Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
File: 1KfKDW2_IW-UsFm4kZdgmFjcclc.mft (raw, json)
Hash identifier: jymjo/cEIibHVUJHqXuebMRQqsRDFQKh1uPV8HvK+zI=
Subject key identifier: A1:38:A4:43:6D:5B:F2:FB:6B:3E:91:E4:7C:54:82:CC:E7:F1:B2:0E
Authority key identifier: D4:A7:CA:0D:6D:BF:21:6F:94:B0:59:B8:91:97:60:98:58:DC:72:57
Certificate issuer: /CN=d4a7ca0d6dbf216f94b059b89197609858dc7257
Certificate serial: 01A03F3B4FB58FCC8EC534CF228F3E9C7024
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
Manifest number: 9A
Signing time: Wed 26 Aug 2026 18:00:46 +0000
Manifest this update: Wed 26 Aug 2026 18:00:46 +0000
Manifest next update: Thu 27 Aug 2026 18:00:46 +0000
Files and hashes: 1: 1KfKDW2_IW-UsFm4kZdgmFjcclc.crl (hash: 6NHHsoHac3I4tv91HQnDvk5p465A/JH+6ZrOE9fRD9c=)
2: uoNpQh4ifZ34O19c1R5qUVlogEE.roa (hash: gHKmqmMiLwnyxP87W/6N6XbUpWy1lA1P9JZgvRaP+3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:4f:b5:8f:cc:8e:c5:34:cf:22:8f:3e:9c:70:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7ca0d6dbf216f94b059b89197609858dc7257
Validity
Not Before: Aug 26 18:00:46 2026 GMT
Not After : Aug 27 18:00:46 2026 GMT
Subject: CN=a138a4436d5bf2fb6b3e91e47c5482cce7f1b20e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:70:03:e1:b0:84:9e:2a:29:a5:e7:3b:95:c1:
13:1f:08:ee:cb:d4:60:b6:c2:9e:f9:4b:2a:f8:c3:
fe:53:60:de:c0:d6:c2:9a:ab:b4:ac:5d:a5:7d:92:
48:fe:c6:23:94:08:27:c3:20:a3:e9:34:97:0b:64:
34:1c:5b:06:7c:e9:1d:ee:6c:f5:3a:ca:1f:18:ac:
bd:f8:3e:d2:1d:59:9c:0b:95:f1:d0:c9:fe:33:da:
a1:07:b3:29:18:36:ba:95:4f:9f:e4:39:5c:7d:c4:
3c:8a:c0:0b:e1:1f:4e:1d:c5:98:fa:d1:8b:79:57:
2c:bd:3f:bc:40:09:0e:a3:d1:e7:36:fb:1c:a8:a7:
11:e0:6a:72:19:f3:f3:a4:48:7e:cd:c2:b6:99:2e:
23:03:2d:c2:4a:13:0f:35:c7:13:2a:05:4a:15:41:
34:64:6c:0e:50:62:da:c1:50:ea:22:0e:78:90:ee:
73:3f:85:7b:72:57:48:8f:e7:84:b8:02:d7:4b:80:
c9:1c:81:0a:f8:e3:0e:4c:ff:d6:1e:2e:ae:89:25:
3c:b5:37:18:e6:b7:dd:79:4e:bc:51:bf:e2:21:94:
a5:5f:30:1b:e4:30:56:1d:a8:82:52:ef:93:f3:d8:
43:bf:96:7f:22:16:3f:05:97:b9:f4:b6:b1:06:92:
00:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:38:A4:43:6D:5B:F2:FB:6B:3E:91:E4:7C:54:82:CC:E7:F1:B2:0E
X509v3 Authority Key Identifier:
keyid:D4:A7:CA:0D:6D:BF:21:6F:94:B0:59:B8:91:97:60:98:58:DC:72:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4e:08:3b:b6:58:e0:b2:a2:64:06:e0:97:a5:17:dc:29:dd:
32:b2:1a:7c:08:66:14:c4:bd:3b:93:5e:a3:4a:07:8a:f0:b2:
12:8e:42:02:94:ec:50:e3:ce:99:0f:73:67:97:73:2f:69:86:
2c:59:c8:ec:92:62:6d:94:7f:5d:b3:21:87:3a:2a:8e:43:0d:
83:c4:2b:f5:c6:fd:16:77:19:69:8e:b8:3d:28:3e:7f:16:9e:
0b:49:de:6d:6f:97:55:1d:d3:1e:ba:df:17:bf:c0:1c:78:c2:
06:ff:17:e5:45:cc:65:b1:d1:1a:c3:c6:02:fa:4a:35:94:66:
ba:64:c5:27:2a:91:bd:08:5a:cc:d1:c2:0e:81:c1:15:85:9c:
0b:c3:1c:03:a4:9b:c4:ab:a8:08:15:b7:ae:bd:35:3a:1b:5f:
89:3c:0a:44:c6:a4:8f:c3:bc:91:15:ed:c5:fc:b8:0e:66:c5:
17:38:dd:7a:4b:fd:3c:ed:ef:07:ab:bd:e2:5d:70:81:31:7b:
62:b0:c8:a2:c1:d5:c1:5b:a4:57:6a:5a:e0:5a:30:c6:e2:fb:
c6:3e:9a:2f:ea:c0:37:20:47:97:57:cd:71:b3:ed:ca:65:1b:
5d:99:35:13:60:07:3c:5c:9d:00:ef:54:84:9b:63:08:fe:b5:
69:b2:f4:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:49:56 2026 by rpki-client