Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json)
Hash identifier: BGYQ/YNnpHiIwoTotTTDnjo7iXjIVx2hGmbiQiIN4+Q=
Subject key identifier: F4:B8:DB:25:62:24:39:C4:C1:0E:32:DF:19:6C:50:6F:38:1B:9C:93
Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
Certificate issuer: /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Certificate serial: 019D9B8764A5020A14619FD12245EB120E58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
Manifest number: 0378
Signing time: Fri 17 Apr 2026 13:00:34 +0000
Manifest this update: Fri 17 Apr 2026 13:00:34 +0000
Manifest next update: Sat 18 Apr 2026 13:00:34 +0000
Files and hashes: 1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: ma9RHPnwDIvlr/s5VS6D84yu4xeHXNIjDW0vcNGKqP0=)
2: _9jmpjcQFwSsKwZDpKMfAdoAfAc.roa (hash: 6IYluVGKVckZ7UbNb6EnuuXW6bdpQGvWpLycJHrQ2uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:64:a5:02:0a:14:61:9f:d1:22:45:eb:12:0e:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Validity
Not Before: Apr 17 13:00:34 2026 GMT
Not After : Apr 18 13:00:34 2026 GMT
Subject: CN=f4b8db25622439c4c10e32df196c506f381b9c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:7e:85:3f:10:18:dd:09:81:18:4a:71:1d:bb:
c1:fb:2f:d2:a9:51:6a:db:b4:07:33:c8:d9:e1:aa:
ef:5e:74:d5:15:d8:ff:6d:ea:b7:44:4d:59:d2:c1:
6b:a4:ac:a4:40:33:34:c2:5a:53:e8:9b:2d:86:df:
b4:8c:72:c7:f9:19:2a:2d:29:60:3d:83:6c:99:ac:
d6:a1:69:f8:fd:5c:c0:99:36:05:84:79:dc:38:b5:
a7:ca:36:b1:eb:47:8b:52:89:5c:0a:d3:f7:3e:e8:
93:7f:c0:47:44:cc:0f:38:dc:e2:2c:9c:ae:99:85:
02:99:1e:73:8a:cb:ba:a9:26:e9:10:86:23:5f:f0:
cb:ca:72:32:a1:51:bc:40:f9:d7:57:12:99:62:f0:
a9:3f:cc:5f:ca:29:1f:60:b2:de:c0:e7:f7:21:83:
86:cb:99:fa:97:4b:e6:35:06:ef:63:a7:02:8a:4c:
d2:5b:09:c7:21:5c:02:60:a8:40:40:4a:ba:e5:4a:
d0:01:b4:c4:d7:7a:f2:0c:d7:47:bb:65:24:3c:44:
2d:6f:e0:7f:2f:a0:5b:dc:fd:bd:31:06:90:af:39:
0b:e6:dd:e1:21:2f:0f:55:5a:61:06:f1:cd:71:1e:
d4:7d:4f:ba:7e:5e:dd:03:9e:2c:02:b7:d4:e3:52:
e4:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B8:DB:25:62:24:39:C4:C1:0E:32:DF:19:6C:50:6F:38:1B:9C:93
X509v3 Authority Key Identifier:
keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:72:b2:23:98:a9:8e:09:d4:b6:3d:c7:ff:4c:46:40:8f:af:
7a:3f:cd:63:9b:ce:20:b9:e4:41:a2:1c:49:24:64:b7:cc:4c:
40:9c:32:d1:73:fb:ae:68:02:a9:12:5f:a4:07:5b:09:f2:cd:
6d:42:5c:ea:cd:ce:d9:a0:c6:77:ac:b9:c2:7a:22:8f:87:e5:
6b:7d:84:04:ce:bf:6b:f2:42:ce:87:08:58:68:40:2f:db:3f:
47:29:9b:a2:a9:a6:4d:28:db:5f:80:eb:4f:f4:da:6c:4c:22:
74:f8:c2:55:48:fe:53:31:97:39:ab:a8:fd:0d:86:db:2b:35:
42:e3:94:88:f5:ae:c1:41:a7:86:20:e7:9c:81:e5:b4:38:6e:
77:ab:19:ab:9f:a8:6e:28:9b:4c:a8:85:75:9d:c4:7b:d5:f7:
5d:ad:70:d8:8d:a7:ea:e8:b7:e7:28:cf:79:0b:ab:90:41:6f:
4e:89:19:86:e3:19:de:9c:c2:bd:b0:91:46:c7:81:93:fc:3d:
7a:e1:c0:af:c0:e1:8d:3b:b6:af:43:67:bd:97:69:f7:3b:72:
81:63:47:87:aa:f8:de:5f:32:94:93:a6:63:57:bd:29:fb:22:
32:76:a9:ed:ce:e3:4c:01:31:7a:34:6c:22:eb:27:4e:28:c3:
31:b1:9e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:44:45 2026 by rpki-client