Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
File: 1KfKDW2_IW-UsFm4kZdgmFjcclc.mft (raw, json)
Hash identifier: Bhd7Zqeg6/Xr8TlX84Ww3vElSGLOYHk9u3QQ+fzwGhQ=
Subject key identifier: D2:86:95:CE:81:1F:33:73:86:DC:85:43:F1:1B:83:F9:BC:02:92:B6
Authority key identifier: D4:A7:CA:0D:6D:BF:21:6F:94:B0:59:B8:91:97:60:98:58:DC:72:57
Certificate issuer: /CN=d4a7ca0d6dbf216f94b059b89197609858dc7257
Certificate serial: 01A18B6657B44271CCE34CDCFB88D5CB99DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
Manifest number: 0146
Signing time: Fri 30 Oct 2026 06:01:42 +0000
Manifest this update: Fri 30 Oct 2026 06:01:42 +0000
Manifest next update: Sat 31 Oct 2026 06:01:42 +0000
Files and hashes: 1: 1KfKDW2_IW-UsFm4kZdgmFjcclc.crl (hash: vA4oWB0Gfe/rcdBM2kb1aEwmB/BYEVX7TTx3iDN27SI=)
2: uoNpQh4ifZ34O19c1R5qUVlogEE.roa (hash: gHKmqmMiLwnyxP87W/6N6XbUpWy1lA1P9JZgvRaP+3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 06:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8b:66:57:b4:42:71:cc:e3:4c:dc:fb:88:d5:cb:99:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7ca0d6dbf216f94b059b89197609858dc7257
Validity
Not Before: Oct 30 06:01:42 2026 GMT
Not After : Oct 31 06:01:42 2026 GMT
Subject: CN=d28695ce811f337386dc8543f11b83f9bc0292b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:3a:88:e6:ee:73:2a:8c:56:4f:fa:9c:b6:
0b:4c:86:a9:05:af:7a:a7:6d:fc:03:be:79:bd:45:
b1:ba:0a:bf:34:f5:97:15:37:b2:44:89:d0:dd:d7:
30:06:29:64:b3:ea:dc:6a:2c:67:2c:b7:7a:92:6c:
ba:f8:65:77:af:ae:82:f1:ca:08:1e:eb:20:63:f3:
66:87:65:38:37:dc:66:d2:b1:36:89:71:95:d8:99:
01:49:18:e1:ad:65:95:06:3b:1e:a7:b9:c2:a3:e9:
d4:ab:53:a2:46:99:a0:38:b6:c3:5d:dc:75:2b:21:
3e:d6:0d:36:bf:30:19:8c:fe:36:21:6c:c8:4c:f5:
b2:8c:3f:3b:c8:e5:bf:b5:f6:cb:c4:79:db:32:1e:
fd:d1:02:85:c5:41:fa:08:fc:ed:80:27:78:bf:11:
c4:a9:fd:ce:5d:d8:80:c9:11:c3:ac:02:d8:83:12:
74:9a:0d:cc:74:81:21:2c:1f:99:4f:ed:73:79:6a:
99:94:ad:df:e8:f7:6c:c0:50:d0:48:64:f6:f5:5a:
2a:71:39:cc:ab:85:47:00:66:dd:d8:c2:96:70:d9:
fa:ab:5b:c6:be:61:e3:85:7d:c3:03:8d:8a:94:4d:
5e:9a:7d:3d:b1:7c:2a:7a:5d:df:cf:e6:82:ff:e6:
c6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:86:95:CE:81:1F:33:73:86:DC:85:43:F1:1B:83:F9:BC:02:92:B6
X509v3 Authority Key Identifier:
keyid:D4:A7:CA:0D:6D:BF:21:6F:94:B0:59:B8:91:97:60:98:58:DC:72:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KfKDW2_IW-UsFm4kZdgmFjcclc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/01c7c0-e700-418e-9207-91160bb4c659/1/1KfKDW2_IW-UsFm4kZdgmFjcclc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:0f:24:41:10:4b:30:60:bf:ac:87:f2:ca:2c:75:eb:60:d4:
4e:53:4d:fb:de:1f:a4:e4:62:36:0b:ed:39:66:c3:20:9c:c3:
91:bc:ad:80:c6:1c:69:1b:d0:27:2c:07:65:47:56:23:47:b5:
51:0a:b2:6b:b2:52:1a:9f:a5:67:80:4a:e4:48:d6:7d:8b:9d:
53:7d:8d:ae:04:c4:34:a7:98:c8:21:e8:80:59:28:a0:77:5e:
44:6d:c8:a3:25:88:c5:5c:a7:db:42:5f:c4:30:c6:b0:a2:41:
7d:75:78:59:b3:37:55:39:5c:c3:8a:4c:eb:84:a0:07:3c:6d:
3e:98:09:83:66:a6:7f:05:d4:73:0f:ee:3d:63:d0:50:cb:bf:
f3:b0:1a:7c:64:60:94:7f:9d:9b:91:0d:cf:de:98:54:a1:f8:
dd:f1:46:23:73:25:9e:12:44:45:0b:59:a4:11:e1:bf:e6:95:
00:76:2b:9d:d1:55:77:ed:91:8d:a9:8e:bc:b8:ea:c6:8f:8d:
75:f6:20:4c:dc:1d:7d:fe:d0:e7:73:ad:65:40:7b:6c:d1:1b:
81:50:c0:91:3a:1f:59:91:67:61:6b:75:36:f4:4a:d2:ca:64:
0f:a4:4d:e8:fe:dc:77:3f:60:fd:d5:94:88:65:a6:6c:c6:7f:
01:d8:04:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:23:19 2026 by rpki-client