Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
File: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft (raw, json)
Hash identifier: wYI+gzjVvYhivaqDTjHpuoap4lwVAdxmQ5uaCLSZ1jY=
Subject key identifier: B2:5A:20:80:D3:28:67:5D:40:3B:57:15:31:12:DE:50:92:80:68:21
Authority key identifier: F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
Certificate issuer: /CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Certificate serial: 019D38D3A1DFC18316B381A06421AA0C283C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
Manifest number: 15C5
Signing time: Sun 29 Mar 2026 09:01:26 +0000
Manifest this update: Sun 29 Mar 2026 09:01:26 +0000
Manifest next update: Mon 30 Mar 2026 09:01:26 +0000
Files and hashes: 1: 1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl (hash: tQKoBnHrXN+K5jvqdJP4lO8Lwo5gMmX3CM80q31ZDPs=)
2: xMdg9tf8PX3rEEL_NSkeA_5BMoE.roa (hash: Fuv5QDlGS8lpVHre1lLFiZmSKdkP1J409k7DUxmhGPw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:a1:df:c1:83:16:b3:81:a0:64:21:aa:0c:28:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8aa7e47b91a6295cbf718c1f2ddb0a25c276eb2
Validity
Not Before: Mar 29 09:01:26 2026 GMT
Not After : Mar 30 09:01:26 2026 GMT
Subject: CN=b25a2080d328675d403b57153112de5092806821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:33:00:4a:70:dc:6f:5b:12:f8:af:1c:f2:7c:
4b:d2:fb:b5:64:c2:3d:a4:3c:f6:46:30:26:73:24:
0a:8c:8b:d7:b1:f8:d0:07:c9:16:dc:ec:05:50:49:
6c:a9:03:12:20:10:e5:73:07:ec:cd:94:a6:3b:79:
ea:bb:2d:ae:1f:00:3a:af:a3:d3:ea:ea:9a:3a:bc:
6a:6f:38:3e:7b:ee:be:ef:29:f2:3f:c6:a3:8e:02:
cb:f4:e2:6d:a4:ba:d2:47:dc:df:b2:9f:dc:71:51:
b9:8a:fc:68:c7:cf:8f:7f:39:e7:13:da:fb:12:d9:
61:2c:c1:6b:44:e6:25:47:73:a0:db:2f:99:cb:93:
fd:bd:63:3f:90:06:8b:76:75:83:7d:30:21:38:c6:
ab:2a:a1:44:4f:19:a5:c8:89:3e:43:4f:ea:ff:0b:
d2:9c:df:43:c9:22:03:a9:28:80:c4:29:4c:af:ad:
e4:bc:88:a1:c3:25:7e:fb:ed:88:9d:25:ad:41:07:
7b:00:52:44:8f:ac:6b:80:3e:ff:77:fa:f0:79:87:
5b:bc:55:ff:7f:31:80:a9:27:50:20:2f:12:e0:be:
f0:77:8f:51:1f:87:25:a6:5b:64:75:95:3b:23:a6:
d2:28:c0:83:96:ea:99:c2:dd:77:75:a3:f3:d4:48:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5A:20:80:D3:28:67:5D:40:3B:57:15:31:12:DE:50:92:80:68:21
X509v3 Authority Key Identifier:
keyid:F8:AA:7E:47:B9:1A:62:95:CB:F7:18:C1:F2:DD:B0:A2:5C:27:6E:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/de494f-5129-49f9-929e-970c83e96cbc/1/1-Kp-R7kaYpXL9xjB8t2wolwnbrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:f8:68:d1:04:d4:52:5b:77:6e:ef:b2:73:f8:2a:9a:8a:d9:
7b:a2:b3:c8:e0:61:25:99:c9:8c:7a:ce:5e:46:09:28:79:49:
47:8e:ee:8d:2f:df:4e:5d:43:26:65:af:2e:a4:15:e9:c0:c8:
6a:9e:9b:28:2a:f6:f5:4f:8e:34:a4:dd:f3:ff:f5:a5:20:d3:
e8:1f:7b:8f:83:fa:5d:d5:ec:15:7e:11:29:3b:4c:ae:79:84:
d0:73:ef:c5:58:51:cf:14:ab:24:24:89:0e:51:69:44:40:d8:
90:fe:f6:f5:e2:c5:63:c4:96:9e:ee:d1:f5:fc:1d:38:d3:fd:
bc:70:78:1d:1d:23:b9:d9:bf:20:08:d7:ad:7b:75:2b:9e:34:
5e:8b:3a:d3:6d:5c:79:1b:75:8f:83:a2:b5:c7:36:29:0e:39:
9c:53:f6:fd:00:f4:f9:ca:ec:7b:87:5f:7d:88:95:18:b0:e0:
13:8c:9d:be:2f:5b:9d:af:da:0c:c0:b8:fd:dd:cf:50:92:b1:
1c:a7:66:cd:02:40:dc:66:1d:03:d2:27:69:4a:02:5c:11:0e:
a2:3b:dc:31:9a:16:61:e0:69:27:32:87:92:6a:4a:2e:49:d4:
e1:c2:21:73:91:97:ff:0f:fc:af:19:38:7d:c9:b9:93:04:8d:
38:ed:f2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:16:35 2026 by rpki-client