Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: aKg8bL+0kI9H/bEvRu618Hz1ClIZN3mXVEZhkFGtUjI=
Subject key identifier: D4:31:48:FC:99:76:3D:61:0B:47:E0:96:33:6F:32:7E:08:E5:C2:6A
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 019CAB6BF4654D143F5EF6F60D3CF8F63BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 14B2
Signing time: Sun 01 Mar 2026 22:01:44 +0000
Manifest this update: Sun 01 Mar 2026 22:01:44 +0000
Manifest next update: Mon 02 Mar 2026 22:01:44 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: pwZHwO9p30jZLN/I0ld9PvVOa/tsj7m+cO+4aoJR9vg=)
2: 3KIe1YS7QLLqz4eqT1TIg8Y0lHA.roa (hash: E01qUWDxs3w8/EkHXVeEMazo/S6sr6Nl2XEVde5Y+Qw=)
3: BmDJr6NVvMRZJfVxWJAT8OCM7fY.roa (hash: 5dcydJfHt2J/Yp4bz6hC2PeHwVc0JR/YkXEsIrJj0IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:f4:65:4d:14:3f:5e:f6:f6:0d:3c:f8:f6:3b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Mar 1 22:01:44 2026 GMT
Not After : Mar 2 22:01:44 2026 GMT
Subject: CN=d43148fc99763d610b47e096336f327e08e5c26a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a9:51:74:89:cc:50:8e:24:df:b3:38:a9:d1:
35:82:d9:d6:40:14:d5:2d:c3:6c:cb:5b:8c:f8:04:
08:5c:d3:d1:d4:df:78:df:6c:f1:8c:1d:a0:08:1b:
82:23:5a:78:de:11:16:85:3f:e6:d4:54:76:95:41:
3e:85:4f:79:c1:32:76:b8:65:7d:0f:ae:c7:a5:86:
c4:f2:16:1a:69:fb:5c:3a:ac:32:50:75:4e:15:5e:
82:6a:6a:d1:c1:f5:98:50:25:9d:3c:ac:dd:96:3e:
e7:de:24:e6:5e:c5:fe:53:50:41:75:a0:b3:e9:7b:
6c:ae:a4:4b:b8:6a:26:7a:1c:88:36:a9:75:c2:8a:
55:1f:d5:1a:00:11:b4:20:e9:40:ee:af:46:73:bd:
47:95:1e:1c:a8:3b:19:9f:32:5a:88:15:ff:5f:4a:
87:6b:84:3d:9d:11:b5:34:99:5d:69:f4:07:8f:22:
28:9c:3d:5d:2a:2b:f0:7f:b6:0b:a2:e8:5b:33:0a:
56:cd:59:78:cd:63:9b:a9:d5:32:11:8d:de:17:c6:
c8:8e:f6:32:47:45:30:5b:51:0f:f8:a2:cd:bf:2f:
b7:8b:cf:5a:e2:25:c3:c8:66:06:4c:ec:f2:be:ba:
61:db:19:4a:cd:76:bb:2a:00:91:43:b5:5e:87:1f:
f9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:31:48:FC:99:76:3D:61:0B:47:E0:96:33:6F:32:7E:08:E5:C2:6A
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:80:0b:b7:bf:90:c9:c4:1f:c3:27:bd:aa:45:05:ea:ca:40:
f5:7b:a3:7c:aa:95:46:4f:e1:0a:03:e7:5d:0d:28:9c:c6:06:
c3:90:0d:86:ef:bb:26:20:fa:cb:5b:52:b0:15:87:7b:4f:b1:
9c:d7:4c:23:82:9d:f4:1f:83:88:89:31:04:62:7e:ce:8b:c8:
ad:f2:4a:68:d6:0b:8d:2f:06:fd:6a:2d:ac:70:56:15:99:46:
d4:0c:9a:7b:48:e4:d7:ee:f0:c5:b6:8b:29:4f:12:16:d0:28:
b7:83:3d:6b:44:c3:bc:90:0b:a8:08:4a:82:40:d2:5d:09:ea:
da:3b:5a:2b:f3:4c:21:8a:b4:bb:26:b1:c2:fe:5a:44:9f:f1:
b8:cd:82:4a:79:44:ce:86:0e:06:82:b4:6e:82:a2:c4:ef:c9:
68:71:6d:5a:8f:f0:3c:75:dd:17:98:06:b4:d9:57:a7:79:74:
d1:95:33:14:ef:ae:cd:14:62:fb:ef:21:29:34:f2:d4:e1:32:
0d:46:5e:db:ff:ab:a0:39:dc:90:de:8a:0a:e1:32:13:39:58:
e5:e4:c3:f5:14:18:b0:c3:6f:fa:17:00:6e:a5:a4:cf:22:07:
c2:7e:e6:ea:06:ef:8b:9d:e8:0a:10:89:a6:d2:39:3e:8f:65:
96:32:3e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:36:58 2026 by rpki-client