Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
File: 1-kak8RQ6vjrfxLaDX6E0498srDQ.mft (raw, json)
Hash identifier: RB4Dhm8Dk+8Y0mypZcYV6cvkgcEAfW4NWrBzsuCmXaY=
Subject key identifier: 70:EC:4B:A0:2D:EC:9B:E9:62:EE:CB:F1:9D:D3:C8:8B:C5:69:00:8E
Authority key identifier: FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
Certificate issuer: /CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Certificate serial: 01A13E26996A97B3A337549214A836711A38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
Manifest number: 1AA5
Signing time: Thu 15 Oct 2026 06:01:19 +0000
Manifest this update: Thu 15 Oct 2026 06:01:19 +0000
Manifest next update: Fri 16 Oct 2026 06:01:19 +0000
Files and hashes: 1: 1-kak8RQ6vjrfxLaDX6E0498srDQ.crl (hash: z/Wq1hNQOVUwo9NOHXTjayyXg/8QwxhD8TqcxCSoCwg=)
2: EwSHe_xf-jqepkCFLSHCwEgr_AI.roa (hash: RC+AV7VwTqdY5tCu6Twk85UOef4oSKz04Y5st23WBE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:26:99:6a:97:b3:a3:37:54:92:14:a8:36:71:1a:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa46a4f1143abe3adfc4b6835fa134e3df2cac34
Validity
Not Before: Oct 15 06:01:19 2026 GMT
Not After : Oct 16 06:01:19 2026 GMT
Subject: CN=70ec4ba02dec9be962eecbf19dd3c88bc569008e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:40:46:4d:bf:d4:97:5c:f1:f4:b9:3d:e1:ae:
70:bd:35:7d:1a:da:b1:3a:47:3a:75:a3:aa:57:82:
72:f7:83:11:0f:04:8a:20:81:96:1f:ef:d1:54:26:
af:23:f8:94:0e:f8:8f:a8:7a:f8:a0:47:42:e0:67:
cb:4a:39:9c:98:62:9a:d1:d7:e9:6a:06:87:ee:fc:
30:7e:d7:fd:90:42:79:e4:41:9e:34:bb:ee:80:df:
de:f6:b3:c8:c7:65:20:34:60:a0:ae:e0:b1:17:ce:
b0:90:8d:d0:44:88:64:75:3e:2e:86:73:15:6c:a5:
f7:f9:17:fa:85:51:d4:36:d2:05:c1:32:b9:48:22:
8c:a3:3d:e1:45:09:09:14:65:b6:98:43:9b:b0:2d:
1d:39:54:4b:72:66:b9:6a:24:a7:e0:57:87:4e:10:
83:3c:de:41:81:f7:ed:b3:ca:2f:dd:ad:7a:85:b7:
7f:66:ef:eb:dc:3c:6c:5e:0a:df:84:39:97:ca:93:
6e:4c:fc:fd:32:31:de:b0:11:b5:39:13:a0:9d:3c:
6d:a1:e9:a9:17:91:ce:75:5c:f0:ed:80:a3:c0:84:
be:84:27:43:f6:24:92:51:57:b2:37:6d:5c:e1:b6:
82:91:ca:0c:95:3d:e8:34:5e:27:68:da:c5:7f:07:
6a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EC:4B:A0:2D:EC:9B:E9:62:EE:CB:F1:9D:D3:C8:8B:C5:69:00:8E
X509v3 Authority Key Identifier:
keyid:FA:46:A4:F1:14:3A:BE:3A:DF:C4:B6:83:5F:A1:34:E3:DF:2C:AC:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kak8RQ6vjrfxLaDX6E0498srDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/f3a79d-38cf-4905-ab5f-5bca45efde8c/1/1-kak8RQ6vjrfxLaDX6E0498srDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:38:70:17:d1:6a:52:2f:59:71:43:83:ea:ce:c1:3b:80:42:
eb:bd:17:97:99:fb:18:27:b4:4e:0f:7b:2f:68:74:9f:11:65:
15:10:a0:07:be:cf:fa:46:c9:ab:06:c5:96:5e:0a:ce:69:f2:
4a:d8:98:13:0b:49:82:a1:2b:8c:53:f5:07:7e:d3:f9:5a:0c:
46:97:31:18:aa:c4:3e:93:97:fd:0c:a8:1f:b1:d0:91:56:3c:
7f:ca:9a:8f:69:c7:64:3c:cb:de:12:97:3c:f1:87:42:6b:71:
33:7f:cf:a3:5d:49:bf:dc:41:67:92:38:b3:ac:36:22:79:4a:
52:28:a5:01:c2:85:e0:d7:9f:3c:61:8c:14:e7:b7:7a:99:35:
4a:4d:ba:c8:a7:c6:1d:85:44:79:cd:9f:61:ec:b0:d2:43:1c:
ca:2a:f7:d1:eb:26:4f:2a:bd:25:c0:49:c8:fe:69:fa:f8:bb:
a1:3a:ca:57:c9:b6:8c:63:b1:2d:52:99:25:83:10:b0:0c:c2:
79:c9:25:98:97:23:66:30:4d:76:fa:e1:fd:a2:3d:ca:65:b6:
2d:c2:ae:14:4a:2d:66:95:ef:1c:31:a6:e7:2f:c7:09:14:48:
cb:c9:14:ed:a9:de:8f:b5:84:2e:27:00:31:09:81:16:86:d7:
9d:14:15:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 10:33:41 2026 by rpki-client