:7a:82:7f:a5:b9:a9:88:7d:7c:eb:1b:
92:2c:2f:47:4d:9b:92:f5:f1:bd:c5:04:fc:80:22:
b0:cc:48:84:b8:1a:d2:76:10:77:83:80:17:11:12:
b3:61:ba:33:4f:59:a1:09:e0:21:9c:fa:2c:ed:ca:
30:f1:bc:73:39:57:50:b2:2d:82:7a:78:c7:cd:45:
90:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5A:69:00:1C:D6:D5:4E:D2:53:FA:34:8D:6D:2C:54:6E:1B:E5:E2
X509v3 Authority Key Identifier:
keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:13:55:2d:31:17:ee:06:e8:0b:f0:d7:96:0e:83:2a:0f:e4:
f2:20:73:06:27:f2:3b:77:ea:55:68:74:f5:19:ea:82:51:6e:
81:e7:18:87:eb:98:d5:ee:f8:b7:5e:95:12:98:46:20:6c:1f:
fd:19:81:45:1e:03:52:63:fb:e5:9b:29:08:da:f1:46:8c:9f:
fd:1e:f2:30:c7:c0:14:9b:ed:84:4b:ad:26:6b:c3:47:71:97:
cb:5e:5e:ab:26:06:f0:11:c7:9e:87:71:6c:70:4a:72:6d:ce:
27:d7:3b:25:63:5b:d5:ca:e4:3c:6d:2e:a9:27:c4:e0:cd:c0:
0f:eb:dc:ae:14:f2:ef:cc:04:85:53:95:c0:18:20:df:7c:da:
e1:a4:05:83:86:b4:45:6f:cb:41:01:00:46:d2:74:22:6d:21:
31:f9:cf:a8:13:67:8c:65:4b:7c:31:3f:14:1c:57:71:8b:cb:
a4:c7:07:af:31:5e:7c:79:a6:5d:90:0b:2b:05:b0:27:00:d5:
cb:a7:21:de:1b:51:bf:81:7d:98:41:17:1c:bd:91:06:a7:23:
c3:31:2c:39:3a:fa:03:43:27:9b:5e:3a:4e:5e:5a:72:a3:fa:
9a:ea:68:e8:08:7c:39:fb:f1:72:90:4c:9f:2a:bd:08:da:f0:
80:be:e6:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 13:50:21 2026 by rpki-client