Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: nqIHykTCU071EHYwhgxM2LEfjw7gI7QsYRwk3LLsxsA=
Subject key identifier: 9D:89:4F:A4:E9:BC:D9:2F:9A:D2:E9:C8:24:1B:4C:AE:7E:1B:1E:58
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 019E3004CEFA7D6CF3D41AAB4A3D78138A11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 0FF4
Signing time: Sat 16 May 2026 09:01:21 +0000
Manifest this update: Sat 16 May 2026 09:01:21 +0000
Manifest next update: Sun 17 May 2026 09:01:21 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: OE4E/gTUl6rfLCnKUIZV5we8gRcZlGRHa2pB1XoHKMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 09:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:04:ce:fa:7d:6c:f3:d4:1a:ab:4a:3d:78:13:8a:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: May 16 09:01:21 2026 GMT
Not After : May 17 09:01:21 2026 GMT
Subject: CN=9d894fa4e9bcd92f9ad2e9c8241b4cae7e1b1e58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e8:9b:fa:15:c6:2c:9e:b8:0e:0c:23:af:ce:
15:d1:13:6a:91:61:f2:7e:3a:2e:83:5e:41:68:b6:
80:5b:4a:61:48:9a:97:9a:a2:fc:6b:15:d1:70:8c:
23:98:a0:5b:f7:8b:ca:f5:58:45:90:5c:58:ca:7d:
2d:ec:30:19:8d:eb:a0:26:a0:3e:6c:1e:f2:a8:46:
ee:23:83:a7:65:8e:6b:79:4d:c0:4b:50:30:d5:a9:
09:44:86:2d:73:11:a2:27:73:97:d7:cc:be:85:bb:
35:7e:38:2e:bb:33:d6:bb:36:ae:c4:c5:ab:58:96:
43:be:68:a7:cd:35:55:35:ea:99:db:ea:c7:95:4c:
1f:d4:3e:56:d6:de:85:38:5d:7e:63:2f:e5:9b:78:
e9:37:14:f2:53:da:8e:fb:8c:8d:b8:b0:c2:e6:90:
53:06:13:8c:f5:c5:a6:c9:fb:cf:f2:2a:57:99:54:
f2:de:a4:e8:b0:69:7a:af:36:38:c7:9f:d9:b0:7d:
e4:81:9b:ab:04:1d:2e:f7:ed:ec:d2:e5:ef:b0:a2:
9f:57:6e:4c:91:76:e9:d2:c5:e4:8d:c6:81:9f:30:
e2:c6:99:87:95:a4:85:fc:c5:a2:a6:45:07:aa:d4:
f7:40:81:54:15:8d:6c:08:80:7c:56:be:71:53:a5:
63:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:89:4F:A4:E9:BC:D9:2F:9A:D2:E9:C8:24:1B:4C:AE:7E:1B:1E:58
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:7f:6b:4d:44:45:6d:c0:af:f3:97:56:3e:f8:35:6c:3c:bb:
fd:cd:d7:57:a9:01:6d:fa:61:c2:12:bf:e1:54:0c:f7:b3:40:
02:9a:11:74:fe:0a:82:78:2b:59:19:3a:2c:1d:61:c8:24:08:
80:9b:d0:29:61:d4:e5:bc:c9:63:07:02:59:70:d7:ad:dd:15:
77:f5:2c:a6:4a:4c:5f:b3:e4:25:5e:2c:a2:99:70:0d:46:8f:
27:7d:c8:73:1d:44:06:38:4b:65:58:ff:7a:b1:cf:9a:52:60:
bc:52:95:ff:44:f5:ab:3e:71:3d:90:82:18:53:ce:dc:af:53:
23:81:d8:dd:b7:b9:3a:25:04:63:60:29:c1:5b:29:df:bd:e0:
00:b0:6c:67:cc:85:69:5e:d0:a0:79:43:d6:25:4f:82:8e:0a:
64:1e:10:38:a4:36:fd:2d:61:b3:9c:f7:a0:61:ef:ee:93:59:
3f:20:ce:68:d8:28:40:d2:b1:b0:a5:c6:96:75:00:e2:14:2a:
c8:d9:b4:03:b0:af:ba:17:00:62:d8:24:90:b3:ea:b3:52:1a:
c6:17:f2:b9:86:d2:ed:46:ad:b0:d9:c6:75:03:5e:7c:29:9a:
dc:5c:30:dc:7c:6d:ae:b1:5c:4a:5f:7c:4f:25:05:7c:2b:be:
c7:2c:74:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:11 2026 by rpki-client