Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
File: 1KAH7S_gjUM-DwoC9DynrLJvWg4.mft (raw, json)
Hash identifier: Rcsfq8MsXjwT1DK7/TNw9ZDlayFlFGn+PV1HwUTXpR4=
Subject key identifier: 88:2C:5D:86:D8:5C:2F:F6:66:74:DE:D2:E3:08:BA:FE:F2:B0:40:5A
Authority key identifier: D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
Certificate issuer: /CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Certificate serial: 019D992B18ECFE9D49A0432AB8186A2D5A8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
Manifest number: 0705
Signing time: Fri 17 Apr 2026 02:00:31 +0000
Manifest this update: Fri 17 Apr 2026 02:00:31 +0000
Manifest next update: Sat 18 Apr 2026 02:00:31 +0000
Files and hashes: 1: 1KAH7S_gjUM-DwoC9DynrLJvWg4.crl (hash: 3WT9G4m4zCGo9QTlPeUjbhiLOofzT7u79i8VfetCSl4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:18:ec:fe:9d:49:a0:43:2a:b8:18:6a:2d:5a:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Validity
Not Before: Apr 17 02:00:31 2026 GMT
Not After : Apr 18 02:00:31 2026 GMT
Subject: CN=882c5d86d85c2ff66674ded2e308bafef2b0405a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:b2:67:1f:8d:62:8d:16:8b:1d:66:45:56:
a3:af:6c:65:a6:4f:f7:f6:0d:0a:39:c4:16:3e:6a:
74:1c:49:c6:85:1e:83:ab:df:8e:4b:fd:7d:aa:59:
75:6d:27:67:19:77:4d:b5:39:b9:93:69:79:8c:6b:
45:c5:b5:46:4d:f8:6a:5e:e0:fb:d5:74:26:53:9d:
67:71:7f:dc:17:97:cb:06:86:0c:dc:12:a4:bc:b1:
3e:b6:24:bd:95:07:41:a0:0e:ff:94:79:bc:77:f8:
ad:d9:dd:54:a5:63:c3:bc:c7:32:48:22:a1:3e:aa:
9e:eb:11:e8:60:2d:e3:2e:81:ac:ec:54:45:87:11:
1f:bc:d6:16:78:48:e4:2e:5c:1a:46:29:df:a8:e0:
34:13:71:05:31:25:2b:35:5a:4f:72:f5:19:a9:a6:
b3:63:a8:f2:ac:83:69:c1:a1:36:1a:7a:91:8f:83:
26:a1:22:ab:88:0d:b1:06:8a:ce:68:06:46:3a:bb:
54:d4:c1:96:36:f5:dc:94:ba:b5:11:61:4d:8d:a6:
ad:b7:5e:1a:8c:43:f1:12:0b:be:40:d2:fd:7b:fc:
b6:a5:1a:a6:ed:48:2b:47:d5:24:3a:d1:2f:bf:fa:
ae:ae:58:ca:50:fb:34:aa:aa:7b:ce:a2:5e:b6:93:
e9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2C:5D:86:D8:5C:2F:F6:66:74:DE:D2:E3:08:BA:FE:F2:B0:40:5A
X509v3 Authority Key Identifier:
keyid:D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b5:f0:27:ee:b7:04:36:b2:bc:7f:68:9b:6d:5a:7b:13:a2:
98:39:80:3a:ba:a5:2b:ec:d7:66:dd:93:1c:76:14:15:a2:91:
a1:0d:c0:67:de:69:04:6b:9d:d8:33:d3:70:b7:15:70:16:3f:
58:1c:1e:64:ca:90:99:0b:ee:6d:7f:dd:2c:55:69:6f:ad:8a:
7b:ed:13:a8:89:97:65:02:2b:28:da:19:19:ea:3c:8c:5c:8e:
36:66:74:ce:f3:a5:6c:d0:7f:59:95:9e:e0:85:02:dc:30:f8:
61:03:0a:71:cf:80:eb:98:fb:d9:64:83:6f:9e:1f:0f:76:6e:
3c:59:fe:37:4a:4b:34:94:f1:e1:1f:d0:91:ac:68:b5:a4:60:
0b:e9:14:e3:b0:77:71:22:ed:fd:6f:76:c8:dc:c1:e8:58:e9:
05:f5:32:0e:48:75:fd:4d:dd:ff:62:cc:75:a0:c5:98:27:6a:
ff:bb:e2:7d:28:92:0e:b4:a1:98:3a:0f:bc:c4:ad:b0:b4:88:
0a:fd:01:1b:47:51:94:03:b0:22:99:2e:c8:07:c2:ef:e4:e0:
0c:dc:d1:10:1e:40:48:a7:db:48:6c:b6:4d:ce:85:b7:1b:2c:
50:15:e9:c4:f4:64:e2:a1:b3:bc:fb:bc:d5:12:ad:e3:a8:61:
d3:63:c8:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:24:19 2026 by rpki-client