Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: g+rx0e8mCADaeML7p51ijk/985C01+2dS/EpI7/bJTY=
Subject key identifier: DE:F6:69:46:1D:C2:07:33:DA:6B:C1:E5:26:40:73:07:88:0B:05:1B
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 019F17C35BD949F18941066141AAF8BE0067
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 106C
Signing time: Tue 30 Jun 2026 09:01:46 +0000
Manifest this update: Tue 30 Jun 2026 09:01:46 +0000
Manifest next update: Wed 01 Jul 2026 09:01:46 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: q7bPq9Digj+VtGiXNIbVVUnR4dw8L/24GyzW4byP8SM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:5b:d9:49:f1:89:41:06:61:41:aa:f8:be:00:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Jun 30 09:01:46 2026 GMT
Not After : Jul 1 09:01:46 2026 GMT
Subject: CN=def669461dc20733da6bc1e526407307880b051b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:b8:db:5d:c3:14:1e:54:d6:61:78:d2:d9:
1a:9f:27:fa:1f:62:c6:d9:cd:4d:98:6c:a5:16:81:
37:4d:4b:8d:fd:6b:1c:6a:2e:ce:25:1a:65:27:41:
3c:16:4f:d9:aa:7d:aa:68:38:b2:82:60:1e:2a:f1:
06:33:5b:13:dc:49:3c:f7:81:80:af:96:c3:60:fc:
ce:d4:40:b0:e6:6f:32:39:f7:73:10:18:a3:11:c6:
18:23:61:4d:6a:89:4c:10:6c:cb:68:3a:c7:96:1e:
2d:a2:4d:d8:48:14:ec:54:a0:49:a1:db:9d:8c:15:
89:49:79:38:36:0e:38:15:9f:7b:68:1f:67:86:dc:
0b:7e:a6:3b:c5:54:0c:37:20:2c:ee:92:ab:30:0f:
dd:1e:df:67:ad:25:aa:b6:66:9c:1a:aa:f8:3d:6f:
93:51:12:e5:3b:d2:06:32:c5:5e:6a:dc:13:1c:a6:
c7:99:81:3b:4a:53:dc:f3:df:0f:a7:6a:21:b9:6d:
b7:c6:eb:59:ed:7f:18:ab:37:04:cb:1a:bc:d1:8e:
fd:b5:50:07:e7:45:82:95:b2:4d:83:d8:09:2e:ac:
7f:65:a7:8a:7a:43:93:1e:59:f9:d5:b4:4b:7a:57:
2f:98:13:5e:db:37:e6:50:7b:a3:10:03:fb:5f:af:
8f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F6:69:46:1D:C2:07:33:DA:6B:C1:E5:26:40:73:07:88:0B:05:1B
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:f8:bb:b3:8e:0f:4e:bf:9a:98:7a:85:fe:a6:57:04:33:59:
a2:d6:a1:91:24:80:63:ea:17:4f:ba:80:18:77:4c:43:51:95:
1b:d3:b6:3a:da:07:e2:2c:36:97:18:8e:33:6b:d9:db:94:4a:
c9:f8:16:85:9d:b2:f2:aa:ef:2b:96:fb:75:a7:f1:ca:35:40:
b6:a9:ed:6a:d8:da:55:c7:dd:f2:c4:3e:91:f8:b6:c7:18:b6:
26:b0:ad:d7:a5:23:b2:e6:8f:16:60:1d:7e:9e:e4:33:c8:3e:
20:1b:95:1b:37:41:85:f1:1c:23:ff:3f:03:bf:14:aa:48:c6:
c2:0e:9d:d4:bb:c9:79:47:74:48:fe:41:75:97:63:82:52:fa:
44:e1:51:51:23:6e:ba:ac:bc:76:7a:52:3a:ad:46:68:d6:ee:
0a:e4:eb:26:cc:eb:fd:f2:a8:a4:8e:a1:bc:d9:88:ee:33:64:
b3:0f:57:fd:bf:bb:07:4a:18:99:9b:23:49:00:fe:a6:48:86:
13:be:cd:ec:c1:33:31:bd:bb:38:f6:ab:6d:7f:bb:97:ca:18:
4e:b1:45:4f:4f:83:11:6e:94:60:c8:4f:dd:e7:db:9f:39:a1:
9a:fd:81:39:1f:47:8b:3f:f7:60:06:52:91:ec:50:b4:8a:31:
58:ef:22:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:24:01 2026 by rpki-client