Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: x6pfH7lC3Q4okQSdwQHlkOW7Os7dEE3NGpbdSZwRqPQ=
Subject key identifier: BA:2C:B5:D7:81:2B:1D:5D:DB:8A:E7:26:A2:B7:8E:F0:F9:92:48:54
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 01A001DCE7A5B5AE49A48031D1A83D6FFBF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 0B17
Signing time: Fri 14 Aug 2026 20:00:49 +0000
Manifest this update: Fri 14 Aug 2026 20:00:49 +0000
Manifest next update: Sat 15 Aug 2026 20:00:49 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: WLXR56ApRz9tXEor/tY9DWU9IU0+k3X4MwYz8pmR0NA=)
2: emnbEvWJygEiWm9VUZK5oCubv9o.roa (hash: ii00HW3z+EIyVSsqQmHcN0u5PlKx7x+pk+qTbfPvDb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dc:e7:a5:b5:ae:49:a4:80:31:d1:a8:3d:6f:fb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Aug 14 20:00:49 2026 GMT
Not After : Aug 15 20:00:49 2026 GMT
Subject: CN=ba2cb5d7812b1d5ddb8ae726a2b78ef0f9924854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:ff:f1:f8:8b:c8:65:5d:12:78:67:6c:87:
cc:ea:52:e0:b8:85:c2:f5:cd:b2:50:9c:3b:eb:9f:
e6:35:d7:df:af:35:f7:9a:d1:99:96:e7:88:2f:54:
aa:c4:e9:fe:0b:c7:55:d8:d1:ea:a6:79:b5:f5:25:
f6:d6:09:44:0a:0c:5c:0a:e6:41:08:21:bc:34:5b:
2d:ec:fa:cf:86:44:2a:2b:f3:d9:1e:2b:c9:67:3d:
4d:d4:07:7c:76:29:0c:f3:e3:28:01:e4:7e:b1:6c:
73:a5:8e:d6:07:b8:a4:98:b0:11:eb:49:e8:f5:8d:
71:1a:1d:04:33:34:a0:22:64:30:61:4f:a3:dd:46:
fe:39:06:42:7f:d7:ee:d2:18:b5:7a:04:a7:04:67:
fe:42:7c:72:06:a4:0c:f1:2d:c1:55:42:b5:71:25:
42:bf:46:ec:b7:cb:31:fe:86:1c:7a:1d:ab:e0:06:
b8:1a:67:1c:73:58:77:09:a5:66:98:b1:5a:d9:0e:
96:48:eb:92:00:17:55:f8:ee:f2:bb:78:18:e0:74:
54:da:79:47:a2:ce:6d:61:a1:3f:9d:7d:f1:74:ca:
26:6d:5f:c2:ce:17:69:ca:be:e8:52:15:7b:0b:9c:
31:61:c0:c6:85:05:69:ae:65:4e:9b:65:93:4f:ed:
1d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:2C:B5:D7:81:2B:1D:5D:DB:8A:E7:26:A2:B7:8E:F0:F9:92:48:54
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:49:1b:8e:ae:a7:e9:50:5b:fb:0d:66:1b:d3:28:38:f1:4a:
c0:39:3a:2d:db:3e:f0:2f:bb:e4:31:6f:d8:be:41:ff:a6:49:
ea:74:4f:fa:0c:60:80:27:5f:6d:a8:3f:e1:cb:8c:6c:5f:43:
39:9e:71:51:a4:33:ea:c4:46:fa:63:80:bf:a3:4e:09:d9:86:
c2:61:db:20:a7:c0:71:b5:10:3e:22:c3:7d:a2:a3:92:bf:40:
49:59:60:f4:b8:ef:58:16:2f:46:92:d7:bb:a7:bd:91:96:c9:
dd:da:62:76:bb:aa:d0:de:45:c8:49:fc:ed:bf:b9:07:c6:a7:
71:1f:9e:3d:bd:e0:6d:ce:6e:86:6c:71:30:8b:78:47:a0:1c:
6e:a0:29:b4:87:bb:41:dd:90:32:a1:20:5b:b0:6b:3c:91:20:
d6:b5:35:88:c4:4c:fb:0a:bd:66:ef:ee:c5:25:fa:6e:df:21:
38:52:c6:9b:2a:c9:ee:60:11:38:d7:95:cc:80:0c:e9:3f:07:
4d:90:8d:98:5d:f6:d4:0a:7c:e6:43:cc:32:d0:e4:b3:9e:8c:
31:ec:a9:92:3d:93:4b:ce:9e:5b:68:2c:47:1a:9d:c0:a9:d4:
16:36:bd:b5:a9:e6:24:24:1a:35:78:b6:7a:4d:82:d8:ab:8d:
90:7a:fa:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:30:55 2026 by rpki-client