Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: EFo8l4OIx8cFLWKYz5m1BMyyK8UkOfY1rSJV3uINWwc=
Subject key identifier: AA:9B:27:78:0D:01:00:54:2B:B4:58:DE:B4:F5:18:95:5F:01:F8:C1
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 019E2AA78BFAFB14C82E227B21F00F83C70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 0A23
Signing time: Fri 15 May 2026 08:01:23 +0000
Manifest this update: Fri 15 May 2026 08:01:23 +0000
Manifest next update: Sat 16 May 2026 08:01:23 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: ZnsiAdCo5wfySZLkrXe4AKoSMIdmADkmwNWF7AgoW0U=)
2: emnbEvWJygEiWm9VUZK5oCubv9o.roa (hash: ii00HW3z+EIyVSsqQmHcN0u5PlKx7x+pk+qTbfPvDb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2a:a7:8b:fa:fb:14:c8:2e:22:7b:21:f0:0f:83:c7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: May 15 08:01:23 2026 GMT
Not After : May 16 08:01:23 2026 GMT
Subject: CN=aa9b27780d0100542bb458deb4f518955f01f8c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:60:c1:7b:b5:33:28:44:a6:49:7f:4a:03:d7:
21:19:d4:9e:15:30:bb:33:26:31:37:10:89:bd:e2:
35:85:b7:04:0a:68:1d:2b:42:db:52:4a:38:0a:d3:
1f:5b:bf:ea:5c:07:ff:3f:2c:76:a0:ed:c5:a4:e5:
05:57:d1:f4:52:a1:99:bc:0c:25:f5:79:60:d7:24:
f5:8c:6e:91:0e:31:78:d5:fa:56:8a:1d:df:91:81:
38:27:3b:4b:f7:0e:5d:e9:a4:8a:7a:c1:5b:c3:75:
76:63:9c:3a:dc:6a:ce:87:aa:0b:97:b7:c7:b5:04:
b1:9d:f5:dc:41:48:97:42:f7:0c:09:75:98:96:2c:
b0:fa:68:b7:8e:a4:e9:0c:c3:17:67:42:8c:63:50:
39:8a:d4:17:6c:0a:95:de:61:41:30:8e:0d:74:ed:
7e:89:94:37:ec:28:ab:84:84:55:05:09:ef:40:3b:
41:f4:6b:69:40:10:5d:9f:ba:33:8a:91:8c:a7:65:
ec:1e:75:7d:26:39:39:7c:52:5b:83:a0:ca:c7:f3:
42:28:04:c9:b5:c7:42:24:f7:86:2d:75:c7:f1:bb:
b1:a6:44:40:1c:cc:e9:82:5e:6c:c8:52:23:77:cd:
4f:29:ce:d6:3a:5f:34:6d:5e:88:61:1d:5f:54:e4:
82:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9B:27:78:0D:01:00:54:2B:B4:58:DE:B4:F5:18:95:5F:01:F8:C1
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:e2:2d:f1:7c:0b:09:56:af:ad:a4:a2:13:16:91:1c:dc:d7:
31:4d:bb:33:9a:00:79:4c:00:2a:c1:85:c9:a1:8b:d5:5f:87:
f7:dd:be:42:6d:3c:db:f2:3e:81:6c:d7:01:2d:d0:bb:4a:3d:
a7:65:21:6c:11:14:54:c7:ca:00:b4:37:b2:59:dd:be:33:a9:
4b:35:6e:28:4f:83:c6:10:9c:3b:f7:d5:4b:b3:71:54:24:11:
1d:15:3e:6c:a9:cd:61:f5:24:3b:b0:f1:c9:ff:d2:b8:69:cf:
8c:92:87:ce:af:7a:af:a8:0f:52:47:17:3b:f1:8a:a6:72:8f:
40:db:ce:6d:fd:45:5e:20:96:20:42:2f:f9:46:ce:be:1a:f1:
c8:83:33:4a:92:3d:47:6f:38:7e:f0:6b:6b:50:a9:90:02:9a:
6a:f6:c9:fe:3a:95:b3:7e:6b:4c:98:37:e1:a2:3e:77:39:b3:
5f:9e:bd:28:08:ae:3d:1e:eb:7c:94:ba:66:ae:4d:37:9d:df:
79:33:8c:20:3c:47:fe:73:2d:67:ae:1b:a9:a3:e3:51:bf:f1:
bd:1c:32:34:ac:5f:a3:4d:93:05:1a:fc:9a:4a:92:d6:2c:92:
14:2c:5c:a3:11:91:cc:5d:3c:ef:1c:f7:43:27:f6:3f:b5:c4:
2d:02:32:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:20:37 2026 by rpki-client