Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
File: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft (raw, json)
Hash identifier: fD1hF9vatJnsPgJFlKCMY6YiNVBLLpYpndvlh24kO6k=
Subject key identifier: CC:7F:B4:FD:68:BD:E3:B4:4A:F2:3B:14:E7:26:A2:0E:71:57:47:20
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Certificate issuer: /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial: 01A17883179F34BFAA146D2DD1A1B537E5D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
Manifest number: 02D8
Signing time: Mon 26 Oct 2026 14:00:19 +0000
Manifest this update: Mon 26 Oct 2026 14:00:19 +0000
Manifest next update: Tue 27 Oct 2026 14:00:19 +0000
Files and hashes: 1: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl (hash: Ti4AZtIRh3T7w1RYhBrgOhaze7bLDU33ZBpeS/mPwZQ=)
2: dWQzDZpVB7OiM0vZm0oBe4UUrds.asa (hash: g6XCHoueCq216JgmRUZR1LKQhV53b5OQSgUBfD4mvXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 14:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:17:9f:34:bf:aa:14:6d:2d:d1:a1:b5:37:e5:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Validity
Not Before: Oct 26 14:00:19 2026 GMT
Not After : Oct 27 14:00:19 2026 GMT
Subject: CN=cc7fb4fd68bde3b44af23b14e726a20e71574720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:64:20:a8:6f:44:52:ab:44:28:6c:29:ed:a9:
9b:a5:04:3e:5f:35:c7:be:53:f7:ba:1b:43:9e:40:
af:54:0d:38:f0:b5:57:9f:93:20:72:eb:f6:31:71:
47:a6:94:72:2d:5b:9d:cd:86:7c:e4:c7:7f:17:fd:
05:59:bb:ab:35:5b:1f:f1:bf:25:9d:ed:58:c2:d1:
01:5c:9a:d1:f1:35:49:89:5f:8b:1d:c0:19:55:b0:
10:3b:3c:51:6d:76:99:6f:d4:79:4f:80:9b:1d:09:
fe:45:c2:1e:84:50:61:b0:ef:05:8a:07:bb:20:e5:
18:79:74:7f:7b:ad:7d:fa:3a:0f:19:6b:3e:95:76:
8d:9e:c2:d6:5d:f7:98:f1:86:a5:01:5d:36:c5:54:
0b:81:e2:4d:a7:99:56:f2:74:38:33:ac:71:d9:c9:
9f:64:44:2f:9e:b5:a3:87:8e:7f:c0:e4:59:4d:f7:
9d:ba:9e:35:9a:31:3c:58:66:ce:09:17:43:83:10:
0e:4c:a3:95:c7:3a:e1:b7:bf:54:e3:65:65:5f:da:
a1:37:c7:46:e5:54:5a:ee:f9:73:29:86:ce:67:d2:
ee:07:a8:87:04:e9:57:08:81:54:3c:b7:2f:f7:88:
73:44:12:44:fd:13:7d:a8:b3:33:d1:83:6a:e4:d6:
c0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7F:B4:FD:68:BD:E3:B4:4A:F2:3B:14:E7:26:A2:0E:71:57:47:20
X509v3 Authority Key Identifier:
keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:18:93:da:12:ab:44:36:c9:c7:95:05:53:d1:26:39:14:76:
9a:61:8e:9a:d7:c1:88:d1:5d:c9:ba:35:90:f4:67:2d:a6:04:
ae:9c:04:c9:0d:79:37:5f:17:00:bf:10:31:3b:b1:f2:b0:98:
2c:19:93:e4:6b:97:f6:75:17:25:eb:dc:13:e7:d8:47:b8:37:
a0:66:c7:18:c2:66:f4:0d:c1:a7:59:92:d0:33:89:74:aa:f0:
ad:31:30:9b:bf:ae:2c:5c:a5:f0:56:83:4e:ea:96:8d:c9:ab:
71:59:39:a8:2d:a9:2d:23:43:0f:73:61:0f:bb:0d:1d:27:88:
a9:2f:7d:0a:97:4f:21:05:c1:ab:97:bf:a7:1f:af:96:ee:0a:
31:72:de:a7:87:2f:23:39:57:31:05:76:4b:14:3a:46:e5:a7:
d8:39:e8:0c:02:2b:43:7a:ed:46:98:de:4d:b8:96:55:e3:24:
57:41:1d:03:83:99:23:e4:c9:40:47:00:ef:38:d3:f7:d3:72:
27:06:86:fd:c0:a5:70:3c:3c:77:41:19:df:93:a1:d3:7e:69:
82:cc:e6:43:ed:f4:85:4a:76:a9:60:89:89:89:ab:5f:b1:af:
e8:ce:af:60:e4:2b:8f:e1:5d:b1:fa:40:3c:58:9a:64:32:93:
92:bf:7c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:20:17 2026 by rpki-client