Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
File: Kf8VWBu5BPG5BTh0IRiwH576pmI.mft (raw, json)
Hash identifier: Bzo2hpH1TBWBxd8rjvtOR7MEoToaGVer0KUDUhdOB24=
Subject key identifier: FC:D6:A7:A8:36:54:03:46:24:E4:DB:DE:25:94:81:9F:8A:E0:30:15
Authority key identifier: 29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
Certificate issuer: /CN=29ff15581bb904f1b90538742118b01f9efaa662
Certificate serial: 01A08B67DF4A59896414AF21396D86EBDF80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
Manifest number: 1A49
Signing time: Thu 10 Sep 2026 13:00:35 +0000
Manifest this update: Thu 10 Sep 2026 13:00:35 +0000
Manifest next update: Fri 11 Sep 2026 13:00:35 +0000
Files and hashes: 1: Kf8VWBu5BPG5BTh0IRiwH576pmI.crl (hash: MXqd7GjOhNc+GDVF/FsbQDkCmJnV0OuSPIH2Zq9eblY=)
2: Mg9CIEP-XkNK3HjRwB4U97AixZM.roa (hash: QNXNP032rfC9FKERXA++HNZyYYvFs9+9TJ5FNJnFvfQ=)
3: WFvPF_8VC-S0qgsTBdvqpE6pWug.roa (hash: hC9en9kRQ4ZgWYQeZCnrellhiIJNeme26ezCh3FsZRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 13:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:67:df:4a:59:89:64:14:af:21:39:6d:86:eb:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29ff15581bb904f1b90538742118b01f9efaa662
Validity
Not Before: Sep 10 13:00:35 2026 GMT
Not After : Sep 11 13:00:35 2026 GMT
Subject: CN=fcd6a7a83654034624e4dbde2594819f8ae03015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:26:32:3a:e1:ff:c2:c8:fc:06:d0:f0:12:cc:
34:0c:ff:fa:e7:26:12:01:f4:b8:51:c6:a5:61:cc:
89:c5:a2:49:00:6f:77:75:9d:00:b7:53:5b:74:94:
8b:26:32:48:dd:82:65:0b:7b:91:c8:da:49:69:23:
dd:eb:14:8a:48:b0:1f:52:d5:b3:85:1a:43:f2:98:
8a:44:a6:08:ae:43:45:f2:19:c5:56:56:4d:ee:7a:
61:78:66:4f:06:6d:26:60:f6:9e:8f:0c:f7:13:73:
ba:34:af:00:d9:f4:71:96:0d:b8:f8:69:ae:e6:db:
29:89:02:0e:4f:47:b9:fc:4d:bd:20:99:7e:91:35:
9d:9d:c0:90:f5:50:b1:8c:95:9f:08:73:13:b7:fb:
85:57:93:90:22:b3:9c:72:8a:a8:83:5a:a1:fc:0c:
ee:71:9b:cf:d7:54:f3:2c:db:67:ef:37:73:87:81:
5a:ee:77:42:23:33:d3:16:c1:5e:ca:65:e5:f9:db:
dd:b9:35:15:48:aa:45:1d:cc:8e:df:ac:27:3b:f9:
bf:95:7a:02:b9:8e:e4:77:8b:9e:87:a7:ea:6f:98:
eb:b4:94:ad:a3:39:a3:96:76:7d:49:2b:37:e1:9b:
15:c4:40:74:9d:2d:6e:4e:21:67:e0:b4:f5:ee:7a:
f1:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D6:A7:A8:36:54:03:46:24:E4:DB:DE:25:94:81:9F:8A:E0:30:15
X509v3 Authority Key Identifier:
keyid:29:FF:15:58:1B:B9:04:F1:B9:05:38:74:21:18:B0:1F:9E:FA:A6:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kf8VWBu5BPG5BTh0IRiwH576pmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/db6231-3a7a-484d-8bee-3b8d8b76b7f6/1/Kf8VWBu5BPG5BTh0IRiwH576pmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:35:89:43:7a:0e:40:c1:d5:85:c1:b1:93:1b:b5:83:52:66:
90:e3:bd:a9:6a:85:76:22:3d:07:c1:1c:80:1b:95:54:f8:46:
55:e4:2c:05:47:20:15:53:7e:b7:42:3b:50:8e:dd:b6:a9:25:
80:14:3f:1d:0c:61:b9:72:4a:94:0c:73:e4:2d:92:c4:95:32:
8c:99:14:2d:fa:65:47:77:a6:ac:a5:db:b3:cd:34:b0:27:5d:
f4:fa:47:70:28:5c:c4:50:59:b4:95:f9:8e:ba:5c:5d:11:29:
26:4b:0c:69:21:41:a6:17:f0:54:6c:53:6d:c7:b6:86:50:a6:
4b:ce:44:f2:03:6f:ba:a6:6e:bb:a0:87:74:19:11:08:27:38:
2d:a8:3a:90:b1:1b:5a:d8:2e:3a:56:39:e9:b1:99:b8:94:54:
ad:d9:44:17:64:ef:ee:e0:2e:ff:36:0c:0a:82:03:4c:e4:0b:
f8:5f:8d:5e:65:ab:b5:30:4e:6f:8f:3a:dc:f9:d1:ee:80:f0:
c0:71:83:bc:ce:33:23:bc:a4:2f:fa:6e:d0:4a:c8:53:5c:bc:
a5:71:6a:8c:bc:44:1d:45:7c:9e:07:62:a0:61:44:a8:c6:11:
f1:b0:52:d3:7a:7d:10:9d:aa:d2:2f:94:3e:c1:9d:74:ac:52:
35:94:4a:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 20:32:05 2026 by rpki-client