Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
File: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft (raw, json)
Hash identifier: SzmhDQXCDeY3FG5lemR5YojMqrRhUD9+TKay6HgqJtM=
Subject key identifier: F4:EB:D4:4C:30:7F:BB:E0:A2:82:34:79:EF:0C:CC:E4:A6:83:35:2E
Authority key identifier: F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
Certificate issuer: /CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Certificate serial: 01A1464D8CAD7F88E2B310E77D3C2E2EA494
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
Manifest number: 0BBF
Signing time: Fri 16 Oct 2026 20:00:49 +0000
Manifest this update: Fri 16 Oct 2026 20:00:49 +0000
Manifest next update: Sat 17 Oct 2026 20:00:49 +0000
Files and hashes: 1: 1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl (hash: amRpSj+2M8Z9VcxjMOvpPSiTzB5KeeX/upejIzONR/4=)
2: emnbEvWJygEiWm9VUZK5oCubv9o.roa (hash: ii00HW3z+EIyVSsqQmHcN0u5PlKx7x+pk+qTbfPvDb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 20:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:46:4d:8c:ad:7f:88:e2:b3:10:e7:7d:3c:2e:2e:a4:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a4850c7ab30bbb8af80dcf9aabc6b951aa65a4
Validity
Not Before: Oct 16 20:00:49 2026 GMT
Not After : Oct 17 20:00:49 2026 GMT
Subject: CN=f4ebd44c307fbbe0a2823479ef0ccce4a683352e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:a4:18:5a:e1:c6:72:5a:76:ad:ac:33:60:
7e:f7:0a:bd:1b:ef:ae:25:52:ca:62:a2:9e:de:96:
8a:3e:ed:05:ea:4d:1c:18:9d:db:cd:63:c4:38:73:
5e:45:c6:56:5c:d1:73:16:f0:f4:1e:2b:88:0f:7b:
d6:e3:23:e2:d2:0a:02:14:cc:fa:0d:75:51:11:a3:
dd:47:fa:69:b3:36:ea:38:05:03:04:83:8d:67:b9:
68:2b:6c:e5:e8:40:a2:6f:73:07:6c:16:44:22:85:
88:c4:f6:3a:19:4f:b5:cb:e1:c9:97:74:ce:42:2d:
fc:4d:f8:0d:a5:24:bd:dd:4b:2e:12:ab:d8:76:73:
96:4d:b6:c7:6a:70:bc:d9:11:cf:98:7d:7b:e4:3a:
e0:05:50:ba:aa:67:bc:38:0a:39:2a:3e:dc:0f:32:
f3:0c:e9:02:d0:1e:ca:55:60:7a:31:c9:f4:9c:91:
61:35:4e:e7:22:0d:ab:b5:fd:fd:0b:d6:65:74:df:
d0:85:85:a3:fd:fd:a9:15:17:27:0a:e4:68:51:1a:
d1:fe:3f:a7:81:ec:a7:85:8b:64:9b:ae:df:66:2b:
16:ab:eb:18:69:44:54:9f:9b:4b:94:97:86:19:10:
62:fd:d5:e4:8a:0c:ff:62:f2:cb:97:43:e8:46:04:
85:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:EB:D4:4C:30:7F:BB:E0:A2:82:34:79:EF:0C:CC:E4:A6:83:35:2E
X509v3 Authority Key Identifier:
keyid:F8:A4:85:0C:7A:B3:0B:BB:8A:F8:0D:CF:9A:AB:C6:B9:51:AA:65:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/38969d-7276-4f27-9e1c-7286ac0a907b/1/1-KSFDHqzC7uK-A3PmqvGuVGqZaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:17:3c:dc:81:45:5c:2f:ca:5a:bd:7b:cc:b9:51:b2:7a:e2:
9d:8d:f1:1a:da:a2:a6:b2:3f:3c:0a:58:6a:85:d5:08:d0:e4:
2c:ee:4b:e6:9a:1b:df:24:58:c0:59:73:a2:0b:29:e6:44:78:
ac:8e:a9:72:28:d9:f9:6f:fa:e6:6d:47:51:d3:81:52:29:29:
95:c6:0d:a8:d7:be:e9:ee:7c:2f:24:a1:87:83:06:7f:66:50:
b5:27:c7:72:c4:bb:a4:d5:42:13:10:5a:82:47:18:c8:fc:f5:
8f:d6:0b:b8:01:62:77:a8:c9:08:d1:bb:99:de:b0:9c:5c:fd:
3c:71:f0:52:eb:b1:16:a2:0a:31:18:f0:2d:aa:33:1a:27:33:
9a:c3:ab:bc:a2:d6:a4:67:f8:ac:8f:ac:2c:d8:cb:ef:a3:b4:
f7:bd:15:e6:67:b1:9f:8b:c1:7b:d7:8f:9d:5f:d2:df:c7:9c:
46:bf:62:47:17:57:71:d4:e3:93:59:82:85:f4:63:2c:b6:28:
82:01:a7:5d:c5:49:72:9e:ce:17:a4:ac:76:1b:9a:0b:bd:df:
f5:3f:ce:ef:19:70:f5:1e:7c:10:f7:cc:2f:ba:7c:93:6a:30:
e4:4d:5c:37:82:d4:f1:da:f2:6e:76:96:f1:fb:5c:08:4c:94:
c3:b1:84:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 07:06:25 2026 by rpki-client