Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: w8+vxEZ+fpzZaKFAAGgKa5C+WLBmXHXidGnBHY+gkS8=
Subject key identifier: D3:06:DE:FD:20:80:6F:43:61:65:79:71:96:7E:F1:1F:AD:FB:F6:4B
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 019D3752C664EBCA79DBAEE5CE3382FDFDFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 09A5
Signing time: Sun 29 Mar 2026 02:01:04 +0000
Manifest this update: Sun 29 Mar 2026 02:01:04 +0000
Manifest next update: Mon 30 Mar 2026 02:01:04 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: Ga5Z0gLk2JzFRQKTzoYFcRYHJT5tFV8n6yb8m/MdNKw=)
2: emnbEvWJygEiWm9VUZK5oCubv9o.roa (hash: ii00HW3z+EIyVSsqQmHcN0u5PlKx7x+pk+qTbfPvDb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:c6:64:eb:ca:79:db:ae:e5:ce:33:82:fd:fd:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Mar 29 02:01:04 2026 GMT
Not After : Mar 30 02:01:04 2026 GMT
Subject: CN=d306defd20806f4361657971967ef11fadfbf64b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a3:24:1b:5c:10:f2:d1:18:84:c4:1a:bc:52:
ea:57:30:44:61:10:53:5e:d0:0a:e9:34:73:a2:cb:
6e:04:b9:98:34:ad:cb:86:db:24:6f:bb:ef:85:8a:
6b:67:cd:a8:7c:cb:84:35:a1:6b:fb:57:0a:80:03:
2e:53:10:f0:ba:c7:0e:1a:a3:fc:ec:8d:30:39:ea:
90:60:0e:c5:ba:f8:dd:54:ee:73:81:70:93:f5:97:
79:d4:bb:54:84:22:f2:c4:b5:1a:30:64:24:a6:0b:
52:fe:cc:19:92:0e:3f:b4:75:02:3e:54:47:91:82:
24:c6:15:27:df:af:97:c7:66:5c:81:e5:e6:98:47:
c4:3b:57:d3:ed:85:b6:31:4b:15:36:c0:f0:b4:c9:
fe:8a:91:f8:0c:81:75:d1:ed:cf:91:8f:43:10:b5:
54:79:67:ad:7c:f8:90:ca:cd:31:72:fc:23:8d:40:
03:0f:52:1b:65:e5:56:4e:84:70:11:bb:b7:bd:11:
a8:2d:cf:ce:fd:7c:ba:2c:9d:cd:2d:ac:4a:4a:b6:
a6:32:14:e8:bb:9b:30:f9:6d:e1:a5:1e:ab:e9:ea:
87:d7:cf:59:3f:52:dd:50:44:5b:2b:69:76:1e:6d:
56:b4:a7:b4:53:0d:70:6c:f4:39:cd:0a:e3:78:94:
b2:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:06:DE:FD:20:80:6F:43:61:65:79:71:96:7E:F1:1F:AD:FB:F6:4B
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a1:73:97:3f:e2:0d:38:58:74:ba:66:43:3e:3f:94:7c:7d:
a2:70:26:9c:6a:6b:70:ad:ab:63:9f:88:9f:fa:17:97:74:a9:
6a:44:70:ea:27:e3:15:8a:6f:c4:41:48:28:6f:e3:0a:55:14:
8f:71:ea:5c:41:05:c4:0c:3c:a9:5d:ea:c6:cd:97:1e:d2:77:
45:bd:35:2e:ad:91:24:21:68:ba:e5:28:55:13:a8:83:e5:02:
e4:5c:0b:62:68:5f:03:63:83:47:01:71:59:f2:df:9d:5b:0b:
f3:33:ca:b5:e3:e1:87:94:26:de:95:49:a5:da:fd:b2:1e:87:
43:f2:71:9b:25:03:95:c6:0c:3f:f1:68:46:8d:63:65:b2:8e:
2c:2e:c1:b2:f9:b1:aa:c6:d6:83:87:15:7c:29:55:52:fb:04:
a3:f5:1f:04:e7:83:b6:ba:cb:5b:13:3a:ee:0a:cd:25:14:23:
c2:a2:7d:f4:71:6a:23:2b:73:11:a9:42:b2:64:85:80:10:e3:
b0:85:ed:9a:db:6d:e7:d4:90:d6:12:aa:f7:78:2f:6a:f5:72:
3d:56:7c:2f:19:24:89:f8:55:7c:71:a1:71:98:fd:fb:94:b9:
77:c8:87:1d:dc:88:ff:34:c6:de:2a:3f:f4:9f:91:cc:fc:7d:
89:9b:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:07 2026 by rpki-client