Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
File: 1-KMdLu62epN-LofXatn50Xzal_A.mft (raw, json)
Hash identifier: dK2NVBEac/Xi8SURpO3eylQEb8BSoSw/uEPQ87NWF2Q=
Subject key identifier: E7:13:D7:A5:86:31:4F:8D:87:A6:38:D7:25:5B:F3:96:5C:35:F5:48
Authority key identifier: F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
Certificate issuer: /CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Certificate serial: 019D3940A411B993009B54A4C8639229D29A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
Manifest number: 1030
Signing time: Sun 29 Mar 2026 11:00:30 +0000
Manifest this update: Sun 29 Mar 2026 11:00:30 +0000
Manifest next update: Mon 30 Mar 2026 11:00:30 +0000
Files and hashes: 1: 1-KMdLu62epN-LofXatn50Xzal_A.crl (hash: FSvl82bmlly0OJMdUxGtjx6WP7uqJoZ3dGiM+g38eF0=)
2: SOEMdBmGOl9OdgU6wRKXH8ofpiw.roa (hash: wRDPax/GBrg9//RtAKm4t39dVaYciZWJGLWscmkRs9k=)
3: bS5Jm8ZE-sVj1o36QwkjwTi3nSQ.roa (hash: HkP3HjP3l5NouDXiG5SFRZ81aMR3ohNIO6a1Rp53MSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a4:11:b9:93:00:9b:54:a4:c8:63:92:29:d2:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a31d2eeeb67a937e2e87d76ad9f9d17cda97f0
Validity
Not Before: Mar 29 11:00:30 2026 GMT
Not After : Mar 30 11:00:30 2026 GMT
Subject: CN=e713d7a586314f8d87a638d7255bf3965c35f548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f2:04:82:3b:67:c8:13:45:96:45:0f:5a:dd:
55:c1:20:b0:80:fd:4f:0c:8e:64:bf:e6:a4:8f:1c:
1c:57:d1:a0:e2:46:a2:21:e8:9d:a1:e0:58:5f:a7:
ec:f4:9e:41:a0:fc:e7:eb:f1:76:60:eb:09:17:0a:
ef:be:aa:fb:e5:59:67:ed:d4:ab:c3:f5:02:aa:05:
ed:e1:ea:f6:9c:6e:cf:92:a6:1f:07:e3:c2:ad:28:
95:2b:fb:da:08:6c:63:6c:88:28:c8:69:8d:2b:2c:
ba:1a:02:e7:fa:dc:77:11:d7:b7:c0:b6:b4:f9:40:
53:74:d6:a9:9a:01:c3:31:e0:6b:c5:f7:7e:ce:ad:
dc:52:e2:42:d8:c7:d1:a8:43:aa:f3:bb:2d:02:e1:
2f:e3:64:14:f3:41:57:c4:a0:41:67:4c:7c:fc:28:
2b:5f:09:89:6b:26:42:bc:66:cf:07:e5:4e:7a:39:
21:59:df:8a:82:99:24:05:cc:25:43:66:58:69:3b:
89:9c:75:1a:4d:ac:56:4b:a0:d6:19:d2:0a:a8:35:
07:d6:b9:e0:4f:89:0d:b6:98:58:dd:9a:75:c4:2d:
5b:a7:03:91:74:7f:82:bc:68:b4:47:73:59:c5:d4:
5a:89:10:b4:23:24:50:ad:48:ae:12:b5:3a:1a:13:
b3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:13:D7:A5:86:31:4F:8D:87:A6:38:D7:25:5B:F3:96:5C:35:F5:48
X509v3 Authority Key Identifier:
keyid:F8:A3:1D:2E:EE:B6:7A:93:7E:2E:87:D7:6A:D9:F9:D1:7C:DA:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KMdLu62epN-LofXatn50Xzal_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/886646-ffaa-400e-8df6-595f2100166b/1/1-KMdLu62epN-LofXatn50Xzal_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:4a:63:ee:b1:c5:ef:75:ba:38:22:82:59:76:c5:e7:5c:34:
e1:1e:fc:76:c1:26:e1:30:fd:07:28:3d:22:1a:bc:74:b6:36:
c7:d4:eb:b2:05:24:86:28:d6:96:af:59:6b:fd:57:c8:b7:6a:
1e:e9:d3:95:20:9a:fb:14:40:25:ad:4e:e5:5c:d4:f9:75:32:
62:ac:2f:35:a1:54:f6:1d:5e:b4:5e:58:b4:25:25:b1:f0:47:
2d:13:ba:ef:79:86:16:c1:34:58:6b:5e:ca:96:7c:cb:24:94:
cf:3b:22:75:d1:44:a2:ac:3c:13:87:41:9b:62:75:c7:4c:ae:
37:f4:20:9b:a6:7e:a7:55:e8:60:66:97:b8:06:55:16:78:e4:
09:9a:14:39:b9:a7:2e:e1:9e:8e:6e:6f:07:43:85:1a:e7:83:
c7:70:9f:f6:6b:fe:10:48:b6:ce:cb:7b:ab:83:77:00:69:8f:
bb:ad:c1:5d:73:56:93:09:5e:a1:39:a3:17:55:c1:83:2c:89:
41:41:11:2a:8b:4a:d5:a0:4a:00:0a:18:02:a1:b4:f9:f2:24:
19:e3:2c:84:b8:84:20:0b:f2:1f:e7:55:a7:75:29:08:2a:1f:
3b:51:1a:ed:fd:88:c0:6b:1b:bc:cc:bc:12:9a:b0:bb:f5:e0:
0b:51:41:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:06:14 2026 by rpki-client