Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: k7DyJpksfwaFPg8wrBd+HNwGNHqlANkEuKtujuvmSD4=
Subject key identifier: 8C:4F:17:B4:FD:07:38:FA:1A:1D:17:21:3F:6F:B9:C9:4C:AC:A9:02
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 019D98F47FA3368F67640DC1CD4107B3F128
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 152D
Signing time: Fri 17 Apr 2026 01:00:53 +0000
Manifest this update: Fri 17 Apr 2026 01:00:53 +0000
Manifest next update: Sat 18 Apr 2026 01:00:53 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: ga9i+AxlKCy27KEPciWqJr1Nfj4oIvpDLzK61Kt3Yb8=)
2: 3KIe1YS7QLLqz4eqT1TIg8Y0lHA.roa (hash: E01qUWDxs3w8/EkHXVeEMazo/S6sr6Nl2XEVde5Y+Qw=)
3: BmDJr6NVvMRZJfVxWJAT8OCM7fY.roa (hash: 5dcydJfHt2J/Yp4bz6hC2PeHwVc0JR/YkXEsIrJj0IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:7f:a3:36:8f:67:64:0d:c1:cd:41:07:b3:f1:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Apr 17 01:00:53 2026 GMT
Not After : Apr 18 01:00:53 2026 GMT
Subject: CN=8c4f17b4fd0738fa1a1d17213f6fb9c94caca902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:60:6a:ca:7f:45:cc:43:96:0f:7e:54:1a:e5:
b8:6c:c2:7b:68:c3:9d:fa:40:9e:40:c3:ed:9c:58:
11:41:cc:66:f1:97:07:6a:5b:7b:09:1b:c5:c7:d1:
25:66:d6:8a:cb:d3:4c:a5:6d:7e:a6:87:2f:f5:ae:
a3:f6:34:13:8f:46:1a:14:70:42:69:35:b1:0b:9a:
36:a0:c4:5e:2a:85:dc:3e:9b:96:ea:9b:3e:91:33:
8c:6d:e2:80:94:24:95:b6:95:59:59:f1:b6:6e:a7:
46:35:3f:3f:d2:30:d1:f3:2a:9c:4f:6b:97:73:8d:
60:b4:b3:29:97:85:d5:9a:62:82:2a:d6:bc:b6:f3:
bc:e8:c2:6f:34:99:a6:2a:d5:62:18:3a:25:33:20:
85:c1:11:a0:93:20:33:0a:81:9c:9b:1a:0e:62:37:
f4:53:6b:88:d5:27:40:19:90:c9:59:32:e4:25:56:
75:7a:74:ca:7c:97:65:0e:ee:d9:de:5f:9e:d4:22:
ee:b9:5a:52:c9:d5:ba:1f:f1:40:f7:86:56:15:9b:
f3:ce:e6:13:aa:31:e0:33:26:a7:10:32:86:8b:1f:
30:91:5a:9f:d3:91:e1:d3:d2:06:d0:cf:26:fb:f4:
a6:98:f2:62:a3:ce:10:63:80:13:80:da:86:32:70:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4F:17:B4:FD:07:38:FA:1A:1D:17:21:3F:6F:B9:C9:4C:AC:A9:02
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7f:ef:b7:94:dc:9f:18:f8:81:2e:46:8d:1e:7a:af:05:62:
55:14:f9:2a:43:8a:45:1a:fb:d7:47:2a:ee:05:5e:4a:ec:69:
00:7d:5d:57:5b:5c:45:92:85:35:9b:04:94:a2:f4:a7:1f:e8:
1e:7c:cc:f9:21:e2:09:90:a3:b9:ab:e5:a2:8b:d7:66:9d:72:
8d:f8:47:0b:78:51:3a:96:75:23:a7:d0:3e:86:97:80:fb:b3:
f9:cc:a7:0f:0a:f9:eb:c4:77:36:8c:5c:82:8e:99:b6:c0:97:
89:b3:f0:73:24:76:3d:c2:77:ef:61:3f:17:02:be:d1:f3:12:
35:d8:b9:30:99:28:d8:be:b6:55:7a:4d:00:9a:a1:89:cb:56:
9c:23:43:0e:b7:9b:bd:59:6d:2d:5f:1e:d3:98:2d:db:0d:41:
76:ce:a1:94:01:29:82:a3:48:78:5a:73:8f:c4:99:18:a3:0e:
f6:bf:a5:60:2b:bb:47:41:e9:82:d6:a8:0a:dc:77:ad:78:23:
c2:3c:09:33:29:e8:62:51:c1:a5:34:6b:bb:16:62:38:f8:01:
fa:d0:21:a7:44:dc:14:85:ad:93:5e:96:04:26:83:52:f4:fb:
65:12:40:60:18:82:ba:88:10:7e:92:1f:31:7a:b9:43:d4:fd:
47:70:d5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:32 2026 by rpki-client