Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier: i8NmXNVT7Qrp+Lk+uViYpFYkNkyTf01afmmbktBdHOM=
Subject key identifier: 20:AE:60:3C:FD:E7:F0:0D:DE:BE:B7:51:11:97:BC:7E:45:7F:76:B2
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 019E307286BF812E855DBAEADA09ECFA8785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number: 10B0
Signing time: Sat 16 May 2026 11:01:12 +0000
Manifest this update: Sat 16 May 2026 11:01:12 +0000
Manifest next update: Sun 17 May 2026 11:01:12 +0000
Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: GjD+y3gquvOyCX2Gm269lm9CBv/lpe+hAkUYYnR8Xxg=)
2: SOEMdBmGOl9OdgU6wRKXH8ofpiw.roa (hash: wRDPax/GBrg9//RtAKm4t39dVaYciZWJGLWscmkRs9k=)
3: bS5Jm8ZE-sVj1o36QwkjwTi3nSQ.roa (hash: HkP3HjP3l5NouDXiG5SFRZ81aMR3ohNIO6a1Rp53MSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:86:bf:81:2e:85:5d:ba:ea:da:09:ec:fa:87:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: May 16 11:01:12 2026 GMT
Not After : May 17 11:01:12 2026 GMT
Subject: CN=20ae603cfde7f00ddebeb7511197bc7e457f76b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fa:36:c3:a4:3b:70:a2:a7:8b:dc:9f:4a:95:
48:11:fc:e6:e5:ca:ad:39:a5:82:18:37:0e:09:e6:
d3:c8:6f:c7:ab:0e:93:e1:d5:0a:3e:0c:06:dc:15:
91:3f:40:53:ab:11:72:a7:fc:5d:79:e8:36:1b:b3:
ea:df:ee:bd:86:07:d3:e7:8f:70:9a:10:be:d8:4b:
83:11:de:0d:fd:6a:2d:63:6d:87:1e:8b:eb:59:e4:
ff:fc:bf:58:92:47:62:eb:26:ba:6b:e3:1f:df:5c:
3c:ca:d2:93:a6:a7:36:57:a2:20:63:3c:ef:9b:f3:
d9:c1:e1:f8:05:ab:3a:49:a1:f4:b0:ab:35:13:6e:
80:1c:fd:28:5c:c4:f6:92:e2:20:a9:73:f6:57:34:
22:73:2b:a3:6a:32:ff:2b:b2:71:05:d7:5e:72:fa:
7f:69:5a:37:83:99:89:71:e6:24:80:a6:45:07:47:
99:1d:cf:3e:2d:f7:bb:bc:7b:79:1c:2c:88:03:52:
ac:54:bf:75:0d:e0:72:fd:68:b3:8e:bf:dd:10:93:
a6:05:b2:f5:b2:b4:39:0b:6b:4d:4d:3c:72:93:88:
40:57:e7:6b:ee:73:f8:0f:65:6d:e4:4b:8a:4f:e6:
55:dd:4d:03:58:22:dd:44:21:ac:f4:54:2a:d5:73:
f5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AE:60:3C:FD:E7:F0:0D:DE:BE:B7:51:11:97:BC:7E:45:7F:76:B2
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:fc:f6:d6:c9:77:de:51:09:fb:34:05:00:14:5f:08:76:93:
1a:cd:47:8b:9c:37:60:29:37:1e:ad:b6:0e:7f:82:a1:f7:2c:
6b:93:7b:09:e4:f0:bb:fd:11:15:c0:b0:f3:aa:56:4c:76:03:
7c:7b:ad:e3:ef:0b:9e:cd:01:6f:08:d6:3b:04:fa:83:5f:be:
9a:14:1c:b7:95:51:d4:ec:d4:1c:33:0f:17:5e:de:20:87:7a:
7f:de:4f:5f:9a:45:63:0f:41:3a:ba:1f:0b:24:92:06:d2:36:
46:d5:b8:60:6c:fc:c1:b2:66:d9:1e:c8:66:66:e1:3f:d4:ac:
63:a5:53:50:5e:e5:2f:b1:07:1c:70:76:84:0b:1a:ae:f1:fe:
bb:c3:84:fd:19:9e:44:39:e4:dc:36:97:eb:4e:8e:45:25:76:
e1:fc:aa:7c:52:ee:4e:56:90:fc:6f:85:f7:c8:2f:04:3b:13:
fd:a0:64:c6:15:e8:ab:1f:dc:8f:ec:e4:15:26:a8:86:ed:61:
4f:c6:41:9e:25:91:9c:4e:2b:aa:94:72:aa:34:ec:de:8a:2c:
08:bc:9f:b8:7c:b7:8b:8b:c0:e1:2f:59:ba:85:b3:f5:07:d7:
06:a0:37:a9:57:04:e5:d9:0d:b2:3b:70:c9:6f:39:27:21:09:
b4:e6:f3:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:48 2026 by rpki-client