Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier: CEXdn78BoS2OVBkVg4f1/NFYBegSlGUaVnN0tgvyPoY=
Subject key identifier: 1A:15:C1:D0:1F:D7:DD:1B:A6:BA:1B:80:EB:54:BC:97:D5:8F:17:E6
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 019CABD95E0A70119F53931B9F8DBA7171CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 00:01:15 +0000
Manifest this update: Mon 02 Mar 2026 00:01:15 +0000
Manifest next update: Tue 03 Mar 2026 00:01:15 +0000
Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: UrJBNJRxh8eo8blCRclNK/UkaN6sWbDN6QOBqvYVLWM=)
2: EwSHe_xf-jqepkCFLSHCwEgr_AI.roa (hash: RC+AV7VwTqdY5tCu6Twk85UOef4oSKz04Y5st23WBE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:5e:0a:70:11:9f:53:93:1b:9f:8d:ba:71:71:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: Mar 2 00:01:15 2026 GMT
Not After : Mar 3 00:01:15 2026 GMT
Subject: CN=1a15c1d01fd7dd1ba6ba1b80eb54bc97d58f17e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:79:a8:f4:04:fc:47:1b:2a:0c:88:26:27:
e2:8c:0c:aa:8c:0e:0e:17:52:4c:8b:c7:56:79:27:
ad:e8:d5:c3:aa:2b:79:4d:44:c9:b3:ab:77:ee:c5:
9d:95:96:3c:95:fe:72:70:5f:d9:62:9d:6b:ac:2d:
4f:07:4f:81:74:3f:45:91:90:58:28:ac:02:80:9f:
b3:86:61:0e:34:99:2d:41:c2:89:82:4c:f3:22:cb:
f0:4c:a6:f3:e1:fc:70:a9:f4:08:d3:11:dd:1e:8e:
f5:5a:82:d4:a1:99:6d:c8:d4:31:80:2a:e4:17:39:
c0:60:64:b2:a6:02:95:23:f1:3c:f4:8a:ce:61:e3:
6b:da:30:8f:ca:45:d1:75:92:e9:5d:9a:ea:98:7a:
c2:19:4c:f5:c6:47:67:da:3c:05:cf:da:9d:18:07:
c3:fd:49:b3:53:2b:13:f8:42:41:e8:52:de:45:b4:
17:bd:6c:4f:31:50:c3:cf:5f:e2:d5:a6:5f:eb:4c:
62:54:44:96:57:68:b8:be:81:cb:0e:2d:0f:c7:71:
3f:8e:e4:45:36:73:34:44:c6:84:9e:65:a5:b9:84:
82:89:cc:68:2c:b4:c2:ae:16:71:1f:41:2e:ab:46:
e6:76:54:a3:70:d7:58:4f:ab:a3:36:ea:ee:54:2c:
eb:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:15:C1:D0:1F:D7:DD:1B:A6:BA:1B:80:EB:54:BC:97:D5:8F:17:E6
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0f:03:dd:ac:95:3a:24:27:f6:11:51:16:8d:6b:5e:ce:3d:
f0:6d:38:d8:0c:c2:a6:99:4f:e1:17:29:75:bd:c2:f5:ce:4d:
55:8f:83:da:95:68:82:a2:b5:cb:66:39:7a:b0:6c:49:56:4c:
25:a0:ce:75:c9:10:3a:c4:31:10:4b:a5:3b:fb:96:59:92:cc:
77:e6:6a:ec:f9:dd:58:c1:1f:ae:70:18:e2:ed:0c:a4:99:c3:
39:12:e2:9d:2b:c9:92:9d:42:1f:87:79:b1:31:5e:b6:dd:26:
95:33:02:98:c4:29:e1:f9:bd:3c:6d:0f:fc:20:1e:56:16:5e:
76:4e:d4:7d:ef:ca:49:bf:1b:20:8e:58:20:a0:6b:0b:86:74:
ff:65:8a:24:17:ad:71:db:01:33:bc:c7:de:ae:fb:d8:00:99:
1a:b9:1e:31:f7:8b:8a:4f:30:17:13:e6:d0:98:b9:c3:20:70:
34:92:b4:1e:d0:e0:fc:00:58:70:34:fa:26:d2:2c:20:f3:39:
45:b5:f2:59:94:9a:3c:82:a2:69:d5:2a:05:69:0f:d4:b2:1f:
c4:05:a6:ee:5e:13:c0:d6:29:e7:87:7b:3e:de:2e:ba:a5:ff:
6f:29:b2:d5:26:20:df:7a:fa:9a:11:a8:f5:a1:77:36:2c:8a:
33:ab:fd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:36 2026 by rpki-client