Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
File: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft (raw, json)
Hash identifier: NMIbrpX4w9BhbQrCTovRcl3QAz5zo+G+miIgNYAA4L0=
Subject key identifier: EC:D6:3E:4E:8F:15:99:07:25:66:86:43:C4:29:5C:79:B8:D3:30:D6
Authority key identifier: F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
Certificate issuer: /CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Certificate serial: 01A03FE0303A7CC1850D71ADAC6D3D0DDA38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
Manifest number: 050A
Signing time: Wed 26 Aug 2026 21:00:51 +0000
Manifest this update: Wed 26 Aug 2026 21:00:51 +0000
Manifest next update: Thu 27 Aug 2026 21:00:51 +0000
Files and hashes: 1: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl (hash: UbPWvudml0mz5+B5elAtnnEGNvoM4nz9poANo9j/szQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:30:3a:7c:c1:85:0d:71:ad:ac:6d:3d:0d:da:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Validity
Not Before: Aug 26 21:00:51 2026 GMT
Not After : Aug 27 21:00:51 2026 GMT
Subject: CN=ecd63e4e8f15990725668643c4295c79b8d330d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6e:5f:90:b6:04:4a:7e:ed:5b:72:15:30:15:
66:8e:ba:16:dc:a1:67:07:d7:88:4b:b0:b2:3a:b2:
d8:f1:11:40:ad:50:82:60:c9:e6:d0:5e:8c:7d:27:
21:74:99:22:5d:0d:cb:54:57:9e:d8:10:56:d5:82:
b6:f5:dc:11:54:9f:91:f1:7f:62:9f:64:80:8f:1b:
9b:e6:1d:f6:a7:00:34:0e:ec:b2:2a:b9:6b:51:01:
39:60:69:34:53:47:36:de:92:e9:cd:3a:af:de:1e:
ed:ea:5a:51:91:fa:10:aa:83:7e:2c:7c:3f:8e:77:
87:35:5b:a8:7a:eb:53:1e:16:fa:1d:d3:b6:06:8e:
0f:1e:48:da:aa:80:51:a4:d9:ba:e4:c4:77:bb:8d:
52:ec:50:f1:de:87:fe:26:3e:8b:52:b5:de:f6:d1:
69:27:8b:ea:d9:79:94:8a:e5:71:f2:22:a8:f6:da:
04:04:c4:47:29:82:3e:47:18:ed:39:96:0b:41:e3:
13:22:6b:9d:02:16:c7:64:b5:77:f3:89:6e:ad:51:
4c:38:d9:2a:eb:5b:43:f8:ab:68:bd:15:4e:ad:c1:
b9:8b:20:19:3f:ea:49:3d:63:26:22:90:d3:0f:ad:
8d:97:ee:6b:cf:2a:50:b5:6d:cc:ce:73:67:f7:82:
c3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:D6:3E:4E:8F:15:99:07:25:66:86:43:C4:29:5C:79:B8:D3:30:D6
X509v3 Authority Key Identifier:
keyid:F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:df:72:e1:8a:03:49:1e:4d:11:c9:1d:c8:2e:33:10:31:21:
0a:60:aa:2d:3b:cb:94:64:c0:9c:3b:b1:21:ca:df:f0:e0:c3:
b8:ad:bf:2d:40:ad:64:26:54:06:4b:b1:54:41:af:cd:26:71:
66:0f:67:7a:80:11:00:2e:b1:f8:1b:11:50:e0:17:cf:f8:b7:
1f:03:8d:98:8b:7a:4c:95:6f:ec:3a:e4:b3:a2:b8:56:58:c5:
ce:ea:7b:ca:14:00:63:7b:c4:da:b0:cc:3d:49:6f:22:a3:9d:
50:6f:ea:94:d8:d9:7d:cf:c3:1c:11:1c:d6:95:96:c5:b0:46:
21:58:e2:a4:7d:e1:dc:22:1a:d2:8d:37:58:91:e6:84:79:f9:
10:e0:82:7a:fe:52:9b:39:ba:a3:9a:6a:fd:4d:be:70:92:96:
b7:3d:81:ca:62:5e:38:c0:0a:33:27:74:fb:78:7f:ef:11:61:
69:70:d3:01:4e:61:54:7d:92:55:2b:4b:57:2f:23:57:e7:e3:
68:16:c6:0e:c1:c0:0c:8b:88:7d:e1:37:2d:43:d4:25:e4:6c:
2a:3b:aa:6e:0e:87:a2:8c:8f:06:29:0d:4f:64:f9:6e:ea:ba:
e5:70:45:16:a1:8e:79:81:cc:e5:be:52:33:50:f8:48:08:df:
a8:3b:08:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:55:15 2026 by rpki-client