Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier: timYKSvWhDeBXNZuOiBbvJk2nwAxRuP0SRBo8pUclaQ=
Subject key identifier: 6F:0D:12:EA:A5:32:F7:76:15:2C:67:AF:44:9B:F3:0B:55:3D:00:11
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 01A0CA47140860819265DD81FFAE9D1EBD66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number: 1A69
Signing time: Tue 22 Sep 2026 18:00:50 +0000
Manifest this update: Tue 22 Sep 2026 18:00:50 +0000
Manifest next update: Wed 23 Sep 2026 18:00:50 +0000
Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: fLWVmaBWxVqtCfQB5XIZUHn2qcKfLKALLU/mcq07bAY=)
2: EwSHe_xf-jqepkCFLSHCwEgr_AI.roa (hash: RC+AV7VwTqdY5tCu6Twk85UOef4oSKz04Y5st23WBE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:14:08:60:81:92:65:dd:81:ff:ae:9d:1e:bd:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: Sep 22 18:00:50 2026 GMT
Not After : Sep 23 18:00:50 2026 GMT
Subject: CN=6f0d12eaa532f776152c67af449bf30b553d0011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:55:09:58:9d:f5:50:d4:3b:19:08:af:13:eb:
fd:ae:77:cb:d9:e8:cb:83:d0:8d:55:be:0a:46:8b:
2b:b6:88:fb:16:53:20:8f:0e:88:5f:4d:82:56:23:
75:85:17:e0:64:4a:0f:e3:e1:3d:4c:f8:fb:57:48:
fa:2a:ea:cd:68:d4:65:b8:78:49:c2:dc:f4:a8:3c:
71:43:29:0d:48:ad:d9:8a:b4:76:d5:cd:94:7c:b8:
9b:56:4f:50:82:72:27:50:e4:c2:10:62:6b:40:a0:
3e:3a:42:c9:15:38:b5:a2:3b:90:7f:9a:c3:23:32:
a3:bc:2b:d9:bd:da:1c:75:75:9c:ef:e4:91:ee:8e:
e2:78:f0:a3:26:de:02:22:18:36:d2:4e:ee:48:e2:
38:ef:8d:30:8f:ec:83:1c:53:38:d6:72:7d:02:a8:
ff:fd:b1:77:f5:0f:2b:46:c3:14:7f:ad:c9:b4:51:
2c:51:5c:ce:41:fd:5a:75:7b:bd:e3:e9:2e:8c:77:
0f:8f:3d:49:d6:00:50:6b:b0:3f:aa:04:e1:69:b0:
aa:3e:3a:c6:f5:9c:6e:48:e2:5a:b1:34:0c:49:ef:
9d:4c:d0:34:24:30:da:6e:45:fe:b7:cf:3c:93:82:
25:16:bd:5f:00:c2:4a:96:b9:37:3e:18:02:53:3b:
ce:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0D:12:EA:A5:32:F7:76:15:2C:67:AF:44:9B:F3:0B:55:3D:00:11
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:d5:d0:30:6f:37:34:e8:41:7f:b6:48:b0:9a:31:63:7d:fa:
a2:84:fe:7d:4b:4a:33:94:f4:bd:da:39:00:51:17:da:33:31:
99:28:4e:5f:d8:04:68:07:ce:0e:4c:62:64:45:ff:66:9b:9a:
3d:0f:2f:2c:87:f1:34:a0:7e:87:1b:1a:c0:fc:63:04:ec:1b:
11:75:85:74:c9:3a:b2:dc:02:c3:e0:97:64:0a:c6:07:dd:ea:
d8:76:a4:72:b0:55:55:9e:c1:60:0e:14:ee:c9:85:58:98:d8:
05:98:32:4d:3b:d6:2b:ca:b8:cb:48:a6:2c:c8:19:60:79:f6:
9b:51:9e:38:e9:eb:d5:8f:ca:59:7c:67:f9:12:8e:c5:46:1c:
9c:5e:a1:99:9e:ef:9b:a7:4c:af:15:87:7b:b7:e3:c6:a5:62:
fe:ad:6b:55:74:8b:23:6c:0d:ac:69:a4:23:44:a6:57:6e:39:
23:a3:ff:c6:a1:9a:de:ab:c7:0f:6f:29:92:9a:ca:c9:49:b5:
98:c2:e9:37:c7:92:aa:dc:59:21:6f:c4:2d:e9:89:11:4e:1a:
57:2e:b5:c3:7c:84:18:73:02:98:46:20:ae:32:4e:51:11:a2:
36:61:2b:24:ab:7f:73:1f:0f:d7:90:43:ec:ce:05:6d:bf:ee:
a2:88:81:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 23:25:01 2026 by rpki-client