Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier: lX1MdL1Xz2mXR0XWtLTyAn9YdLH2pZdvYhC8P13SBls=
Subject key identifier: 33:A6:D8:55:FA:E7:BF:18:D8:45:F4:B2:5D:42:BE:EE:89:A6:ED:A0
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 019F1830DCAF17ED95385F7434D608E0908C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number: 1128
Signing time: Tue 30 Jun 2026 11:01:22 +0000
Manifest this update: Tue 30 Jun 2026 11:01:22 +0000
Manifest next update: Wed 01 Jul 2026 11:01:22 +0000
Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: CJcF5n0vwCOC2Rt7htmkS3QI8wmQk97u4FknFz/buk0=)
2: SOEMdBmGOl9OdgU6wRKXH8ofpiw.roa (hash: wRDPax/GBrg9//RtAKm4t39dVaYciZWJGLWscmkRs9k=)
3: bS5Jm8ZE-sVj1o36QwkjwTi3nSQ.roa (hash: HkP3HjP3l5NouDXiG5SFRZ81aMR3ohNIO6a1Rp53MSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 11:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:30:dc:af:17:ed:95:38:5f:74:34:d6:08:e0:90:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Jun 30 11:01:22 2026 GMT
Not After : Jul 1 11:01:22 2026 GMT
Subject: CN=33a6d855fae7bf18d845f4b25d42beee89a6eda0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d2:c8:cd:3e:45:d3:9b:db:ba:d8:c5:f6:ea:
8b:2b:0e:18:ec:74:82:82:93:c7:7d:09:68:88:39:
8e:8d:09:7c:75:18:5c:d9:6d:0a:2a:98:34:83:70:
8d:47:a9:a9:ca:d4:8d:2c:aa:d5:23:2f:ba:5f:29:
87:72:51:3e:fe:79:ab:01:5f:fc:d4:a8:4c:e3:34:
04:1b:c8:81:20:63:db:d8:85:31:49:7f:3a:23:11:
34:47:a9:59:38:a5:7d:e2:7c:b1:c3:89:6a:2a:bb:
f8:28:08:0f:99:cf:4b:8c:20:ed:fc:ec:d5:b0:5c:
61:21:a4:f5:c7:37:d9:7f:66:33:7b:7e:3b:4c:21:
a3:b3:f9:90:3d:79:42:9c:ae:6d:26:b2:51:15:1c:
e6:ef:64:2b:63:51:12:bd:7c:76:ea:25:5c:99:a5:
5d:75:aa:2a:9c:c0:19:d8:d0:ae:07:06:81:ac:2c:
e4:eb:8e:0b:5b:12:e0:50:4f:ed:1e:58:c4:80:08:
91:a9:57:ee:2c:a1:68:74:8a:a0:d6:db:f4:49:64:
f4:4e:69:41:61:21:37:5e:47:03:d0:62:14:c6:57:
b2:93:e5:aa:3b:5e:0a:97:58:45:1b:80:3e:a7:d6:
91:95:04:fd:30:78:8b:14:48:56:68:04:52:2f:da:
cb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A6:D8:55:FA:E7:BF:18:D8:45:F4:B2:5D:42:BE:EE:89:A6:ED:A0
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:61:08:9f:ea:a7:92:5e:6e:da:7c:31:6e:47:8a:f9:a8:93:
e9:24:10:5b:ab:7f:f6:88:21:07:23:bd:15:03:f0:96:e1:17:
04:10:46:fc:3e:6a:00:be:d0:25:a0:98:f0:e3:47:e9:7b:22:
cc:86:cd:74:a7:41:80:70:55:e7:95:cf:a5:3c:80:28:6e:af:
c0:50:dc:2b:3d:ee:19:4e:f5:54:f2:78:b9:2a:1d:5d:6b:a2:
8f:97:66:a0:e0:ce:28:ff:94:b3:0d:56:09:6c:66:4b:c0:73:
ac:b0:ef:54:c8:e1:9b:c5:ec:b4:5e:59:c0:b9:4b:3a:f2:24:
a3:32:43:98:fb:62:01:e1:bc:d0:83:ab:0c:97:62:44:20:61:
1f:f3:96:27:0e:2b:2e:2b:84:18:39:b1:53:67:4a:a6:0a:ef:
b7:dd:91:15:37:24:c3:a7:59:a7:2b:55:14:e0:e7:46:b4:01:
7d:68:b5:2b:38:be:48:dd:5e:d4:9b:59:bb:d3:de:b7:35:f4:
e0:75:3e:ba:95:c5:1f:0d:11:7d:96:3b:19:f6:1e:7a:0f:1a:
0f:6e:98:39:67:4e:10:42:8f:cf:60:a3:dc:b9:04:c3:5b:a6:
17:8d:25:d4:f2:36:30:85:6d:b2:59:d8:11:8b:d9:35:83:cf:
3c:6f:9d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:26:30 2026 by rpki-client