Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
File: 1KfKDW2_IW-UsFm4kZdgmFjcclc.mft (raw, json)
Hash identifier: 7crkQkIfwXrN5oRO/5xzcsM0sWPBGb4HpeslNDJ64WM=
Subject key identifier: 4C:0D:FF:FA:3D:8B:6B:CD:F1:F5:65:FD:9E:0A:09:A7:6B:A8:87:0B
Authority key identifier: D4:A7:CA:0D:6D:BF:21:6F:94:B0:59:B8:91:97:60:98:58:DC:72:57
Certificate issuer: /CN=d4a7ca0d6dbf216f94b059b89197609858dc7257
Certificate serial: 01A18D54FEC0AA640C3F5A684728FE28FF1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
Manifest number: 0147
Signing time: Fri 30 Oct 2026 15:02:00 +0000
Manifest this update: Fri 30 Oct 2026 15:02:00 +0000
Manifest next update: Sat 31 Oct 2026 15:02:00 +0000
Files and hashes: 1: 1KfKDW2_IW-UsFm4kZdgmFjcclc.crl (hash: bLVh5b3uEutHn/pAinFEoBxr3mujua2qW4siIhYmT2c=)
2: uoNpQh4ifZ34O19c1R5qUVlogEE.roa (hash: gHKmqmMiLwnyxP87W/6N6XbUpWy1lA1P9JZgvRaP+3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:54:fe:c0:aa:64:0c:3f:5a:68:47:28:fe:28:ff:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7ca0d6dbf216f94b059b89197609858dc7257
Validity
Not Before: Oct 30 15:02:00 2026 GMT
Not After : Oct 31 15:02:00 2026 GMT
Subject: CN=4c0dfffa3d8b6bcdf1f565fd9e0a09a76ba8870b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:76:c0:70:d3:76:fd:02:b5:8f:ec:62:6f:
09:30:a3:2a:ef:a2:1d:6a:03:cf:d8:7e:f7:ab:f1:
2b:02:9f:2d:80:00:74:86:39:42:68:e2:f0:0f:f5:
dd:0b:fe:35:c5:79:e0:59:5e:02:9d:ef:cc:a5:70:
ce:c4:4e:1e:ee:bf:9f:16:e9:67:8c:25:f6:02:89:
c3:e3:c4:d2:dd:a6:dd:26:77:63:b6:59:ab:cb:1a:
6a:5c:4c:38:80:ad:31:50:0b:6d:0d:0f:b2:52:d2:
9c:b8:0b:d3:80:39:2a:79:3a:0f:f7:c3:df:84:49:
0a:51:26:5e:8d:2e:ec:fb:11:cb:73:9e:b5:93:99:
dc:7f:1e:45:f8:37:c2:d4:f0:23:56:70:f6:6c:5f:
87:7e:91:82:dc:44:63:c4:4a:f1:da:b8:cc:5b:ac:
7f:d0:37:a0:bc:cb:22:4a:f7:a6:40:2c:ea:f8:c2:
24:f1:96:ae:56:b9:8d:12:14:0a:b5:ea:1d:95:ac:
1d:a4:8a:5d:ab:e8:6c:60:a2:53:df:51:43:23:ab:
bc:c6:89:e9:27:05:64:24:b8:f9:5e:b8:2c:b6:a0:
75:51:ee:34:a2:4b:dc:47:03:4e:7b:f9:21:d8:16:
f2:0e:38:18:ca:7c:b7:2a:fa:95:c6:6b:c2:52:3e:
d5:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0D:FF:FA:3D:8B:6B:CD:F1:F5:65:FD:9E:0A:09:A7:6B:A8:87:0B
X509v3 Authority Key Identifier:
keyid:D4:A7:CA:0D:6D:BF:21:6F:94:B0:59:B8:91:97:60:98:58:DC:72:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:59:47:9b:80:3a:9b:15:ba:d5:b9:36:94:80:c9:25:17:0d:
c9:87:46:57:97:42:99:05:fa:91:d3:78:cb:de:c3:f2:41:66:
46:d6:5f:66:7a:86:45:dd:8a:0a:b7:79:88:4e:c0:a7:95:4c:
cf:1f:97:30:93:db:72:50:50:c4:8b:e9:a5:6c:1d:ab:b3:00:
b4:0b:a8:1c:b3:54:b9:cd:53:76:4b:5b:09:96:78:e4:f9:42:
a9:9c:b6:50:07:46:f9:83:77:aa:f9:72:21:54:ca:9f:d0:a7:
5f:ef:c8:5c:1c:97:54:5c:28:02:66:8f:f0:a1:30:3f:3f:9a:
f7:3b:89:35:f2:22:91:6d:0a:33:3f:03:2f:44:c4:2f:09:33:
9f:5b:1f:7c:83:c5:f0:fd:87:07:5d:5b:ed:57:ac:92:a1:f7:
40:25:1a:92:c5:e8:69:fe:3f:73:37:be:ec:52:8b:f0:90:a0:
49:73:b1:9e:37:3f:ad:f6:ca:7e:13:eb:63:b8:90:93:5c:0e:
44:ad:02:bd:64:ba:b6:4a:67:fc:cf:fb:a3:8f:9a:17:1b:8a:
b3:54:e5:87:49:98:e7:87:c2:d8:b7:7a:9e:55:fb:ef:12:4c:
33:e8:ff:1b:43:e8:20:c5:cc:04:d8:e6:11:55:3d:dd:70:e9:
21:75:ae:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:04:02 2026 by rpki-client