Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
File: 1KAH7S_gjUM-DwoC9DynrLJvWg4.mft (raw, json)
Hash identifier: 1Ous+qqKwAw4sudkIsClJSu0J5L1sgeH4ytDPlpqvtQ=
Subject key identifier: B6:98:CC:E6:C5:61:E5:EA:57:BE:D8:99:CA:D3:49:6C:A6:D1:AB:96
Authority key identifier: D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
Certificate issuer: /CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Certificate serial: 01A001387ECD848E2F1A57143DB21A107023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
Manifest number: 0844
Signing time: Fri 14 Aug 2026 17:01:14 +0000
Manifest this update: Fri 14 Aug 2026 17:01:14 +0000
Manifest next update: Sat 15 Aug 2026 17:01:14 +0000
Files and hashes: 1: 1KAH7S_gjUM-DwoC9DynrLJvWg4.crl (hash: XAE9UAO21d0wFtfs8+BIZJa3NfKMdvXs9Ok8YFkb6Pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:38:7e:cd:84:8e:2f:1a:57:14:3d:b2:1a:10:70:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a007ed2fe08d433e0f0a02f43ca7acb26f5a0e
Validity
Not Before: Aug 14 17:01:14 2026 GMT
Not After : Aug 15 17:01:14 2026 GMT
Subject: CN=b698cce6c561e5ea57bed899cad3496ca6d1ab96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:8c:1e:c4:df:f2:a1:b8:d6:f4:58:2b:44:24:
27:e4:d3:15:df:01:80:96:78:55:e5:74:a7:6e:62:
ab:78:99:47:5e:d4:a0:75:87:d1:dc:9e:80:2e:65:
10:98:c7:4b:ea:5d:3c:f2:03:15:37:e0:81:ff:0e:
91:fc:87:cf:86:74:f8:31:7c:cd:9a:96:eb:11:18:
e2:bd:96:f8:b8:0e:e9:01:59:b9:82:f7:4b:86:ff:
1f:68:3f:c8:f3:56:04:9f:cb:ea:59:16:85:41:d8:
c8:64:c4:8f:a5:8d:90:d4:21:f5:ff:7a:7c:84:97:
6c:eb:1f:5e:d4:76:3f:8c:60:de:d7:ca:99:df:9d:
65:67:30:10:f7:bb:c2:b2:b3:0e:9a:af:b1:17:8b:
e7:a2:e1:79:d6:34:1b:ed:85:c4:94:f9:79:84:19:
e9:17:c1:17:d2:83:0c:73:b7:70:6d:c2:9f:95:ab:
e6:29:6b:c7:49:9c:ad:1a:2c:98:5e:c2:46:7b:8b:
86:f9:c7:df:ba:54:ca:6b:5c:09:a0:2f:47:da:ba:
cf:21:31:46:96:e9:4d:46:48:19:bd:98:6c:3e:7a:
dd:39:56:33:c5:ce:5d:32:40:5d:5a:36:f9:28:97:
66:78:36:8f:6a:6d:7a:1c:cc:cb:cd:22:6e:71:5f:
1c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:98:CC:E6:C5:61:E5:EA:57:BE:D8:99:CA:D3:49:6C:A6:D1:AB:96
X509v3 Authority Key Identifier:
keyid:D4:A0:07:ED:2F:E0:8D:43:3E:0F:0A:02:F4:3C:A7:AC:B2:6F:5A:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KAH7S_gjUM-DwoC9DynrLJvWg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/86ceb8-4188-4b6c-8bd8-c2b81ce98c6d/1/1KAH7S_gjUM-DwoC9DynrLJvWg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:1b:5b:ca:58:0a:50:f2:84:74:9b:bd:05:a9:10:c5:c0:3c:
7f:e6:c1:f3:f6:90:c7:7b:94:a9:7f:8e:eb:5f:c7:2c:bc:e3:
0b:eb:df:f0:8c:74:44:44:b6:3e:c5:c9:03:4b:ca:da:2a:fc:
6f:8d:8d:33:8f:cb:1d:cb:0e:33:ba:96:8f:58:a7:ef:bc:4b:
c5:77:67:99:50:4e:01:ab:52:d5:de:39:a9:ac:db:c3:d3:21:
a4:5c:9c:25:8d:41:80:7a:fa:06:27:0f:d4:0a:93:d5:12:e6:
6d:f2:6a:ef:3f:80:fa:ff:fb:1f:d2:cc:15:35:9a:82:01:20:
7b:5c:12:1f:72:07:c8:f4:0b:8a:89:03:33:37:b7:b6:cc:39:
f7:1f:c3:c2:2e:8b:67:34:0a:7b:f1:d2:53:78:ab:04:af:b2:
7c:77:4e:14:6d:0e:29:5a:dd:eb:87:b4:93:00:26:5f:20:07:
c4:40:90:9c:f9:30:b0:c9:02:44:99:98:12:ea:31:f5:5e:06:
d5:3b:9c:8f:13:e0:9e:3a:ac:22:e8:bf:89:5f:3a:6e:5b:b0:
c6:84:a2:9f:57:d8:09:a0:42:4a:a4:0e:5a:65:e9:5f:1b:79:
01:bb:81:ff:ad:1d:df:b3:fa:60:24:07:cf:3a:94:3b:f9:8f:
46:4d:c5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:12:36 2026 by rpki-client