Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
File: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft (raw, json)
Hash identifier: YUB+odJvZPUl3UcwhqLdfNA2hhSV2U3awHLujeoahXY=
Subject key identifier: A4:A8:83:E0:7E:E3:2F:60:5A:59:09:2D:B1:11:04:32:DA:52:F5:A9
Authority key identifier: F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
Certificate issuer: /CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Certificate serial: 01A13E2676738526C675043AF576EDCAEBA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
Manifest number: 17DA
Signing time: Thu 15 Oct 2026 06:01:10 +0000
Manifest this update: Thu 15 Oct 2026 06:01:10 +0000
Manifest next update: Fri 16 Oct 2026 06:01:10 +0000
Files and hashes: 1: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl (hash: cL9j2/oUDv/G4bye7oGihBJgiit2dQVFzOJwv6hErXM=)
2: xMdg9tf8PX3rEEL_NSkeA_5BMoE.roa (hash: Fuv5QDlGS8lpVHre1lLFiZmSKdkP1J409k7DUxmhGPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:76:73:85:26:c6:75:04:3a:f5:76:ed:ca:eb:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Validity
Not Before: Oct 15 06:01:10 2026 GMT
Not After : Oct 16 06:01:10 2026 GMT
Subject: CN=a4a883e07ee32f605a59092db1110432da52f5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:45:53:b4:02:08:4f:85:7d:5e:a1:09:c5:ee:
b3:17:b7:ca:50:2a:91:04:f4:9c:f3:4e:eb:f8:49:
0e:4b:d7:10:70:f2:59:52:4c:01:c1:9c:67:62:94:
f1:08:80:6b:84:6b:02:0b:a5:1f:e4:85:be:4b:48:
09:fc:d1:ee:da:f8:2b:fa:13:07:02:99:4a:49:16:
58:ec:6f:c0:71:b2:3d:0e:69:8e:c4:f7:1b:e2:9e:
f9:47:44:d1:43:7f:17:a2:1c:4b:4c:1b:69:1d:7a:
21:8b:64:28:ab:5b:68:bf:2d:6f:cd:07:39:d4:71:
87:12:51:c9:ab:37:63:62:bb:5a:eb:9c:a8:0d:41:
6f:03:7b:18:25:4e:58:24:6c:6b:7c:3c:53:00:5d:
86:e3:21:e5:43:0d:6f:92:5b:af:63:ce:97:33:4b:
1b:e5:10:75:5f:db:95:28:51:d8:65:83:07:43:44:
ec:39:f5:a7:9e:1a:2e:94:2c:a1:49:98:b1:29:89:
9b:2a:71:7d:1f:ac:06:e1:41:d7:61:34:0b:29:cc:
e5:ac:37:f8:19:e1:7c:61:09:82:73:3e:c4:65:0b:
02:1f:63:47:dd:32:1e:20:d5:f4:20:fb:f7:3c:2a:
e4:5d:db:33:3d:c3:36:4f:26:dc:34:fe:cf:4d:0c:
c2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:A8:83:E0:7E:E3:2F:60:5A:59:09:2D:B1:11:04:32:DA:52:F5:A9
X509v3 Authority Key Identifier:
keyid:F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:2f:73:09:97:25:3a:b6:b8:ec:38:11:cf:cc:9d:78:28:35:
ba:96:99:8f:40:ac:2c:76:ce:52:30:60:13:d2:a2:49:b3:ea:
