Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
File: 1KAH7S_gjUM-DwoC9DynrLJvWg4.mft (raw, json)
Hash identifier: vGGE3QNxM+LcSlx9UKn7O5N1zCEN60WnZFpwaXhFetk=
Subject key identifier: DD:09:22:85:C8:42:0D:3D:ED:CF:07:2F:82:CC:92:83:67:32:5A:0A
Authority key identifier: D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
Certificate issuer: /CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Certificate serial: 01A13DEF52D7400F7CD69BB6B5B0A3C0CA12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
Manifest number: 08E8
Signing time: Thu 15 Oct 2026 05:00:56 +0000
Manifest this update: Thu 15 Oct 2026 05:00:56 +0000
Manifest next update: Fri 16 Oct 2026 05:00:56 +0000
Files and hashes: 1: 1KAH7S_gjUM-DwoC9DynrLJvWg4.crl (hash: RBsiTgtnFjATmDz89ge3BUs3eAbiKV5ojKFrXe0JLQs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:ef:52:d7:40:0f:7c:d6:9b:b6:b5:b0:a3:c0:ca:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Validity
Not Before: Oct 15 05:00:56 2026 GMT
Not After : Oct 16 05:00:56 2026 GMT
Subject: CN=dd092285c8420d3dedcf072f82cc928367325a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ff:81:fd:18:70:e8:5c:4c:0e:d6:05:27:f4:
f5:f0:17:9b:2c:16:5f:f9:53:ab:49:fe:b8:98:bc:
bc:72:e1:d6:e2:79:bf:1c:c3:6f:97:e8:7f:0c:3f:
d4:d5:8b:da:e3:66:c4:f9:be:a2:53:43:c7:e1:8f:
ba:1d:07:17:cc:9f:26:71:b6:3f:45:37:23:7f:8f:
cf:f2:b6:ec:28:b9:33:68:3e:10:e2:d8:58:3f:68:
2e:61:05:4a:f1:a5:1e:57:d9:de:04:35:b2:03:65:
f2:23:fa:0b:ed:d6:c2:ad:8e:f8:26:6f:f4:01:67:
b7:6e:79:8f:30:7b:c9:75:86:69:d8:4a:aa:80:08:
38:37:71:4b:df:8a:89:d3:4e:48:56:0b:9a:cd:e8:
80:b4:86:da:20:c7:7f:48:37:84:71:eb:47:7b:0f:
30:75:36:de:58:51:0e:9d:e0:a9:e6:16:84:0b:cb:
6d:af:f3:31:7a:05:e6:e7:b4:89:c6:8a:8c:67:b8:
62:bb:97:5e:3d:b5:6c:9a:b0:09:17:f7:2b:b9:50:
30:3f:18:1d:dd:9e:fe:df:8c:a9:70:4d:1a:72:6a:
cd:4e:bc:81:e8:66:9a:b4:26:b3:1e:32:fa:fd:84:
75:4c:a6:45:a8:1f:c4:a3:79:71:34:da:12:38:9a:
05:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:09:22:85:C8:42:0D:3D:ED:CF:07:2F:82:CC:92:83:67:32:5A:0A
X509v3 Authority Key Identifier:
keyid:D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:9f:54:1a:03:08:34:db:6b:4f:36:0a:84:a4:dc:8b:7e:f4:
27:33:04:10:8a:f4:e6:58:98:da:13:7e:59:53:90:d4:15:51:
5d:15:86:2a:9f:d0:ee:40:b3:61:59:93:7a:6b:f0:8b:5f:32:
41:0b:03:57:1e:38:9a:fe:1b:31:0d:3d:4e:49:72:dc:de:bb:
f4:b6:63:81:79:9d:16:59:f6:a8:8c:14:de:cd:37:d6:68:eb:
7f:ec:02:60:84:d0:2b:65:a1:15:3e:b2:e6:5f:61:7c:54:6d:
8b:90:c5:a9:5b:02:9c:9d:dc:32:28:de:ac:f4:0e:67:a9:df:
a4:8e:b8:f3:3a:1d:a3:55:46:fc:b5:47:18:cb:e5:af:20:20:
75:7f:c4:7a:84:75:ad:3f:fc:6c:ec:94:74:cd:b7:46:92:d1:
95:34:ed:14:b1:46:43:eb:98:ae:dd:f0:05:bb:37:a4:01:60:
04:ab:55:32:cf:98:ae:75:19:a4:70:59:2a:ce:30:0b:70:a2:
ea:d2:78:98:ee:dd:35:8b:73:d7:d2:a7:57:75:64:72:a2:1c:
07:02:7e:02:e0:a7:6f:f4:26:0d:c6:26:83:40:6d:ae:e4:0c:
b0:b0:43:9b:23:37:d3:73:fd:94:27:a1:6d:98:3e:6f:70:76:
2e:8c:b1:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:20:22 2026 by rpki-client