Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
File: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft (raw, json)
Hash identifier: QJKWm3rE9bOpYn47LtqmBLManOa5saXZ00JPCWXve54=
Subject key identifier: 33:8F:6E:B5:3F:5D:6F:F0:77:35:CF:9E:07:F8:D0:D4:35:1A:40:C0
Authority key identifier: F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
Certificate issuer: /CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Certificate serial: 019D38D2CDDDD16577478A06888F080EA622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
Manifest number: 0F74
Signing time: Sun 29 Mar 2026 09:00:32 +0000
Manifest this update: Sun 29 Mar 2026 09:00:32 +0000
Manifest next update: Mon 30 Mar 2026 09:00:32 +0000
Files and hashes: 1: 1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl (hash: FIyzkRaPjwGh3U9CyK5rBpOBYo6RXfVKLZlpxir+qXI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:cd:dd:d1:65:77:47:8a:06:88:8f:08:0e:a6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a76c692e2f3619de79820548ecb5fa7c30a181
Validity
Not Before: Mar 29 09:00:32 2026 GMT
Not After : Mar 30 09:00:32 2026 GMT
Subject: CN=338f6eb53f5d6ff07735cf9e07f8d0d4351a40c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:74:d9:a3:18:cc:59:e0:8a:e1:cd:c1:66:18:
65:7d:24:ba:4d:1c:34:fb:76:03:14:94:72:74:b2:
58:45:22:db:6e:ab:a0:f0:09:e9:6b:f3:91:56:63:
bd:e6:69:43:56:f5:b9:dc:81:08:1c:63:65:c6:a0:
78:0e:1a:b9:28:f4:cf:b8:f1:21:f5:b2:00:3c:af:
be:34:0b:13:f0:44:0c:20:96:68:3e:31:15:e1:7a:
4d:f2:b9:13:60:39:68:e4:51:38:9e:75:42:33:c5:
11:22:30:ec:40:0d:a8:8f:7c:8a:62:9c:e1:94:07:
c1:c2:a4:f2:ff:17:35:9d:ca:51:6e:ba:25:a2:24:
f9:c9:7f:20:72:b1:86:f5:4b:86:b3:d6:f7:59:5e:
89:53:9f:e1:eb:02:46:5f:d8:d4:81:8b:00:35:30:
55:bf:7b:77:69:85:67:a3:ef:88:d9:76:55:f1:c2:
6e:ee:46:2a:30:0f:10:87:c0:b0:5b:4b:93:a9:b7:
da:09:65:2c:ee:95:a6:13:b3:19:7c:a6:9e:bc:35:
7b:1b:d7:28:be:91:e8:fc:68:a1:41:6e:5d:7b:51:
df:78:bd:46:ef:9a:19:1e:0d:49:6a:84:8b:60:5f:
36:e0:e7:82:b9:67:d5:c9:15:00:37:00:4c:93:d4:
e3:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8F:6E:B5:3F:5D:6F:F0:77:35:CF:9E:07:F8:D0:D4:35:1A:40:C0
X509v3 Authority Key Identifier:
keyid:F8:A7:6C:69:2E:2F:36:19:DE:79:82:05:48:EC:B5:FA:7C:30:A1:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KdsaS4vNhneeYIFSOy1-nwwoYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/cf0ed6-5d8d-47ff-bd86-a5de86edf83e/1/1-KdsaS4vNhneeYIFSOy1-nwwoYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:2b:66:65:04:83:06:6e:c2:41:dd:d4:8d:f5:c1:63:71:11:
8b:fd:b6:76:d8:e4:e7:22:3e:24:f0:c3:09:63:00:e1:03:d8:
5e:12:bc:31:78:82:58:e1:dd:aa:1b:21:e0:50:2b:5d:47:44:
6a:eb:f7:1c:e1:92:28:3d:4e:22:b5:47:ab:e4:92:7f:e0:a1:
d1:df:0e:8f:bf:e7:80:17:2c:7d:c0:b7:2c:0e:ea:9c:fb:68:
7a:6e:b2:5d:61:06:08:2e:20:35:7b:0c:ae:c8:c3:7e:85:ae:
8e:9b:43:97:be:99:e2:3e:4b:51:40:e6:4c:d6:82:cf:df:03:
be:e7:b4:f3:77:f7:3e:26:cf:02:9c:d7:68:98:04:d5:d3:c3:
77:03:aa:68:20:d1:93:4f:46:30:ca:15:e4:d9:f5:4c:30:88:
03:e7:0b:3c:ca:ef:56:4f:fd:dc:a6:e7:1b:17:88:5b:4c:9e:
04:91:9e:b8:c7:e0:83:70:bf:39:70:3a:b8:f6:bb:82:c3:78:
25:33:26:49:60:b0:76:c9:da:b5:9e:19:82:2b:4b:01:61:b2:
5d:d7:0b:60:48:5a:9a:08:d8:fd:c7:e2:27:0f:fb:63:07:fb:
bf:05:ac:e9:2b:b5:21:90:53:72:6e:8a:86:2d:3d:fc:c2:47:
e5:9b:9b:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:46 2026 by rpki-client