7a:b1:04:dd:76:4f:8e:b9:d0:45:5e:de:7e:42:e5:e7:fc:da:
1f:e4:17:e8:00:92:66:79:62:47:d2:dc:3c:3f:6a:9b:ea:89:
1c:d2:a0:68:df:57:45:2d:55:11:6a:b5:ac:9d:96:9c:bd:91:
81:57:67:6d:f5:0e:b0:bb:2c:43:dc:c4:b2:f5:4a:b3:52:2f:
17:d4:5a:f9:bd:20:86:49:fe:65:43:75:0d:d6:ce:fe:b0:d7:
fe:04:cd:90:b7:d8:8b:b5:27:28:10:07:c7:fe:c7:06:f4:94:
35:66:9f:99:40:b7:6e:f2:f7:02:98:e0:67:0c:cd:25:12:69:
6c:3a:be:35:f0:59:4a:47:63:41:b5:de:74:8e:18:cd:9c:40:
6c:fa:f2:f4:8b:00:4c:56:2c:20:eb:d1:5f:fc:36:61:32:e6:
48:c9:b4:e5:f8:17:8f:c2:54:77:b6:55:16:47:5a:c1:e4:66:
fb:b8:d2:c3:68:af:db:d7:cc:24:ac:8f:33:e1:25:e6:ee:ef:
52:bf:35:3a:4c:0f:d0:61:91:88:d8:36:6e:ae:d5:1e:7f:20:
c5:d2:ea:38
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaE+JnZzhSbGdQQ69XbtyuugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4YWE3ZTQ3YjkxYTYyOTVjYmY3MThjMWYyZGRiMGEyNWMy
NzZlYjIwHhcNMjYxMDE1MDYwMTEwWhcNMjYxMDE2MDYwMTEwWjAzMTEwLwYDVQQD
EyhhNGE4ODNlMDdlZTMyZjYwNWE1OTA5MmRiMTExMDQzMmRhNTJmNWE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkVTtAIIT4V9XqEJxe6zF7fKUCqR
BPSc807r+EkOS9cQcPJZUkwBwZxnYpTxCIBrhGsCC6Uf5IW+S0gJ/NHu2vgr+hMH
AplKSRZY7G/AcbI9DmmOxPcb4p75R0TRQ38XohxLTBtpHXohi2Qoq1tovy1vzQc5
1HGHElHJqzdjYrta65yoDUFvA3sYJU5YJGxrfDxTAF2G4yHlQw1vkluvY86XM0sb
5RB1X9uVKFHYZYMHQ0TsOfWnnhoulCyhSZixKYmbKnF9H6wG4UHXYTQLKczlrDf4
GeF8YQmCcz7EZQsCH2NH3TIeINX0IPv3PCrkXdszPcM2TybcNP7PTQzC7wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKSog+B+4y9gWlkJLbERBDLaUvWpMB8GA1UdIwQY
MBaAFPiqfke5GmKVy/cYwfLdsKJcJ26yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1LcC1SN2thWXBYTDl4akI4dDJ3b2x3bmJySS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGYvZGU0OTRmLTUxMjktNDlmOS05Mjll
LTk3MGM4M2U5NmNiYy8xLzEtS3AtUjdrYVlwWEw5eGpCOHQyd29sd25ickkubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzBmL2RlNDk0Zi01MTI5LTQ5ZjktOTI5ZS05NzBjODNlOTZj
YmMvMS8xLUtwLVI3a2FZcFhMOXhqQjh0MndvbHduYnJJLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVC9z
CZclOra47DgRz8ydeCg1upaZj0CsLHbOUjBgE9KiSbPqerEE3XZPjrnQRV7efkLl
5/zaH+QX6ACSZnliR9LcPD9qm+qJHNKgaN9XRS1VEWq1rJ2WnL2RgVdnbfUOsLss
Q9zEsvVKs1IvF9Ra+b0ghkn+ZUN1DdbO/rDX/gTNkLfYi7UnKBAHx/7HBvSUNWaf
mUC3bvL3ApjgZwzNJRJpbDq+NfBZSkdjQbXedI4YzZxAbPry9IsATFYsIOvRX/w2
YTLmSMm05fgXj8JUd7ZVFkdaweRm+7jSw2iv29fMJKyPM+El5u7vUr81OkwP0GGR
iNg2bq7VHn8gxdLqOA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 12:33:45 2026 by rpki-client