Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
File: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft (raw, json)
Hash identifier: hYCrEM6SOvAIoe0jASUp3hPl4ndJ7OvxuCbd8u5HiLQ=
Subject key identifier: A7:00:07:AC:52:CF:76:07:3F:0A:E1:D5:CF:67:45:FB:26:8C:DF:74
Authority key identifier: F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
Certificate issuer: /CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Certificate serial: 019D37894BF5F47F0A2739DF142921131C73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
Manifest number: 0378
Signing time: Sun 29 Mar 2026 03:00:37 +0000
Manifest this update: Sun 29 Mar 2026 03:00:37 +0000
Manifest next update: Mon 30 Mar 2026 03:00:37 +0000
Files and hashes: 1: 1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl (hash: I+vVY+BBWNut0Cxqc53pKgsbLkEbYH9jqs7NbSDb0b0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:4b:f5:f4:7f:0a:27:39:df:14:29:21:13:1c:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8a738204067b73617ec7df218c1b256ecb6f6f5
Validity
Not Before: Mar 29 03:00:37 2026 GMT
Not After : Mar 30 03:00:37 2026 GMT
Subject: CN=a70007ac52cf76073f0ae1d5cf6745fb268cdf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:5d:15:f7:8d:2c:bd:57:5a:b4:06:86:ad:88:
ef:c3:42:64:c9:63:0a:fb:6f:f4:b3:ec:ef:b3:1e:
59:f9:cf:26:39:cb:60:63:a9:f6:9e:82:a8:15:fc:
cc:c7:a3:a2:e0:d4:5a:14:19:29:c2:02:c6:ae:ca:
c7:ad:8b:34:b7:aa:01:41:af:55:80:03:b5:7e:58:
fc:bb:fc:87:2c:0f:c3:33:1a:c8:09:3c:25:66:89:
50:f6:ab:c4:a2:f0:da:c4:c6:0a:52:00:de:a9:bc:
af:af:a2:b7:12:1a:67:17:ef:47:79:55:c1:fe:16:
7d:49:92:08:07:59:6e:c5:25:87:23:10:c4:27:17:
81:97:a7:52:ae:8d:ee:2e:6b:63:87:c4:66:2c:d7:
8b:83:38:71:b7:e3:0d:42:1d:1a:65:10:7b:5a:68:
64:2f:c1:5c:9f:6e:85:c4:8d:73:00:47:4c:e3:99:
24:31:94:7f:86:c0:2e:70:81:32:37:d3:0b:2c:76:
7a:c3:7e:ee:bb:1e:d5:2e:b5:81:77:9e:34:25:26:
d8:94:91:33:1d:af:10:7e:63:23:4b:f5:66:5f:2a:
e0:81:91:e6:14:97:3e:90:9f:3c:32:7f:1b:0a:8c:
c0:4c:a2:0a:29:8a:f5:62:46:44:05:93:48:c3:76:
cd:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:00:07:AC:52:CF:76:07:3F:0A:E1:D5:CF:67:45:FB:26:8C:DF:74
X509v3 Authority Key Identifier:
keyid:F8:A7:38:20:40:67:B7:36:17:EC:7D:F2:18:C1:B2:56:EC:B6:F6:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Kc4IEBntzYX7H3yGMGyVuy29vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/48ef82-0992-4255-9964-49bcd384ceb0/1/1-Kc4IEBntzYX7H3yGMGyVuy29vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a0:1d:ca:4c:ce:8f:95:93:12:20:4a:79:c9:30:a4:5a:21:
57:c6:83:5e:3b:67:af:1e:1c:cd:74:d1:5a:7f:74:fc:0e:01:
03:aa:22:e2:4f:b6:57:e7:37:24:d8:7e:b0:90:1f:c4:bd:25:
28:bb:e6:bd:02:d9:ba:1c:63:fd:9d:8a:ac:f5:54:9d:c8:01:
46:18:5a:86:f1:fa:87:37:1c:45:44:2d:a4:f3:98:8e:ea:a1:
f2:a6:b7:a7:cd:a4:d4:77:17:75:72:27:50:0c:76:d8:1a:19:
8d:08:74:f7:37:41:3e:72:1d:2d:6e:eb:26:16:ed:09:56:fe:
17:5f:33:df:2c:d8:1e:6e:ab:db:0a:10:4f:21:a2:05:dc:46:
a5:28:c1:1f:67:37:be:53:bf:d7:3f:41:95:2d:c5:35:14:62:
23:37:d7:7e:c9:e9:28:c4:59:7d:16:35:c5:10:74:1c:69:39:
f8:26:66:16:f9:fe:7a:30:05:79:63:fe:31:95:39:7e:c0:65:
aa:d5:9f:40:1e:03:17:cd:92:d6:6a:47:89:cf:e1:2b:e2:12:
4b:95:6a:85:9a:ad:7b:40:db:2b:28:21:9a:ec:72:47:01:7b:
a8:fe:63:c6:e0:bc:25:62:63:0e:95:04:26:a4:9b:00:0e:30:
1e:6b:5e:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:07 2026 by rpki-client