Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
File: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft (raw, json)
Hash identifier: qPK3JQNyS+mv7Xfv/fEK1ExORiyJ58tKU/giLTVAYjI=
Subject key identifier: 87:AE:1B:BE:B1:FA:F5:D8:9B:B0:0D:C6:04:2B:DA:46:F0:2A:C4:0B
Authority key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
Certificate issuer: /CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Certificate serial: 019CF0836F5E3A82C5A9087F0A9D6F01720F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
Manifest number: 0731
Signing time: Sun 15 Mar 2026 08:01:11 +0000
Manifest this update: Sun 15 Mar 2026 08:01:11 +0000
Manifest next update: Mon 16 Mar 2026 08:01:11 +0000
Files and hashes: 1: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl (hash: qAv1zaO09sZstmi2uzPIsYkc4m8DQhtZSs7ypIZmRM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f0:83:6f:5e:3a:82:c5:a9:08:7f:0a:9d:6f:01:72:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Validity
Not Before: Mar 15 08:01:11 2026 GMT
Not After : Mar 16 08:01:11 2026 GMT
Subject: CN=87ae1bbeb1faf5d89bb00dc6042bda46f02ac40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6d:53:61:86:d1:e4:55:a7:ab:6d:35:ba:b5:
21:43:7d:8d:3f:ce:55:54:a3:f3:09:cd:d3:5e:0c:
7b:fc:6f:96:00:73:d7:02:bb:56:06:f6:a2:62:82:
d5:49:7f:60:0f:78:8c:70:82:ff:74:e0:1b:a9:78:
c6:51:7e:3e:21:59:99:88:5c:46:9d:96:e9:41:75:
72:ba:17:91:ac:89:dd:da:69:6e:e0:7b:d0:94:4a:
af:22:b1:7d:82:64:b3:d2:6a:34:6e:79:c8:c4:bf:
e6:cb:6a:be:78:d7:4f:db:8f:2c:8d:e8:2f:4e:2c:
82:d9:29:60:59:e7:85:7b:b0:dd:80:69:44:e7:eb:
f4:01:b4:3d:62:bb:a5:50:5b:9b:5b:75:ef:f7:2c:
b5:2b:a8:c1:c0:86:07:ca:4a:9e:61:ed:86:14:5b:
36:10:18:75:ad:3e:e9:70:71:b4:16:35:70:95:9a:
04:54:ce:5e:e4:dd:98:c3:68:a8:9c:53:46:8e:bc:
ff:5d:55:60:a8:91:08:d8:de:15:76:a4:0f:83:3e:
5b:e7:80:79:ce:b9:0d:ed:8b:fc:ea:fc:b0:60:85:
53:79:a7:db:6d:57:1a:d2:0c:d9:7a:dc:f9:2c:4a:
b0:ca:6d:24:7c:67:fa:3f:47:07:e7:9e:7e:0c:fa:
7a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:AE:1B:BE:B1:FA:F5:D8:9B:B0:0D:C6:04:2B:DA:46:F0:2A:C4:0B
X509v3 Authority Key Identifier:
keyid:AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3a:28:9a:ed:27:9e:db:bf:28:4f:f1:8f:c0:7f:33:69:e4:
05:22:73:61:25:97:f9:30:9a:0e:a2:a9:d5:2a:39:dc:55:30:
ef:f3:dd:f6:11:65:61:56:d6:ba:8d:71:09:5c:c8:c4:a5:a1:
3a:1a:dd:5b:6b:dc:99:49:a0:e6:6b:e3:35:f8:94:e7:73:87:
53:9e:bf:da:2c:11:7b:22:48:75:14:2d:27:77:d1:39:3d:78:
93:5e:5f:34:ba:c5:27:94:b2:b1:4b:cd:be:37:ce:3d:49:c7:
24:60:43:6e:80:05:ed:93:e4:a9:d4:65:ea:01:36:28:19:da:
0a:3d:3d:4f:81:e7:ff:22:44:08:32:25:26:c3:42:03:78:ae:
0f:3b:c3:93:00:ac:fe:bc:8e:82:b6:44:19:b4:a5:b5:78:86:
46:5b:04:a2:dc:c8:c2:84:3f:44:bd:08:5f:39:52:e1:6f:1b:
12:4c:28:ac:c3:45:bf:03:9f:88:14:cd:85:87:77:cc:99:e6:
c3:ba:c8:21:95:c2:2d:a4:8d:70:06:cc:95:68:7f:8e:54:ce:
46:35:35:4c:dd:df:16:f0:db:3d:bf:55:ed:1b:7e:f2:76:c3:
e3:87:b1:6e:c4:e7:6b:d2:bf:04:9e:4e:2f:83:1b:48:9e:8f:
ab:98:2e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 15 16:41:06 2026 by rpki-client