Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: lNfjH7G+8zNWHZnONMf04sHiCe+s4dLhx/lIorON1sk=
Subject key identifier: 91:CE:E2:DF:41:F7:2F:A8:8B:31:28:FE:2E:B7:42:8E:2E:D4:16:98
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 019EBE7F9AE09D7E606687F5B7B1B9D9773B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 15C5
Signing time: Sat 13 Jun 2026 01:01:34 +0000
Manifest this update: Sat 13 Jun 2026 01:01:34 +0000
Manifest next update: Sun 14 Jun 2026 01:01:34 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: TFqI266hv66jo6/C/zc7Lt3wsHs8BSJsFn1MEnDq0BA=)
2: 3KIe1YS7QLLqz4eqT1TIg8Y0lHA.roa (hash: E01qUWDxs3w8/EkHXVeEMazo/S6sr6Nl2XEVde5Y+Qw=)
3: BmDJr6NVvMRZJfVxWJAT8OCM7fY.roa (hash: 5dcydJfHt2J/Yp4bz6hC2PeHwVc0JR/YkXEsIrJj0IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:7f:9a:e0:9d:7e:60:66:87:f5:b7:b1:b9:d9:77:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Jun 13 01:01:34 2026 GMT
Not After : Jun 14 01:01:34 2026 GMT
Subject: CN=91cee2df41f72fa88b3128fe2eb7428e2ed41698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:d6:0b:34:ac:53:60:1a:9d:7b:8f:0e:5f:df:
e3:5f:45:29:e5:63:7a:b1:b3:23:4f:67:b3:c4:b8:
d2:95:9f:52:13:62:c9:1e:58:3c:97:a6:67:eb:9a:
6e:51:cc:d2:a4:85:f9:57:40:32:b0:4c:2f:c2:a4:
76:63:4a:d9:49:a1:16:81:cf:8a:6b:5a:f1:65:76:
ae:c6:da:0b:83:4c:9e:c8:31:23:39:c5:27:94:22:
8f:ae:c9:f5:f9:12:b4:0b:62:12:02:dd:26:40:68:
bf:09:d0:fe:77:7a:d2:b7:f8:34:b0:ed:97:f7:56:
2c:31:74:8b:b9:f8:d6:92:e9:a3:0d:73:6f:4b:56:
d8:77:3a:b2:49:30:28:1d:f0:98:68:19:93:c2:7c:
02:f1:d1:61:21:64:93:1a:ee:97:b6:36:bf:0c:fc:
c4:43:09:e6:3e:2d:61:c3:25:75:0a:c7:e3:cf:b7:
c6:4b:f9:5d:c7:90:7a:75:56:e5:3d:26:83:d1:2a:
fe:7f:8a:6b:36:5b:a6:ce:93:35:b9:d1:9c:27:4f:
00:06:33:91:3a:4c:7d:0e:19:10:7d:55:44:d0:47:
f4:13:dd:60:d6:f8:53:51:45:85:50:38:d2:60:4b:
d2:dc:99:a4:42:e2:10:9d:7d:d7:25:d0:51:30:df:
6f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CE:E2:DF:41:F7:2F:A8:8B:31:28:FE:2E:B7:42:8E:2E:D4:16:98
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:93:97:44:8c:d7:6b:c8:e4:9c:f1:b1:22:fd:b1:f7:19:22:
0a:0c:95:17:89:43:1e:bf:a2:01:9a:64:a4:f7:dc:b3:35:cf:
f9:48:6c:71:80:40:1d:31:e3:05:f4:ad:5d:94:87:95:59:f3:
d0:f2:c8:b1:25:85:63:66:b5:54:ee:fe:ab:a5:7b:99:64:91:
19:20:7a:2f:b0:7a:0a:23:9f:ad:be:75:e0:98:55:17:6d:ff:
81:dc:94:a8:99:c3:54:c9:86:07:32:27:a1:9a:65:9e:2c:6d:
5a:0f:7b:0f:d2:6b:ad:92:88:24:d5:5c:01:d3:e5:56:be:7c:
bb:96:28:3f:35:d9:7b:59:42:e3:c3:25:cd:74:59:b3:6e:ba:
45:d8:55:b4:29:36:40:22:85:9b:28:8f:41:e8:ee:0d:26:9f:
71:6b:5f:e3:15:4a:f2:8a:ea:8f:e1:18:1d:c4:fa:ba:80:f8:
f8:78:6a:fa:d3:05:60:f3:74:fe:f8:16:fc:a5:1c:18:c8:cd:
3a:e5:50:00:fb:a6:c7:2a:08:02:d5:aa:42:fd:be:10:4a:ec:
82:15:c1:24:d2:49:1e:dd:f3:51:4d:7c:74:0c:4c:44:1a:b9:
3b:a1:86:8d:fd:0f:bb:82:09:ca:cd:98:93:eb:62:7a:b6:e2:
20:96:ae:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6+f5rgnX5gZof1t7G52Xc7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NWJhYjIwODY1M2Q0MjYxZWJmMjAyZjYwMzYzMzQxMTk4
NDYwNTUwHhcNMjYwNjEzMDEwMTM0WhcNMjYwNjE0MDEwMTM0WjAzMTEwLwYDVQQD
Eyg5MWNlZTJkZjQxZjcyZmE4OGIzMTI4ZmUyZWI3NDI4ZTJlZDQxNjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9YLNKxTYBqde48OX9/jX0Up5WN6
sbMjT2ezxLjSlZ9SE2LJHlg8l6Zn65puUczSpIX5V0AysEwvwqR2Y0rZSaEWgc+K
a1rxZXauxtoLg0yeyDEjOcUnlCKPrsn1+RK0C2ISAt0mQGi/CdD+d3rSt/g0sO2X
91YsMXSLufjWkumjDXNvS1bYdzqySTAoHfCYaBmTwnwC8dFhIWSTGu6Xtja/DPzE
QwnmPi1hwyV1Csfjz7fGS/ldx5B6dVblPSaD0Sr+f4prNlumzpM1udGcJ08ABjOR
Okx9DhkQfVVE0Ef0E91g1vhTUUWFUDjSYEvS3JmkQuIQnX3XJdBRMN9vNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJHO4t9B9y+oizEo/i63Qo4u1BaYMB8GA1UdIwQY
MBaAFNRbqyCGU9QmHr8gL2A2M0EZhGBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQt
MTI0ZDNmYjM5MDZhLzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQtMTI0ZDNmYjM5MDZh
LzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGpOXRIzX
a8jknPGxIv2x9xkiCgyVF4lDHr+iAZpkpPfcszXP+UhscYBAHTHjBfStXZSHlVnz
0PLIsSWFY2a1VO7+q6V7mWSRGSB6L7B6CiOfrb514JhVF23/gdyUqJnDVMmGBzIn
oZplnixtWg97D9JrrZKIJNVcAdPlVr58u5YoPzXZe1lC48MlzXRZs266RdhVtCk2
QCKFmyiPQejuDSafcWtf4xVK8orqj+EYHcT6uoD4+Hhq+tMFYPN0/vgW/KUcGMjN
OuVQAPumxyoIAtWqQv2+EErsghXBJNJJHt3zUU18dAxMRBq5O6GGjf0Pu4IJys2Y
k+tierbiIJauag==
-----END CERTIFICATE-----
Generated at Sat Jun 13 08:11:18 2026 by rpki-client