Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
File: 1K5pV43Ol3ozqindV8oZD6aHd_o.mft (raw, json)
Hash identifier: +HNCO6cYdQalaOKTWU0MFOqTecSBczj4Q9Dx2f0a5vA=
Subject key identifier: 9B:9C:2C:38:88:1E:6E:DF:D2:F4:3C:E4:ED:CE:A6:48:49:4D:F0:6D
Authority key identifier: D4:AE:69:57:8D:CE:97:7A:33:AA:29:DD:57:CA:19:0F:A6:87:77:FA
Certificate issuer: /CN=d4ae69578dce977a33aa29dd57ca190fa68777fa
Certificate serial: 01A00101C8533188D40409A5972DDF06B3F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
Manifest number: 1076
Signing time: Fri 14 Aug 2026 16:01:28 +0000
Manifest this update: Fri 14 Aug 2026 16:01:28 +0000
Manifest next update: Sat 15 Aug 2026 16:01:28 +0000
Files and hashes: 1: 1K5pV43Ol3ozqindV8oZD6aHd_o.crl (hash: klfZzmafe1ma6W+QaGD/qr9wXOpgxxDo5Fv7ObtEFTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:01:c8:53:31:88:d4:04:09:a5:97:2d:df:06:b3:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4ae69578dce977a33aa29dd57ca190fa68777fa
Validity
Not Before: Aug 14 16:01:28 2026 GMT
Not After : Aug 15 16:01:28 2026 GMT
Subject: CN=9b9c2c38881e6edfd2f43ce4edcea648494df06d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:7e:12:2a:11:2f:35:e3:6c:26:53:a8:d2:
80:4a:0e:43:28:37:6a:de:bd:ec:6d:77:b6:4d:85:
9b:32:e1:47:76:05:95:d3:fa:62:4e:18:20:a1:e3:
68:a6:2a:4e:56:fc:60:15:e5:90:28:42:80:90:ab:
b4:c7:21:df:47:00:ea:82:e1:ab:45:92:aa:3c:3c:
29:e7:ff:b5:b4:75:40:dd:04:d0:89:82:4c:60:ac:
12:81:e5:b8:43:04:8e:e8:8c:c4:79:ba:c1:45:5f:
c9:a5:aa:42:5e:0a:dd:2d:1a:b0:08:09:b2:ac:6b:
56:cf:dd:0d:bd:9b:5a:29:7f:0a:3c:31:5e:10:ef:
ce:f4:2f:cb:29:38:25:d5:1c:db:01:92:95:8a:b2:
33:48:0d:8a:4d:53:c1:25:2e:6e:1e:95:2f:eb:36:
e6:a6:64:93:ec:98:3d:cf:f0:39:ff:62:d9:be:f2:
7e:ee:59:be:90:dd:bc:40:da:92:2d:63:de:8d:ad:
7d:02:7e:48:f6:48:a0:f4:e5:d3:d1:4e:5c:48:29:
e2:f5:18:25:66:48:48:10:be:95:42:ef:de:83:e6:
25:94:9e:f5:1e:7a:5d:d6:a1:7a:48:b4:17:ef:df:
cd:af:90:b2:b5:18:82:62:8c:99:a6:57:33:a4:ce:
d4:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:9C:2C:38:88:1E:6E:DF:D2:F4:3C:E4:ED:CE:A6:48:49:4D:F0:6D
X509v3 Authority Key Identifier:
keyid:D4:AE:69:57:8D:CE:97:7A:33:AA:29:DD:57:CA:19:0F:A6:87:77:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1K5pV43Ol3ozqindV8oZD6aHd_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/bd8900-ec95-475b-89b7-b4f2977d196b/1/1K5pV43Ol3ozqindV8oZD6aHd_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c6:87:ce:35:b4:2c:99:e1:ce:ed:9c:f7:06:84:8a:04:0c:
dc:1e:c6:20:f8:15:c0:eb:03:a5:53:6f:6d:28:e3:c8:60:4c:
77:99:de:19:9f:99:ac:7c:02:8c:70:8d:21:7f:a6:7d:e2:16:
b6:74:2d:d3:b8:bf:9c:b3:f2:c4:27:cb:f4:7c:28:e5:2d:c5:
39:be:3a:1a:ae:9b:1d:e6:bf:b4:68:3a:4b:6b:1a:63:d2:8f:
8a:84:d1:d1:d0:6a:c3:61:19:42:06:52:0f:9d:69:ee:8f:4c:
30:8e:c2:03:dd:b4:71:8b:68:b2:10:97:46:77:61:c1:f2:bb:
e1:89:1a:52:ca:97:09:1c:ef:3f:ac:b3:5b:c9:c6:8c:c6:9a:
6f:82:fc:d8:7e:dd:83:47:b0:22:68:25:33:ea:36:70:91:7b:
94:49:f0:17:59:c1:10:e0:37:55:61:ae:6a:4c:35:15:e8:c0:
91:b2:1b:29:b2:0e:cf:f6:1a:b8:bd:fd:0f:13:fb:74:1e:ca:
b5:6d:f2:27:67:7e:72:01:36:ae:b1:26:ae:7b:a6:df:10:36:
64:e4:7f:15:3e:bc:13:95:c1:c2:a5:78:e5:8c:cc:26:7d:17:
64:e8:3f:c9:ae:61:f0:c5:d8:06:3b:fc:81:1d:b4:e8:4b:82:
c9:b0:e3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:34:13 2026 by rpki-client