Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: LBREI/0PBSUpxkmH4b8Zt6ZqMb9VjrsqQ85zJR9vyKA=
Subject key identifier: 75:1A:F1:8E:DA:1F:5A:81:E6:96:95:75:21:E1:40:2C:4C:3E:4E:06
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 01A0016F25891B75F463433A0BB7A9F51FCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 10E5
Signing time: Fri 14 Aug 2026 18:00:56 +0000
Manifest this update: Fri 14 Aug 2026 18:00:56 +0000
Manifest next update: Sat 15 Aug 2026 18:00:56 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: uiIxOPgKbUzecel8ldL+4ptLkk0ZdOgP1Qni7t7n4h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:25:89:1b:75:f4:63:43:3a:0b:b7:a9:f5:1f:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Aug 14 18:00:56 2026 GMT
Not After : Aug 15 18:00:56 2026 GMT
Subject: CN=751af18eda1f5a81e696957521e1402c4c3e4e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:86:e0:1d:d3:f7:36:60:94:8c:91:63:e1:07:
74:2c:0f:e5:6e:95:4c:de:0a:45:43:b1:a3:71:df:
57:6c:02:62:52:35:ed:74:4d:2f:d9:ed:3f:3b:b9:
e2:67:e6:2b:e4:c6:96:dc:bd:9f:64:4b:a4:94:3b:
aa:5b:a5:e8:ce:2c:0e:cf:23:94:95:10:b9:aa:3b:
27:0f:6d:c6:6c:0a:b8:be:ab:6f:b9:d4:36:85:43:
69:4f:28:13:cb:d1:58:69:44:92:03:7a:af:3d:ce:
c7:7f:bf:41:42:d5:7f:00:f1:9b:d0:72:77:07:9c:
f0:b7:2f:fd:6c:fd:ee:24:ed:68:ea:87:3b:25:69:
58:2f:da:29:85:3b:a4:25:36:d1:4c:ef:ad:9e:bb:
2d:c3:49:bf:c8:a4:ab:dc:fc:0d:11:8f:3d:54:c0:
2b:76:19:a0:6d:9f:57:52:10:06:41:27:09:c5:1a:
f2:79:3e:69:2e:fd:c7:d5:31:a8:e1:9d:f3:c2:02:
93:e8:42:70:87:83:41:9a:e6:c8:af:c1:b9:42:0b:
30:3a:98:67:d0:40:bc:66:90:59:35:7f:96:1a:48:
56:7f:9d:0a:d6:84:5b:67:9e:1e:cf:e3:7e:f0:ab:
0f:8c:1f:64:bb:0f:f6:71:26:c0:87:a8:18:5c:17:
e0:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:1A:F1:8E:DA:1F:5A:81:E6:96:95:75:21:E1:40:2C:4C:3E:4E:06
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:13:63:e1:53:22:5e:c4:55:f1:af:fc:9b:16:79:ec:d3:11:
63:e0:ab:ee:4b:45:e2:28:cc:d5:ac:47:16:d2:91:17:f1:cd:
30:2d:7a:52:be:0d:70:a4:30:27:a0:53:28:01:cf:0a:0b:6d:
30:20:4d:d7:5b:b2:ed:b4:ed:e4:c6:78:bc:e9:70:d8:fa:42:
a6:12:02:2a:bd:41:06:02:14:05:59:15:d3:b8:79:a3:7c:7f:
82:2b:0d:50:fe:72:7b:cc:98:07:72:d7:46:41:b0:af:c6:42:
25:f5:56:40:10:5a:d0:f1:70:a3:3a:8a:69:7b:25:21:6f:75:
0c:c8:dc:a5:a6:60:a3:57:a4:89:08:14:1b:b6:f8:41:7a:4f:
88:1e:b7:d1:fb:10:0b:40:d8:f3:2b:6a:76:8c:fb:40:62:90:
43:f1:0d:af:94:39:6b:74:df:03:b5:55:ec:dc:b7:42:ea:02:
09:c8:37:5c:63:0b:fc:e2:c9:d5:05:95:f9:c5:58:cc:33:7d:
b1:3e:fc:8d:7f:c9:2f:cd:d5:4d:54:67:5d:e6:07:52:37:4c:
ad:28:4e:d7:0d:30:a1:33:a5:81:1c:8c:5d:30:33:02:89:d1:
80:62:1f:db:c9:73:66:e5:36:39:30:4b:d8:c9:c4:60:e0:06:
bd:9a:ec:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:29:39 2026 by rpki-client