Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
File: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft (raw, json)
Hash identifier: EBJyNiRCArNqf26c9Tx6yuBItqBKwFq4WUmZ1R8B49Y=
Subject key identifier: 69:9D:8E:69:9C:A3:A0:C5:47:CB:FD:7D:EB:C1:41:1B:E3:02:7D:28
Authority key identifier: AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
Certificate issuer: /CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Certificate serial: 019DDE0D16FDD2E8562C3358A995A22DE991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
Manifest number: 07AC
Signing time: Thu 30 Apr 2026 11:01:32 +0000
Manifest this update: Thu 30 Apr 2026 11:01:32 +0000
Manifest next update: Fri 01 May 2026 11:01:32 +0000
Files and hashes: 1: rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl (hash: D1lwZtFEkk+KzdE+q7MnRjMjiI4AO9Yu2klUtwuKsLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:de:0d:16:fd:d2:e8:56:2c:33:58:a9:95:a2:2d:e9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae4d7ff456f5fdc7de61fa420ee086a77a1e61e5
Validity
Not Before: Apr 30 11:01:32 2026 GMT
Not After : May 1 11:01:32 2026 GMT
Subject: CN=699d8e699ca3a0c547cbfd7debc1411be3027d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4b:69:d9:93:10:a9:ad:0d:bf:c8:fd:99:cb:
59:18:f6:e6:e1:44:d0:80:be:aa:4a:ba:f1:a4:3f:
e0:7f:ce:6e:b1:62:d0:85:ed:ef:09:c7:c5:1a:08:
20:23:c3:89:dc:19:cb:4a:86:2b:1f:a1:ae:33:b6:
09:94:a5:6c:bb:0c:b5:52:e3:29:dc:9e:1a:85:53:
28:2c:d2:d4:fb:b3:ab:61:53:63:db:bb:5c:4e:b3:
19:6e:9f:f3:ba:b7:ca:3d:e5:f8:98:14:53:36:40:
46:db:91:9c:cc:a8:7a:31:23:92:2c:11:09:3a:b3:
a4:94:b2:33:50:e2:4c:89:24:82:3b:6a:74:9a:7d:
2f:89:5f:44:8c:5f:49:34:3a:ad:d5:f7:e8:62:ea:
e5:76:c1:b3:6a:fd:39:54:28:8e:f9:21:ae:66:f6:
21:64:8f:00:a4:22:fa:68:b8:0d:20:de:a5:a3:64:
3b:cd:5b:5f:a4:64:6a:b3:72:dd:96:89:a3:40:c7:
e2:d6:b2:fc:12:98:96:fa:10:e9:bc:db:f2:2e:70:
62:e1:0e:69:62:35:b0:c8:c0:2f:05:01:73:7f:dd:
23:fc:45:72:f0:42:35:0c:e2:b4:12:e5:78:af:95:
1d:b4:17:0c:d2:48:47:3c:29:52:29:92:d4:a3:83:
64:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:9D:8E:69:9C:A3:A0:C5:47:CB:FD:7D:EB:C1:41:1B:E3:02:7D:28
X509v3 Authority Key Identifier:
keyid:AE:4D:7F:F4:56:F5:FD:C7:DE:61:FA:42:0E:E0:86:A7:7A:1E:61:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/2ace1e-70db-4a0a-93c4-07b18e518561/1/rk1_9Fb1_cfeYfpCDuCGp3oeYeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c6:00:21:82:5a:1c:68:fa:15:e7:fd:0b:32:c6:1d:73:71:
6d:ef:08:78:78:61:2f:ba:0a:54:91:0e:36:38:4b:1f:4e:95:
99:a6:06:90:75:79:00:af:65:5c:64:d5:98:73:05:f8:d7:1f:
7f:cb:c0:c2:ca:0f:67:69:b6:b6:b0:39:19:37:cb:4d:22:9e:
71:e8:4a:69:87:e5:e6:fa:97:97:07:f4:db:88:e1:ca:f7:05:
d3:6b:ab:81:51:a2:1c:24:e0:e6:e9:12:f4:68:00:72:2c:ce:
7e:a1:99:19:3d:9a:73:52:ca:cf:36:77:b3:09:55:77:ac:7f:
f8:e3:e6:4c:94:fa:0f:44:d6:e8:8e:09:ff:02:c8:cf:3b:1a:
02:09:cb:93:d4:20:f5:43:9c:3a:61:7b:05:48:9d:6e:b6:f6:
84:72:62:7b:ae:8d:8e:9a:0c:f7:e6:75:43:a7:e6:c5:65:81:
ab:89:b4:14:76:12:a4:f9:20:c9:70:75:55:56:01:ed:a2:a8:
1c:a2:b0:8b:c4:63:91:84:03:d2:ef:5b:64:c5:7f:49:b7:b8:
16:a6:a2:30:5f:bf:75:28:6a:26:cf:76:73:c5:c0:2d:a6:64:
82:17:74:d0:6f:fc:53:7e:80:0b:bf:7c:af:c5:af:ea:d2:cf:
db:0d:f9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 13:46:38 2026 by rpki-client