Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
File: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft (raw, json)
Hash identifier: M3yXDSqT+L3ZY4cfwwc6MRnQw5Ozsdd9PcFDnq1+Wwo=
Subject key identifier: 2F:92:DC:D9:25:0C:40:11:83:32:76:FC:F6:D1:80:AB:2F:FC:88:78
Authority key identifier: F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
Certificate issuer: /CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Certificate serial: 01A13DB7FE18EEDD66286895BCDBAEE76B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
Manifest number: 0DD3
Signing time: Thu 15 Oct 2026 04:00:30 +0000
Manifest this update: Thu 15 Oct 2026 04:00:30 +0000
Manifest next update: Fri 16 Oct 2026 04:00:30 +0000
Files and hashes: 1: 1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl (hash: M1iC/CBhShh/WpjPn931IOB6JhTeU9WR8fjeiXPgPWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b7:fe:18:ee:dd:66:28:68:95:bc:db:ae:e7:6b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a6b79b0397eb45ee827a4d63dca74769552956
Validity
Not Before: Oct 15 04:00:30 2026 GMT
Not After : Oct 16 04:00:30 2026 GMT
Subject: CN=2f92dcd9250c4011833276fcf6d180ab2ffc8878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:fd:d4:5f:30:04:d9:28:04:d2:d5:dc:7b:61:
88:d5:7f:c2:d9:b2:ad:8b:2b:63:e8:94:b1:c6:e2:
97:2a:14:2f:f3:bd:46:e6:9f:af:25:e1:78:35:4a:
ce:10:ea:a8:7e:60:2c:fb:77:78:64:2c:15:36:d6:
39:b2:36:ba:aa:7f:d1:fe:cb:e8:81:0d:01:71:79:
98:be:56:30:04:fd:1e:e8:16:3a:4c:21:68:29:df:
c2:84:24:72:3e:91:94:0b:70:da:95:2f:c8:f5:a6:
97:b0:18:3c:83:40:d1:c3:d9:8a:ae:29:79:3b:a6:
f1:1a:2e:da:17:0f:4f:c5:a5:d4:7c:d7:c5:8f:a6:
d5:ae:db:4d:2f:37:5d:8b:55:83:a1:5f:91:d1:77:
5f:2a:02:00:15:ed:4a:de:9f:5f:cc:35:84:84:38:
97:87:99:c8:2b:6d:ec:e4:3b:ea:93:95:a5:33:40:
de:5b:67:fe:ee:d3:da:71:22:6c:55:5a:32:01:87:
6e:b5:12:de:32:d6:c8:df:68:29:35:51:51:f7:ea:
22:51:9b:7c:0a:f3:75:79:8c:67:22:ff:f0:49:e9:
69:d5:30:d4:33:79:cf:a8:ff:78:1a:a7:b8:89:13:
ef:64:ca:35:d9:9a:7e:a4:1f:e6:46:aa:a8:79:13:
80:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:92:DC:D9:25:0C:40:11:83:32:76:FC:F6:D1:80:AB:2F:FC:88:78
X509v3 Authority Key Identifier:
keyid:F8:A6:B7:9B:03:97:EB:45:EE:82:7A:4D:63:DC:A7:47:69:55:29:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ka3mwOX60XugnpNY9ynR2lVKVY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b937fa-ef55-4e45-84c0-9f502df4ff65/1/1-Ka3mwOX60XugnpNY9ynR2lVKVY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:9e:d8:0c:5b:5a:86:25:86:53:6b:0e:17:dc:f6:05:70:30:
f2:4b:cc:dc:6f:9f:25:bd:83:f9:b1:6e:81:88:77:81:85:53:
0b:e9:40:39:4d:ca:7d:34:51:64:3f:a0:ce:20:04:d5:39:0a:
e0:f5:c6:f5:e6:10:87:af:fb:9d:7e:3f:3f:9b:e6:12:4b:d8:
52:31:fb:c1:93:30:8b:a5:c7:5e:cf:46:7a:a3:9d:62:2f:37:
42:16:6f:70:ca:50:d0:f7:72:75:29:34:cb:fb:4f:fe:8b:5b:
6f:7f:bf:a5:a2:ef:e6:53:ca:99:14:87:8e:ce:d0:c6:96:69:
77:06:d4:1d:66:d2:ee:e3:c4:96:da:6f:41:91:d9:d6:c8:d1:
83:bf:e5:60:b2:03:e6:d0:dd:ff:63:88:a0:22:01:d8:62:26:
a0:25:8c:57:65:71:83:4b:cf:e1:54:87:64:ce:a3:11:c2:98:
2d:33:ea:ad:5a:2c:33:88:48:5d:9a:48:7b:62:d1:e9:39:07:
e8:73:8c:52:0f:b7:8e:e5:fa:45:66:ec:e6:ea:22:65:26:e6:
bd:12:cc:d9:42:ee:18:2c:98:d9:1f:c3:d9:13:02:1d:50:bb:
79:2c:3a:3c:39:60:c7:f9:5a:af:29:39:0f:55:4e:2e:83:5d:
1d:19:62:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:52 2026 by rpki-client