Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
File: 1KAH7S_gjUM-DwoC9DynrLJvWg4.mft (raw, json)
Hash identifier: yLpS0JiSplMNK/gkJfORBQgIvh0z4A1B8vQNfOMA7bw=
Subject key identifier: 5E:5D:5B:0F:0E:6A:BA:17:EC:F1:0F:40:A1:35:1C:68:0E:C8:0F:03
Authority key identifier: D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
Certificate issuer: /CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Certificate serial: 019CA9B3F7CC5DE0DD2AC84F59FBF5C1995B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
Manifest number: 0689
Signing time: Sun 01 Mar 2026 14:01:09 +0000
Manifest this update: Sun 01 Mar 2026 14:01:09 +0000
Manifest next update: Mon 02 Mar 2026 14:01:09 +0000
Files and hashes: 1: 1KAH7S_gjUM-DwoC9DynrLJvWg4.crl (hash: Tjl9jOBS4TwYgae6M2YcqleBAVLvooR7d62ZzGbbVaI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:b3:f7:cc:5d:e0:dd:2a:c8:4f:59:fb:f5:c1:99:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Validity
Not Before: Mar 1 14:01:09 2026 GMT
Not After : Mar 2 14:01:09 2026 GMT
Subject: CN=5e5d5b0f0e6aba17ecf10f40a1351c680ec80f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5f:a6:c2:76:d2:2c:8a:ec:39:c6:b6:47:54:
45:34:4b:16:66:c4:fc:ff:15:44:60:bb:0d:8e:06:
d3:f2:03:d6:76:50:88:95:c9:c2:be:59:61:64:78:
6c:b5:de:16:96:63:07:49:6b:ca:88:3d:3a:83:e7:
25:6a:15:84:ab:c8:e4:f6:a2:b9:fa:fa:b8:f9:5b:
d2:f2:d5:55:40:7c:58:57:30:dc:62:b9:cb:c2:77:
7f:68:c4:de:e1:1f:c4:66:b7:81:65:73:89:60:2d:
21:54:eb:53:f2:c1:d7:64:ad:01:92:c2:a6:33:fd:
70:1d:70:3c:9a:f9:99:47:db:5a:83:11:6a:11:42:
c4:7b:64:19:6d:a2:0b:b2:61:0c:07:5d:e1:4d:87:
21:ea:c3:7c:cc:8d:9c:81:55:35:07:2e:7d:8d:2c:
06:44:43:51:65:ff:6d:2a:cf:d8:fd:18:04:b0:d0:
20:18:c5:fb:22:a9:46:08:6c:ab:df:d5:9a:5f:28:
b9:eb:68:d9:95:71:46:7d:bb:62:7d:33:71:ed:5e:
bb:4e:a6:9f:88:11:27:0c:34:0c:31:79:98:54:24:
15:7b:f4:04:31:e9:ae:ad:7c:40:aa:d2:c7:35:4d:
fb:c2:20:04:aa:2c:56:e8:89:a5:5c:19:0c:d3:02:
30:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5D:5B:0F:0E:6A:BA:17:EC:F1:0F:40:A1:35:1C:68:0E:C8:0F:03
X509v3 Authority Key Identifier:
keyid:D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:dd:f1:38:e0:eb:9a:4b:aa:19:df:af:db:b4:30:3b:32:a7:
af:66:28:da:05:44:12:2b:fc:7d:5b:ae:4d:72:8c:32:15:d5:
ef:f7:bc:c5:97:7b:67:a5:a4:54:ec:9a:78:73:bf:64:59:d8:
45:f9:ea:c1:2a:b5:7b:02:f5:43:e0:41:e2:60:7a:e8:56:2d:
99:d2:05:04:37:12:12:67:c0:03:c9:5d:75:52:b0:26:61:e5:
df:35:92:a9:25:a1:a9:ed:b5:ac:2e:6d:b5:59:e5:36:db:86:
29:ea:c8:6c:20:91:31:6e:f5:5b:84:98:aa:01:e6:53:55:79:
5a:6a:2a:f8:70:59:80:dc:51:af:f5:03:cb:48:cc:86:6c:40:
12:fb:12:30:e5:95:e7:b2:f6:ef:34:76:13:19:1f:67:c8:02:
94:bd:07:51:26:4b:8f:a9:ef:c1:36:65:cc:93:51:0a:cb:4f:
f9:6f:b1:34:cd:58:de:3f:52:15:9a:ef:87:3a:5b:e1:8b:7a:
06:5a:e3:de:c0:a0:50:f6:59:05:68:45:26:0e:72:39:28:24:
a9:64:7e:78:a2:93:ea:91:83:55:78:f4:e0:30:55:5b:ff:b0:
08:d5:f9:ce:ca:2a:fb:ef:d8:90:06:f4:3b:94:40:3c:32:6d:
1e:fd:7e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:09 2026 by rpki-client