Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: wgzXboaPawxUzwYJ8G3ZlmoasoO6CkgtHGOZiNwgjXM=
Subject key identifier: ED:20:10:4B:51:EB:5E:1D:56:99:03:50:95:67:76:56:00:6F:A1:51
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 01A0C9D906216BE1A574F36AB94DC019DA8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 16D4
Signing time: Tue 22 Sep 2026 16:00:38 +0000
Manifest this update: Tue 22 Sep 2026 16:00:38 +0000
Manifest next update: Wed 23 Sep 2026 16:00:38 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: fjEz0c8a4dePXZNuvZDgPHWMBTevuGXu6ai3HjO8NiU=)
2: 3KIe1YS7QLLqz4eqT1TIg8Y0lHA.roa (hash: E01qUWDxs3w8/EkHXVeEMazo/S6sr6Nl2XEVde5Y+Qw=)
3: BmDJr6NVvMRZJfVxWJAT8OCM7fY.roa (hash: 5dcydJfHt2J/Yp4bz6hC2PeHwVc0JR/YkXEsIrJj0IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:06:21:6b:e1:a5:74:f3:6a:b9:4d:c0:19:da:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Sep 22 16:00:38 2026 GMT
Not After : Sep 23 16:00:38 2026 GMT
Subject: CN=ed20104b51eb5e1d5699035095677656006fa151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:04:e7:d4:c6:7a:56:6f:ff:df:63:fc:41:01:
28:fb:5b:7e:e7:4d:3f:56:ba:6b:cf:4f:af:aa:dc:
f9:51:8f:0d:f0:cf:52:59:db:1f:60:55:36:64:36:
a8:0d:e5:03:13:6d:9d:43:67:76:06:7b:a4:3f:1b:
49:7d:14:68:7e:7e:bb:67:06:6c:96:94:ea:1d:b0:
bb:38:25:74:1f:3d:1e:bf:6e:af:69:31:a9:cb:4d:
af:de:21:e3:26:96:3d:6d:f5:e0:e3:8a:24:0a:41:
b2:e1:59:4f:33:98:41:9c:f0:1b:19:f4:88:af:69:
fd:10:79:77:b6:c7:0f:f5:c8:96:9d:85:63:ab:0d:
9b:61:d6:e1:9a:bb:1b:31:22:42:7b:ca:26:cf:fc:
03:ec:82:3d:c6:89:41:19:8f:bf:d7:b5:5c:01:05:
36:95:f7:90:89:df:85:3d:14:b9:b6:43:cc:55:e6:
56:bd:14:f8:98:f4:d8:4a:20:4a:39:2f:e9:b6:fa:
5d:e9:5d:83:44:71:79:6c:fa:65:36:84:b2:c8:a9:
b8:81:32:c3:5c:72:32:f3:e4:d5:82:92:ee:a8:ee:
9c:28:e7:80:4c:23:e4:ab:a7:df:74:f0:75:44:b4:
42:72:98:8d:5e:2a:0b:ca:fe:6a:50:a6:6e:ff:24:
58:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:20:10:4B:51:EB:5E:1D:56:99:03:50:95:67:76:56:00:6F:A1:51
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:4a:60:d4:a0:a5:05:bf:3e:88:a3:f2:e8:96:85:ca:8c:63:
bc:74:50:a5:59:7a:77:87:f1:15:52:31:f0:b5:f1:34:61:c1:
78:f2:cf:6f:ca:c5:48:0f:45:dc:16:d4:21:b0:3d:31:7e:98:
cd:c3:dd:07:db:b0:9e:4a:93:b6:c0:67:f3:a8:b9:2b:5a:3e:
9c:27:b3:7f:6f:4c:87:09:c9:0b:a9:c4:bf:97:07:b7:cf:55:
dd:22:b2:45:67:c8:5c:6a:16:86:c3:54:4b:72:f8:24:35:f5:
12:e7:a2:e8:e6:fe:4a:4f:59:ab:e6:c3:53:1f:98:ca:9f:65:
07:02:28:1b:e0:dc:fe:5f:3e:f8:f1:e9:30:79:12:49:5c:3d:
18:e3:2f:8f:43:7d:75:31:09:1f:63:dc:58:2b:84:31:7b:2d:
f1:30:61:d4:76:22:b5:bf:55:95:e4:26:7d:48:bd:e8:86:3d:
5a:44:0d:f1:2a:56:59:69:66:fc:ec:b0:62:a4:b8:0b:95:98:
99:45:11:ba:c0:e6:49:3f:cc:45:d6:88:c8:27:ae:94:41:b2:
33:f2:ea:23:c5:48:f2:50:b8:54:47:06:fd:42:98:a5:75:a5:
70:83:53:72:41:8e:39:d2:16:76:56:27:3e:4c:be:da:5c:4b:
92:87:2a:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJ2QYha+GldPNquU3AGdqPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NWJhYjIwODY1M2Q0MjYxZWJmMjAyZjYwMzYzMzQxMTk4
NDYwNTUwHhcNMjYwOTIyMTYwMDM4WhcNMjYwOTIzMTYwMDM4WjAzMTEwLwYDVQQD
EyhlZDIwMTA0YjUxZWI1ZTFkNTY5OTAzNTA5NTY3NzY1NjAwNmZhMTUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQTn1MZ6Vm//32P8QQEo+1t+500/
Vrprz0+vqtz5UY8N8M9SWdsfYFU2ZDaoDeUDE22dQ2d2BnukPxtJfRRofn67ZwZs
lpTqHbC7OCV0Hz0ev26vaTGpy02v3iHjJpY9bfXg44okCkGy4VlPM5hBnPAbGfSI
r2n9EHl3tscP9ciWnYVjqw2bYdbhmrsbMSJCe8omz/wD7II9xolBGY+/17VcAQU2
lfeQid+FPRS5tkPMVeZWvRT4mPTYSiBKOS/ptvpd6V2DRHF5bPplNoSyyKm4gTLD
XHIy8+TVgpLuqO6cKOeATCPkq6ffdPB1RLRCcpiNXioLyv5qUKZu/yRYRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0gEEtR614dVpkDUJVndlYAb6FRMB8GA1UdIwQY
MBaAFNRbqyCGU9QmHr8gL2A2M0EZhGBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQt
MTI0ZDNmYjM5MDZhLzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQtMTI0ZDNmYjM5MDZh
LzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApEpg1KCl
Bb8+iKPy6JaFyoxjvHRQpVl6d4fxFVIx8LXxNGHBePLPb8rFSA9F3BbUIbA9MX6Y
zcPdB9uwnkqTtsBn86i5K1o+nCezf29MhwnJC6nEv5cHt89V3SKyRWfIXGoWhsNU
S3L4JDX1Euei6Ob+Sk9Zq+bDUx+Yyp9lBwIoG+Dc/l8++PHpMHkSSVw9GOMvj0N9
dTEJH2PcWCuEMXst8TBh1HYitb9VleQmfUi96IY9WkQN8SpWWWlm/OywYqS4C5WY
mUURusDmST/MRdaIyCeulEGyM/LqI8VI8lC4VEcG/UKYpXWlcINTckGOOdIWdlYn
Pky+2lxLkocqew==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:24:53 2026 by rpki-client