Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.mft
File: 1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.mft (raw, json)
Hash identifier: 6RPNwCTPbrZr55YK3OYPBj5S1xC/xQkyBFjYLF84Hd8=
Subject key identifier: 18:8C:E8:D2:DE:5E:AA:65:AD:CC:14:D3:7A:0A:72:F2:0B:64:EF:58
Authority key identifier: FA:42:52:A4:A7:E7:F3:2F:6E:CE:CD:A9:99:92:AA:A8:22:1D:4E:74
Certificate issuer: /CN=fa4252a4a7e7f32f6ececda99992aaa8221d4e74
Certificate serial: 01A0412AB69195D1493BFF99B0CBF52E8CDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.mft
Manifest number: 9B
Signing time: Thu 27 Aug 2026 03:01:53 +0000
Manifest this update: Thu 27 Aug 2026 03:01:53 +0000
Manifest next update: Fri 28 Aug 2026 03:01:53 +0000
Files and hashes: 1: 1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.crl (hash: VuABXEf1AGdwG85/k9swQB14z5Wp0MnML1XqATsg0T8=)
2: I1oytQ2dC0mrTslmK3apIAP5fOQ.roa (hash: WdWnYz2nz10WKmvWBQa7iutQJAl62MS58LqLaXRVCgI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:2a:b6:91:95:d1:49:3b:ff:99:b0:cb:f5:2e:8c:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa4252a4a7e7f32f6ececda99992aaa8221d4e74
Validity
Not Before: Aug 27 03:01:53 2026 GMT
Not After : Aug 28 03:01:53 2026 GMT
Subject: CN=188ce8d2de5eaa65adcc14d37a0a72f20b64ef58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:0c:5e:7f:55:1d:96:13:dd:48:e8:38:25:
02:99:29:01:97:5a:3d:49:eb:93:4a:fc:d9:f3:86:
c3:a3:fd:00:d9:a7:f8:7d:23:92:07:c1:ac:60:a3:
99:7b:33:5f:d8:ac:d9:22:2a:76:7b:93:8e:fb:46:
6b:13:82:ee:b8:f9:c2:4c:42:3d:a8:a4:0b:43:34:
54:48:b9:39:0a:9a:db:a6:64:9e:1c:69:51:ac:bc:
e6:cc:b5:a8:dd:b5:85:68:40:13:b7:b0:6f:69:f6:
b5:8d:61:84:ed:13:b4:c5:fe:89:3f:41:cc:7c:82:
69:7b:aa:d6:66:5a:00:53:a2:73:5a:44:34:5a:4a:
98:87:7d:e8:07:a1:cc:d7:39:46:25:82:68:78:08:
1e:a5:a2:17:06:dc:b8:0e:8b:37:4f:0a:d5:bf:8f:
c1:6f:fa:bf:58:cc:8f:9f:c2:ab:ab:f0:c6:e2:2b:
29:eb:80:12:ac:e3:37:bf:96:f3:c2:a4:1e:58:1e:
f1:e3:56:13:08:aa:d0:e5:21:35:de:04:8b:a0:01:
8d:8a:d9:a2:95:45:f6:f8:25:df:81:b3:a7:62:a4:
3c:1e:98:ff:83:72:65:b9:a9:c4:39:e3:b0:0f:42:
de:4f:14:49:49:ca:ae:df:da:b9:0e:99:2d:a8:b6:
5b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8C:E8:D2:DE:5E:AA:65:AD:CC:14:D3:7A:0A:72:F2:0B:64:EF:58
X509v3 Authority Key Identifier:
keyid:FA:42:52:A4:A7:E7:F3:2F:6E:CE:CD:A9:99:92:AA:A8:22:1D:4E:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/44c42c-1e68-4aab-839d-9593e3a43725/1/1-kJSpKfn8y9uzs2pmZKqqCIdTnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e4:97:39:1b:8c:a9:e5:89:0d:8b:f9:02:5c:ac:17:3c:ce:
31:89:f0:6f:d1:c5:71:fb:8f:20:1d:6f:99:31:19:b2:e7:d1:
03:4a:39:04:9b:42:7a:1b:92:aa:03:23:de:53:31:22:24:92:
ac:6a:65:fe:f1:86:37:ea:e4:a3:a6:41:eb:09:46:ce:25:e9:
76:56:0f:41:66:14:59:ab:c6:f0:12:84:07:c4:28:8b:98:72:
a1:e9:bf:d8:23:db:a6:e4:6c:d0:83:29:19:3d:63:0b:a1:4d:
0b:06:ca:81:b5:4d:d6:33:51:16:99:9f:d9:e6:68:ee:eb:3f:
e7:4f:55:cd:c7:65:2f:57:5f:0f:d7:e1:24:1d:ec:32:04:8c:
61:31:23:43:c6:6e:20:10:1f:fa:a6:e8:ab:c9:7d:cc:d5:cd:
95:87:61:ff:5d:c0:a5:0a:bc:76:23:22:fe:89:7e:43:80:7c:
0f:46:1d:f3:23:a6:04:53:2b:39:c2:39:55:cf:85:ce:d5:cc:
91:3c:b0:51:8a:8c:9f:4f:cc:73:63:99:e9:94:41:dd:99:76:
f8:19:f9:1e:e7:4a:7c:5e:0a:cf:65:4c:42:d7:d9:f2:ff:19:
4e:cb:ad:77:04:8a:05:dc:34:1e:52:f0:54:c3:81:58:d9:9e:
0f:96:f3:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:48:14 2026 by rpki-client