Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier: qtJll4oS6aHjz3eVORJYIiRLhRahrqaTxdvmq9Rq6s8=
Subject key identifier: CD:49:68:5C:21:6F:70:5F:7C:4C:5A:B8:E6:F3:80:F1:16:65:D3:0F
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 01A001DDA0A81D139D3E98E0246803058825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number: 11A1
Signing time: Fri 14 Aug 2026 20:01:36 +0000
Manifest this update: Fri 14 Aug 2026 20:01:36 +0000
Manifest next update: Sat 15 Aug 2026 20:01:36 +0000
Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: P8QBwcKSIWkrjoGOKzJd5zJpIryPDOtpiKBRhTzMVTg=)
2: SOEMdBmGOl9OdgU6wRKXH8ofpiw.roa (hash: wRDPax/GBrg9//RtAKm4t39dVaYciZWJGLWscmkRs9k=)
3: bS5Jm8ZE-sVj1o36QwkjwTi3nSQ.roa (hash: HkP3HjP3l5NouDXiG5SFRZ81aMR3ohNIO6a1Rp53MSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:a0:a8:1d:13:9d:3e:98:e0:24:68:03:05:88:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Aug 14 20:01:36 2026 GMT
Not After : Aug 15 20:01:36 2026 GMT
Subject: CN=cd49685c216f705f7c4c5ab8e6f380f11665d30f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:62:b9:4b:43:8d:d0:63:a1:ef:69:cf:4f:73:
c5:97:84:a4:b8:dd:46:a3:09:6c:f1:08:31:ee:ee:
81:f1:2d:7d:4b:a4:d3:b1:bf:94:d0:47:41:02:57:
6a:24:34:53:80:65:46:50:1e:5b:11:5f:12:41:c2:
cf:26:bc:5d:d2:a8:5d:b9:e5:55:2d:b7:a8:0b:d1:
48:d4:b1:0a:59:33:8e:9b:01:a8:a3:66:ed:35:e4:
a1:9d:e6:98:f5:74:6e:86:c9:2e:47:2e:bb:ac:eb:
46:0b:3b:8c:89:1c:30:76:da:d9:10:20:fa:32:90:
de:57:e0:f0:9d:73:5f:54:e7:58:35:32:1e:ba:b6:
8e:f6:77:49:29:25:21:77:1e:0d:6f:d7:7c:6c:a9:
d6:43:63:f8:0a:53:e7:50:3d:0a:1e:ec:2c:9e:66:
3a:9b:fe:23:67:b8:b2:8d:92:fc:8e:8c:06:fa:fa:
dc:16:b0:70:ba:51:e2:be:89:37:b7:73:df:30:44:
e7:7a:6d:41:89:09:f8:21:2d:81:ea:98:77:21:e9:
91:0c:07:64:1e:85:e4:9a:27:bf:dc:f8:60:a2:81:
bd:0c:e9:bc:4b:31:f0:98:04:d6:5e:df:0d:fc:7f:
73:c1:c8:51:61:d4:28:71:0a:44:2d:43:35:5d:dd:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:49:68:5C:21:6F:70:5F:7C:4C:5A:B8:E6:F3:80:F1:16:65:D3:0F
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:5c:ce:ef:75:1d:d7:e6:a8:81:a9:ed:53:9d:62:38:44:c7:
01:e7:52:a9:33:8d:0e:d9:01:1f:36:a7:fc:98:6a:af:e0:0f:
60:9e:d7:13:42:a4:06:59:55:ba:e8:92:03:6b:e6:d1:89:5e:
9b:38:1c:de:67:dc:a7:1a:7d:49:70:d1:56:ac:f4:df:82:4d:
c4:6d:04:d6:e7:d0:31:c4:6e:27:f0:2e:8e:2c:38:e3:ef:c9:
29:ce:ff:e7:13:6f:19:98:a0:6d:52:c3:87:8f:fa:dd:bc:66:
75:fc:7a:67:83:0a:df:4f:98:5b:47:aa:85:f5:c0:66:eb:9e:
81:c8:51:bb:3e:5a:03:f1:6d:1f:79:30:13:3b:e0:9e:82:67:
b4:14:59:99:ea:64:66:66:ef:d8:f2:ad:85:c7:e3:f4:6c:79:
88:a2:f0:35:e5:25:60:58:98:c2:fb:dc:cf:a3:f0:3e:eb:76:
97:61:55:9b:6a:e2:9d:aa:84:3e:d8:05:4f:27:03:62:ea:1f:
aa:fd:0a:1b:15:a6:cc:6f:06:77:f6:94:23:10:8c:10:55:55:
85:12:ef:1c:8e:e2:70:30:ba:5a:4d:09:df:ad:b1:5e:6f:b6:
2a:78:b2:c8:ca:e7:05:b0:c5:ca:5b:ca:ec:06:0e:9f:61:9b:
3d:8e:a1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:44:38 2026 by rpki-client