
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
File: 1-k5AU1miExcI_AJDjUclaOLANHA.mft (raw, json)
Hash identifier: P9fDbJqS4CAi4d+8Y/FR0Q30m6dIjdcJswiyBQzBP2o=
Subject key identifier: 24:86:13:EC:FF:FD:08:C5:E5:72:65:55:95:09:D6:A6:AC:F6:7D:83
Authority key identifier: FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
Certificate issuer: /CN=fa4e405359a2131708fc02438d472568e2c03470
Certificate serial: 019F1830D875E63988EFBA409B79DCAAEE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
Manifest number: 0DB3
Signing time: Tue 30 Jun 2026 11:01:21 +0000
Manifest this update: Tue 30 Jun 2026 11:01:21 +0000
Manifest next update: Wed 01 Jul 2026 11:01:21 +0000
Files and hashes: 1: 1-k5AU1miExcI_AJDjUclaOLANHA.crl (hash: S9aASzYQ8M9goRvZHlqtMEawi3hQiglg5p5eedEYaig=)
2: FSiX4t_tg_y7oF-_55Q5bbdUsQ8.roa (hash: +22ogCrtLyYe516AYe3BcHerNsIQmbIA9oXfV6jBDmc=)
3: hTDr1ZrFtma_8PT0j_czy4cp_gk.roa (hash: KaADjjZM/0gRfnbSGNaVQZNcDLCw6Df/2sVnzc09HOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:d8:75:e6:39:88:ef:ba:40:9b:79:dc:aa:ee:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4e405359a2131708fc02438d472568e2c03470
Validity
Not Before: Jun 30 11:01:21 2026 GMT
Not After : Jul 1 11:01:21 2026 GMT
Subject: CN=248613ecfffd08c5e57265559509d6a6acf67d83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a5:20:cc:58:1e:fe:25:7f:bc:62:04:7b:55:
f2:e2:8d:9f:0f:43:b1:97:4c:84:3f:88:2e:cc:38:
5e:2f:13:e8:5d:30:ba:fb:d7:8f:75:2f:65:39:81:
1a:e1:bb:1f:34:94:41:b5:7d:5e:86:fc:7a:0f:73:
c5:f2:d1:5e:4a:49:7c:e4:e6:6d:a1:02:77:2d:9f:
3e:45:d8:44:76:21:09:72:4f:76:56:06:76:02:5f:
4f:36:e3:87:6b:12:c5:21:7b:fe:60:5b:c8:30:34:
5a:d0:18:49:1c:2c:fb:09:c2:82:86:2e:cd:b8:a3:
15:67:73:31:f7:6d:b9:1d:c7:3f:2f:db:25:87:c7:
19:9b:f0:32:01:1e:64:09:94:07:dd:2b:d1:fc:28:
30:6f:bb:c1:ca:24:ed:bb:7b:f8:05:75:3a:77:b1:
9e:bf:10:06:67:43:d1:c6:d8:bc:85:d0:68:95:72:
40:50:00:bb:4f:6e:a0:c8:57:e8:ba:b4:6c:5a:c8:
41:39:ab:38:fe:3d:62:92:da:15:61:6e:79:cf:7f:
5e:dd:d6:36:79:66:8e:d5:6b:85:fd:e3:51:0d:56:
3f:c1:e2:20:7d:48:04:8c:23:aa:2c:25:71:ca:0d:
f6:4e:22:c7:41:10:0d:3a:e6:e6:20:57:4c:a9:d5:
6e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:86:13:EC:FF:FD:08:C5:E5:72:65:55:95:09:D6:A6:AC:F6:7D:83
X509v3 Authority Key Identifier:
keyid:FA:4E:40:53:59:A2:13:17:08:FC:02:43:8D:47:25:68:E2:C0:34:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-k5AU1miExcI_AJDjUclaOLANHA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6a3f35-35b8-49e0-9f44-b818faecb717/1/1-k5AU1miExcI_AJDjUclaOLANHA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:bf:1b:44:92:e2:be:c4:fe:fb:81:b9:f7:af:53:b8:f0:63:
f2:4a:15:c1:f2:d1:30:ee:5e:ef:07:5c:15:34:63:d0:1e:77:
69:8c:48:26:a0:b1:88:5a:48:c3:7f:ac:96:27:97:43:58:47:
c3:b6:43:d6:a4:d3:9d:45:80:a9:59:3f:fb:76:15:fc:09:89:
19:1b:96:71:1c:c8:f3:0e:86:12:07:c2:39:e3:78:2b:1d:2a:
39:24:a1:c3:df:c4:2c:d0:d4:fe:7a:9e:cb:ee:af:7d:1b:a8:
36:f5:5b:d4:9f:91:9a:80:30:7c:84:c7:1b:4e:73:48:ab:7d:
b6:3b:d4:bf:5f:4a:18:14:26:93:ba:eb:00:98:2c:e2:2a:0f:
d3:8c:c8:38:d3:21:68:71:96:2c:07:af:4f:7f:89:a6:63:9e:
d5:c4:4d:4e:27:3d:92:51:cc:ba:81:59:19:b0:8b:f3:bf:c6:
d7:70:9a:39:ba:0d:4e:14:79:02:57:ba:ae:57:01:95:9c:83:
ec:fe:f5:57:09:c2:16:7e:b7:c6:de:8a:c9:10:64:32:cc:fe:
c0:b3:52:48:70:3a:11:50:6d:5e:4f:8f:9c:69:29:43:01:f5:
f6:56:f6:56:25:4f:e4:8c:64:1a:6d:a9:ff:f2:ae:77:81:fa:
37:70:9f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:25:21 2026 by rpki-client