Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: aCuojX6xJkcKqhlk2cMFnAl6xijIxAPuuw61f/MR4E4=
Subject key identifier: 9C:A0:7C:A2:62:AF:EB:0F:DE:0C:2C:E9:AA:AF:83:CC:AD:27:74:57
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 019F12650BF320F4C7419EDA17096AB8E88C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 0A9B
Signing time: Mon 29 Jun 2026 08:00:39 +0000
Manifest this update: Mon 29 Jun 2026 08:00:39 +0000
Manifest next update: Tue 30 Jun 2026 08:00:39 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: 7apV1u6+QZAmuhMcd7edP8ieOEu9FBctSUX+jVhbUUs=)
2: emnbEvWJygEiWm9VUZK5oCubv9o.roa (hash: ii00HW3z+EIyVSsqQmHcN0u5PlKx7x+pk+qTbfPvDb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:0b:f3:20:f4:c7:41:9e:da:17:09:6a:b8:e8:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Jun 29 08:00:39 2026 GMT
Not After : Jun 30 08:00:39 2026 GMT
Subject: CN=9ca07ca262afeb0fde0c2ce9aaaf83ccad277457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:72:86:00:23:2c:49:87:20:1b:c3:be:f3:
29:79:58:70:f9:73:7d:21:c7:ec:0d:54:c6:a3:3e:
69:81:c3:ad:1f:fd:22:44:8c:45:91:71:7b:63:58:
a9:ff:bb:35:4e:d7:c0:3a:31:01:16:84:8c:45:27:
58:d3:ad:7b:5d:1e:ac:73:ba:a2:9d:11:da:28:47:
db:a9:ef:e9:ac:cd:34:8a:a5:05:d8:b2:f7:c2:48:
bb:3f:8a:f1:1e:ed:de:9a:96:93:b1:c8:7a:52:49:
c2:4a:93:a6:36:83:09:01:19:5a:38:0b:99:47:1f:
98:7e:6a:48:d5:99:3a:86:66:be:ab:e3:24:50:b5:
67:69:ff:24:8d:96:b2:24:b8:00:2b:aa:85:ab:8a:
95:b8:7c:9e:02:97:dd:af:0f:83:09:5c:a5:3f:10:
19:4c:9f:1f:18:3b:c6:a9:c5:07:84:dd:2e:06:eb:
2c:d5:f6:46:60:5a:c3:3b:4a:17:80:61:e6:21:5d:
f2:61:ba:32:12:51:80:1a:8d:e2:40:96:3a:2a:f3:
bd:59:be:11:94:25:e5:d3:94:36:7e:09:62:02:d8:
c5:55:37:4f:09:e2:e5:fc:98:a2:d8:81:3c:fa:9f:
be:87:76:9c:da:ae:b1:82:38:df:e6:5b:3e:df:ff:
5a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:A0:7C:A2:62:AF:EB:0F:DE:0C:2C:E9:AA:AF:83:CC:AD:27:74:57
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d6:a7:40:29:d7:5f:ad:a9:53:cb:27:f0:94:fb:50:02:4d:
b7:9d:0c:27:8e:14:c5:f9:36:e0:65:30:f0:46:c4:7a:74:d2:
52:e2:df:81:cc:00:63:5c:20:54:3d:58:4b:ce:0f:20:dc:85:
3f:fd:23:72:97:74:71:ca:89:36:34:fc:04:3d:15:aa:dd:4d:
93:e7:97:4c:cf:9b:37:78:4e:9f:59:f9:c9:60:59:8e:17:58:
60:b5:90:19:db:da:52:69:02:44:ae:b6:f5:90:6d:04:4b:22:
13:6d:85:c4:59:5d:57:52:65:59:3b:3d:90:25:82:3d:c2:53:
b9:56:be:ff:66:0a:a4:96:72:c8:76:56:d8:50:9e:f1:1a:8d:
f3:39:a8:98:f7:b0:3f:ae:a7:83:b9:9f:eb:7f:1d:c0:2e:8c:
75:ee:76:80:7b:55:30:39:77:4a:8b:18:f2:1a:29:7c:ba:4c:
91:40:fb:1d:30:5c:70:2c:5a:77:53:39:a6:2b:69:5c:a7:f4:
4e:3a:ed:ac:3c:c7:de:8f:7f:7b:4a:b2:60:f2:38:08:7a:f1:
1e:79:c7:1b:0d:7f:8a:ff:57:8e:9f:62:99:eb:f6:75:da:f9:
10:6d:be:da:c7:9e:c0:bb:c0:83:86:c1:2a:47:5a:3f:84:e5:
a5:83:cf:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 15:27:23 2026 by rpki-client