Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
File: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft (raw, json)
Hash identifier: McsMQojjuKcjVaLp5Y00NPzjigH64PbIfm7RaGNnot4=
Subject key identifier: F0:C7:7E:56:26:E1:14:BE:1A:31:92:9E:D5:9A:27:58:6C:0F:28:89
Authority key identifier: FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
Certificate issuer: /CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Certificate serial: 019E29CC1AD7CF5F76CCB9CB8A45D4BB86CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
Manifest number: 0116
Signing time: Fri 15 May 2026 04:01:42 +0000
Manifest this update: Fri 15 May 2026 04:01:42 +0000
Manifest next update: Sat 16 May 2026 04:01:42 +0000
Files and hashes: 1: 1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl (hash: UuYStfI64p4moRdpXVIi9Z1ko+SZWNwLuFfOscVUKUI=)
2: GeZC1hcbpJu21FuvM78X-6jBsEE.asa (hash: /sd8wtX0Lk11Ts9xSoJhwy+7LHXvIREISLh/WsrJ9vU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cc:1a:d7:cf:5f:76:cc:b9:cb:8a:45:d4:bb:86:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4655aa29cb4c83947f5fa6c68f04c2390b5122
Validity
Not Before: May 15 04:01:42 2026 GMT
Not After : May 16 04:01:42 2026 GMT
Subject: CN=f0c77e5626e114be1a31929ed59a27586c0f2889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6b:45:86:a0:31:01:5a:38:cc:76:f1:b9:db:
f5:0a:4b:ca:ea:79:8d:85:29:e3:e6:1b:44:7a:96:
5e:34:70:30:10:26:8e:5b:e5:3b:b2:1c:e2:a1:0d:
4c:2e:4a:5f:2f:a3:41:af:5d:ae:16:4f:9b:49:dc:
b4:5f:a4:ad:14:c0:45:e2:1c:71:67:93:7b:5d:65:
b9:84:e3:99:1b:17:f4:85:20:d0:9d:73:14:c1:31:
dc:0b:5a:4a:38:72:70:fa:ec:72:3c:8d:28:f4:56:
ef:73:cf:6a:b7:5e:b4:47:fb:c3:9d:78:20:0d:94:
c8:af:d6:4d:ec:32:bd:e6:9a:59:3d:a7:6a:f8:75:
be:48:3b:85:c6:db:66:73:30:ae:5d:31:84:bb:17:
f7:60:f7:10:f5:87:03:3f:cf:2a:37:b0:59:e7:cb:
55:b5:73:ef:32:eb:6d:4e:b9:55:02:78:06:60:fc:
c4:6f:27:bc:0b:39:f0:bf:bf:71:b9:44:7a:2f:62:
19:8d:6d:14:e3:23:8a:62:13:7a:cc:31:42:a3:bf:
e5:d6:e6:ca:50:98:ff:20:82:9c:0e:6f:21:b2:72:
4a:1f:4c:b7:d3:ed:03:b1:13:1b:a6:98:52:48:76:
f3:12:e4:3d:2d:ff:ea:4d:54:f8:0d:e1:05:47:cd:
ca:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:C7:7E:56:26:E1:14:BE:1A:31:92:9E:D5:9A:27:58:6C:0F:28:89
X509v3 Authority Key Identifier:
keyid:FA:46:55:AA:29:CB:4C:83:94:7F:5F:A6:C6:8F:04:C2:39:0B:51:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kZVqinLTIOUf1-mxo8EwjkLUSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f49d84-4a1c-40fd-baa6-c8615a540cdd/1/1-kZVqinLTIOUf1-mxo8EwjkLUSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:02:2b:4d:3f:9a:2e:5e:2d:88:d6:b4:df:67:c0:97:2b:9e:
6c:2d:05:c4:16:5d:b3:8e:c6:58:2d:8a:ab:0c:f8:30:a8:26:
b7:fb:3e:72:77:34:3b:51:1f:2f:27:8b:1d:33:e4:77:e6:43:
26:67:c2:f4:2b:26:5b:ee:a1:5f:3d:81:fd:67:1d:8a:36:1a:
1b:ac:b4:3a:ad:f0:9e:f3:71:f8:83:46:a6:19:31:0e:a4:22:
ee:cb:e4:26:9e:3f:25:9d:dd:45:a5:f3:08:f3:b4:15:15:26:
28:10:3d:2d:c8:92:f7:6e:11:dd:2e:0c:a2:8d:aa:bc:91:61:
fb:bc:06:36:aa:ff:37:c1:e5:7a:7c:01:3b:a2:9d:9b:8b:c6:
4a:1c:47:00:b3:18:c7:37:e9:bd:d7:cf:ff:1a:c1:0b:f7:91:
e3:61:39:97:33:e7:39:7f:1b:60:97:12:db:52:91:c1:5d:83:
33:81:3e:5e:b9:24:c8:04:ee:6c:55:15:fa:77:f9:d4:bd:a4:
c9:70:16:be:6a:27:32:d6:72:6d:c3:b1:85:80:31:1d:b1:64:
e8:5a:a9:e6:d6:e5:7e:57:a3:18:45:4d:e3:bf:ee:c5:0f:4b:
d8:79:e1:93:1c:e4:7b:fd:46:f4:4d:fa:75:5c:9e:cf:32:b0:
a8:27:bf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:16:41 2026 by rpki-client