Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier: ALYce/4vdZVSlgugdwXdSbXLoQF+Pu9ygRc2qmm9dVo=
Subject key identifier: 29:F2:F0:89:9B:40:B3:A9:C8:00:0E:0B:47:AF:F5:36:23:C5:2F:10
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 019DA4F8321C9C6D0CA268FC9E3DFAA3CDFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 09:00:22 +0000
Manifest this update: Sun 19 Apr 2026 09:00:22 +0000
Manifest next update: Mon 20 Apr 2026 09:00:22 +0000
Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: NM1BdAprDoB+ZzZiaN2+RBd8ufsob1Rrf9vxTyYp/cc=)
2: EwSHe_xf-jqepkCFLSHCwEgr_AI.roa (hash: RC+AV7VwTqdY5tCu6Twk85UOef4oSKz04Y5st23WBE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:32:1c:9c:6d:0c:a2:68:fc:9e:3d:fa:a3:cd:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: Apr 19 09:00:22 2026 GMT
Not After : Apr 20 09:00:22 2026 GMT
Subject: CN=29f2f0899b40b3a9c8000e0b47aff53623c52f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:2e:80:aa:cb:89:8e:7e:d4:a7:9d:a1:cc:
e8:c6:fe:42:f6:22:64:b4:5c:0c:d9:98:90:8e:1c:
a0:f6:a0:1e:92:9f:dc:06:ee:2e:36:0a:6e:8f:95:
81:cc:bb:de:f7:d3:a5:ea:e3:63:72:ff:0a:b0:f2:
01:ee:5a:54:e8:ca:f2:a7:fd:a7:b0:0d:e1:ce:50:
09:ff:23:2d:da:dd:1d:05:45:15:db:64:02:26:85:
61:61:44:d3:47:68:25:22:d6:a0:8a:1b:16:3a:37:
25:7a:2d:cb:15:04:ea:fd:01:cf:fe:8a:f9:ae:7c:
ec:b7:44:5a:65:ae:46:ce:05:16:15:f4:df:80:3b:
16:f4:b5:1b:5f:d4:33:f1:06:d4:72:ae:aa:5a:68:
ea:d9:c7:5f:a4:ca:35:fd:79:40:e4:67:79:28:07:
09:40:85:df:96:66:40:a7:e5:e2:95:37:d3:26:94:
39:19:40:f1:0c:c3:6f:3b:3b:51:23:0f:1a:f7:b4:
24:19:3a:ce:f1:dd:66:e9:0a:13:3e:75:c5:d4:71:
01:82:72:43:bb:b7:57:28:e3:0c:cb:3b:2b:79:0e:
25:26:5e:82:69:bb:76:17:0b:0f:fe:33:4e:63:9a:
67:9d:41:52:ac:f8:4c:f8:f9:6f:f3:8c:9b:3e:fc:
6f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F2:F0:89:9B:40:B3:A9:C8:00:0E:0B:47:AF:F5:36:23:C5:2F:10
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:fc:66:fa:a2:cb:da:68:ee:7a:d9:2f:ab:ef:69:de:02:11:
33:1b:81:9a:84:e1:6b:ab:2f:2b:a8:48:18:88:b4:7d:a1:01:
94:62:04:13:d3:5d:a6:10:64:a3:05:e1:c9:e0:41:ce:09:49:
3c:fe:9e:8e:ed:01:41:01:2e:e6:78:27:3c:6e:6c:5f:21:c0:
79:a2:9f:f6:d6:4b:66:6e:38:b8:81:54:53:38:5d:29:e2:13:
1a:00:83:f0:2d:f8:93:3d:54:a4:61:de:7c:1b:8c:1a:35:3d:
73:28:3e:92:4b:69:02:aa:bc:85:0a:dd:50:7c:b6:3d:b2:9d:
53:9d:7e:00:34:3b:72:a9:62:f7:1c:ed:af:31:4d:cd:3f:14:
af:a0:c7:f0:bc:d0:ba:1e:ec:ea:6e:dd:43:ae:db:13:bc:a9:
dd:80:af:09:34:ed:42:9a:d4:7e:1a:6a:3e:7d:a0:92:e5:00:
09:3e:fc:81:f4:f5:01:c3:4b:8e:77:01:27:f0:6d:15:31:64:
88:0d:ec:7a:a4:7a:cb:c0:0b:8b:c8:ca:7b:8d:68:08:a4:9c:
d0:dc:04:a3:b9:2d:39:c1:13:d6:51:b9:fd:9f:38:95:1a:b6:
b6:e4:15:73:36:14:f1:e0:53:5c:fd:1b:8c:c7:9c:23:7d:f2:
4b:23:ec:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:38:34 2026 by rpki-client