Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.mft
File: 1-kZSip-6S0qVOeXD0m-C6e3X7Iw.mft (raw, json)
Hash identifier: biXxpdgfnn/Ajv5x3SHRLQ+jEuJZI/SuWg9y1r+Zuk0=
Subject key identifier: A2:ED:B1:AA:52:30:B5:9F:D9:97:E1:56:B1:88:BF:8F:3C:0A:8E:8A
Authority key identifier: FA:46:52:8A:9F:BA:4B:4A:95:39:E5:C3:D2:6F:82:E9:ED:D7:EC:8C
Certificate issuer: /CN=fa46528a9fba4b4a9539e5c3d26f82e9edd7ec8c
Certificate serial: 01A106939791E8CEB6F24B1C6FDB17F1013B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.mft
Manifest number: 48
Signing time: Sun 04 Oct 2026 11:01:38 +0000
Manifest this update: Sun 04 Oct 2026 11:01:38 +0000
Manifest next update: Mon 05 Oct 2026 11:01:38 +0000
Files and hashes: 1: 1-kZSip-6S0qVOeXD0m-C6e3X7Iw.crl (hash: MzpDooVF00mKZmrlBt74cQBtMoUZexnm6sCJBhs7Mus=)
2: 5Nm5QxzsJ7YsE-CS19DaJf8XBX0.roa (hash: 1KPrYvD31Yury50q6UXSqHu1fxoxPI9X15ufg3y2ows=)
3: _xRdrXLgg9HzjLBx638_kVTC498.asa (hash: kUHA8HVU45dfjDjf28Y902sYCrYVEPwQe+17B3n7R6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 11:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:06:93:97:91:e8:ce:b6:f2:4b:1c:6f:db:17:f1:01:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46528a9fba4b4a9539e5c3d26f82e9edd7ec8c
Validity
Not Before: Oct 4 11:01:38 2026 GMT
Not After : Oct 5 11:01:38 2026 GMT
Subject: CN=a2edb1aa5230b59fd997e156b188bf8f3c0a8e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:74:cc:75:63:21:cd:1a:44:e0:94:34:66:a1:
82:74:71:bf:6b:78:42:bd:b5:a6:b2:84:4e:4a:54:
50:b8:a1:80:d4:c9:f3:f1:f1:f9:17:5a:26:25:8d:
b1:e3:75:90:e3:56:50:ca:2b:23:14:59:34:09:36:
91:31:7e:ff:15:94:22:b5:1a:9d:77:08:11:6f:37:
ba:e9:25:cf:20:c2:6f:1a:bc:6b:e5:4c:a7:70:86:
26:8b:3a:f1:d3:c8:2b:7b:66:23:0c:0d:54:81:18:
5f:3e:67:e6:0d:67:ea:d7:4f:f9:89:1e:59:21:53:
55:21:5c:99:e1:f1:06:fb:b2:c2:a6:01:3e:28:27:
9f:45:06:9c:16:70:08:11:f1:93:06:41:a1:23:b7:
95:e5:1f:22:0a:74:e3:06:2a:eb:0a:9b:b7:6d:b3:
1c:6c:c2:4b:7b:e7:7d:52:ba:06:50:70:21:84:3a:
f5:5b:41:5a:bf:8a:62:b5:89:15:4c:12:14:ec:b1:
36:25:29:c8:f6:e5:e5:6b:6f:29:d9:ba:1c:fd:58:
7e:2a:5c:2d:ed:86:e6:1a:38:f5:06:be:e7:8c:af:
e0:c6:80:7f:8f:ce:99:7f:c4:5a:03:c8:7e:58:0b:
ee:65:27:00:4a:7e:e2:c1:c5:d2:e6:f8:fa:73:6d:
fe:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:ED:B1:AA:52:30:B5:9F:D9:97:E1:56:B1:88:BF:8F:3C:0A:8E:8A
X509v3 Authority Key Identifier:
keyid:FA:46:52:8A:9F:BA:4B:4A:95:39:E5:C3:D2:6F:82:E9:ED:D7:EC:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/52f7e8-1f63-4b1a-a12b-15b0a62a4a2f/1/1-kZSip-6S0qVOeXD0m-C6e3X7Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:02:03:d3:31:39:79:d2:cb:fe:11:f1:8a:73:cc:3c:5d:0b:
65:c8:61:a0:39:a4:9b:f3:49:6b:11:90:92:b9:84:dc:25:7e:
88:30:d2:5a:e7:39:4a:e1:f7:75:30:23:51:4b:8d:6e:45:7d:
b1:66:8f:41:39:92:93:df:23:e6:3e:63:3f:95:9b:bf:3b:e8:
00:e8:d4:50:0e:65:3e:97:52:15:09:ef:7c:e0:76:78:21:42:
da:b9:94:29:28:90:ff:7d:b8:65:5a:9a:09:95:58:6c:87:f4:
82:f3:fd:e9:b8:53:c8:12:a2:19:60:e6:6b:8d:7b:d1:38:94:
17:f9:f6:48:ba:e2:d5:45:2e:2b:50:d9:85:b6:32:64:65:18:
01:a6:95:88:10:8d:54:64:04:8d:6d:59:c0:fe:0e:d0:8b:7f:
05:04:5b:ed:ea:2f:91:c7:04:fb:11:1b:d1:fa:60:54:7d:b2:
3e:63:4c:a1:ba:a4:c3:2e:71:ed:96:b9:38:62:ae:e0:15:13:
f8:97:72:b1:bb:5c:e4:dc:6e:32:10:f7:cb:68:6d:79:a6:39:
b3:d7:1a:5f:e3:c4:70:8a:38:d5:18:4d:2d:fa:2b:6b:28:e9:
f7:18:22:b6:19:95:42:49:97:b7:f6:90:a8:60:c4:d9:4b:8b:
98:15:a5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 17:36:38 2026 by rpki-client