Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json)
Hash identifier: lD7w019SVTW7JXt36S5sSWzE+JtkOVUp49UwJ6NQCOQ=
Subject key identifier: 75:9D:47:22:3E:A6:88:2B:2F:08:7D:0B:44:A7:97:1D:89:05:87:E7
Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
Certificate issuer: /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Certificate serial: 019CB1DAE1D79E510885F26E3441185FC803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
Manifest number: 02FF
Signing time: Tue 03 Mar 2026 04:00:37 +0000
Manifest this update: Tue 03 Mar 2026 04:00:37 +0000
Manifest next update: Wed 04 Mar 2026 04:00:37 +0000
Files and hashes: 1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: XO6QcYSLfOnP+tnporxivqejjh3tzP3pyozsemnhYlM=)
2: _9jmpjcQFwSsKwZDpKMfAdoAfAc.roa (hash: 6IYluVGKVckZ7UbNb6EnuuXW6bdpQGvWpLycJHrQ2uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 21:16:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b1:da:e1:d7:9e:51:08:85:f2:6e:34:41:18:5f:c8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Validity
Not Before: Mar 3 04:00:37 2026 GMT
Not After : Mar 4 04:00:37 2026 GMT
Subject: CN=759d47223ea6882b2f087d0b44a7971d890587e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8e:41:ce:7e:a9:00:6a:c7:d1:2a:62:80:cc:
22:8d:a9:ab:ce:49:cc:5e:66:38:03:a3:ce:af:a0:
55:33:4a:9e:cf:b3:3b:0b:c3:83:cd:86:94:50:d6:
c6:8e:b2:3a:96:5b:b3:e5:2d:0b:1a:e5:3c:4a:8b:
28:ab:9a:1b:25:f4:92:8d:71:49:b6:76:ad:96:29:
14:52:02:0b:8d:2b:54:74:38:88:f2:09:0b:d9:39:
02:19:61:09:35:63:67:8f:1b:f6:40:58:f2:06:c3:
fb:66:c0:ae:5c:2a:f3:68:0b:90:04:de:0b:80:c1:
f2:07:11:b4:5e:2e:ea:82:45:d4:d3:8a:03:da:9c:
3a:ea:99:8d:dc:29:ba:88:c6:49:d7:d4:a2:d5:f7:
30:50:67:ef:ac:b4:1b:cd:f4:68:0c:82:02:a1:af:
11:a5:c1:b0:7c:8c:c5:41:0b:87:49:77:9b:22:21:
81:f0:aa:ac:e3:18:cd:81:58:b7:8f:f0:d3:e9:23:
73:5f:06:a5:c7:84:24:9f:68:1c:8a:9b:f7:bd:cd:
03:70:f8:13:e7:2e:33:32:ab:1c:84:e9:0d:8e:af:
56:13:e7:60:b7:5a:c3:37:7c:44:bd:4d:25:6f:d3:
70:46:1c:63:ee:fc:9d:e2:e2:a0:b2:5f:3a:2e:a8:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:9D:47:22:3E:A6:88:2B:2F:08:7D:0B:44:A7:97:1D:89:05:87:E7
X509v3 Authority Key Identifier:
keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:70:dc:cc:0c:34:b7:49:a4:e5:00:1a:78:ec:a2:40:b8:d9:
35:65:59:6d:bd:ef:1c:81:0c:4f:66:0a:6d:8a:75:05:db:07:
b0:e8:ea:4e:0c:1a:1d:90:72:4d:4c:25:e2:01:72:24:a8:75:
37:a9:31:59:bc:a0:c2:06:95:eb:c0:cd:af:51:b2:15:5e:36:
ec:5c:97:a4:61:c6:c9:1d:96:69:7a:6b:89:20:1a:45:f7:30:
c2:43:f0:6e:ed:56:5a:98:ec:78:9c:09:21:40:a8:20:9a:76:
3a:83:b6:2f:2f:f9:cb:93:5d:a1:c9:c8:06:13:29:87:2e:71:
6d:3a:0b:da:da:74:7d:05:66:d1:d9:d8:05:04:2a:02:2e:ed:
f5:4e:ce:76:be:22:37:43:3e:53:02:fe:50:6e:6c:6c:7e:db:
4c:36:fa:0a:26:5d:cd:29:88:bc:c0:6c:9b:d3:c5:cf:10:d7:
e0:25:7c:14:5f:a4:74:94:5b:e3:f1:62:f2:f0:7b:1e:60:b2:
22:47:1b:7b:42:78:f2:9a:71:1a:be:f8:49:c8:f0:13:63:1d:
90:37:07:04:20:93:39:b6:e1:94:91:32:26:0e:7c:cc:00:63:
93:9a:b6:b4:8d:f5:37:18:da:4f:fa:87:73:4e:95:f8:f8:42:
49:45:49:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 06:55:05 2026 by rpki-client