Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: xoFf8u5/QMn1h6WdUPgvBenUDoaqVvKI6UGCqIXowfY=
Subject key identifier: F0:46:E7:AA:70:4D:3C:C3:B7:4D:25:0F:94:18:FD:A1:1C:E6:C0:68
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 019CAF4821020EF575A7BA332E2112297870
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 0FBA
Signing time: Mon 02 Mar 2026 16:01:05 +0000
Manifest this update: Mon 02 Mar 2026 16:01:05 +0000
Manifest next update: Tue 03 Mar 2026 16:01:05 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: IAVroEBSDvmhOJBCZI1/lvWD1OyqXQHvH8bbFk29xjE=)
2: MlQTgjgh5uSzQaXxeS49FotuS_Y.roa (hash: 0wxpEKJE8z5xrE9cQTX/pfOjLHngXIh1dDaRLCQI7cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:48:21:02:0e:f5:75:a7:ba:33:2e:21:12:29:78:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Mar 2 16:01:05 2026 GMT
Not After : Mar 3 16:01:05 2026 GMT
Subject: CN=f046e7aa704d3cc3b74d250f9418fda11ce6c068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:6a:e4:00:82:11:46:e2:5b:55:89:ce:b8:fb:
4f:a5:8a:7e:ef:05:f9:a2:73:8d:2b:d2:e3:dd:86:
27:ec:9d:d8:ce:e4:4e:ee:4d:f1:cd:6c:b5:8e:fe:
fc:59:c8:db:27:58:e1:6f:50:5b:bc:85:e0:a1:97:
90:d3:0d:95:47:97:01:2b:64:c0:d6:4e:5b:24:30:
e4:ea:25:9e:5a:49:40:59:fc:b1:f4:4c:5a:75:01:
b2:23:0c:c8:4e:e3:34:c2:3e:70:4b:3b:47:6a:61:
2e:8d:84:a0:72:a9:d0:7f:4c:d9:9b:51:da:04:66:
21:84:af:76:f0:cd:b7:74:bd:bc:bb:96:0d:40:73:
57:d3:00:35:04:c2:1a:73:9c:d2:ec:09:b9:e7:7c:
fb:07:96:1d:84:de:df:28:f8:d3:8d:26:aa:02:66:
01:0a:67:e4:01:40:0e:5c:59:c1:e9:45:f3:fe:dc:
ee:46:50:17:0f:29:72:25:ec:b2:eb:6c:35:5b:eb:
87:89:64:06:27:66:c9:4f:44:24:4f:03:8a:3f:5c:
36:c7:88:2c:72:9f:c8:9a:f1:7a:d5:1c:2d:b2:f8:
00:e7:5d:d3:6c:27:9e:61:32:b7:3c:28:4b:31:27:
c9:5b:ca:0c:bc:95:6c:ac:a7:88:0a:b5:ab:7c:a4:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:46:E7:AA:70:4D:3C:C3:B7:4D:25:0F:94:18:FD:A1:1C:E6:C0:68
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:be:81:76:e9:8f:85:70:fc:af:2d:a3:45:0a:63:d1:76:65:
7d:4c:25:96:a4:b6:0a:b3:44:e8:ea:9d:e9:60:97:c5:7a:ef:
b3:ab:7b:3c:ba:6d:ca:5a:4d:8b:96:83:03:94:14:0a:7b:c4:
fd:a0:17:27:10:c1:a3:40:6c:bd:0d:8c:63:83:02:e0:4d:dd:
b5:5a:25:f9:0e:24:12:9a:8a:81:33:6c:06:a1:b3:1c:80:19:
2a:6e:a5:db:4b:89:f8:0a:ff:af:0d:9a:bc:fb:9b:45:49:59:
1c:70:72:fe:87:42:5c:7c:4d:e1:68:d9:1f:03:20:e2:7d:ff:
d5:ab:d7:65:0a:f7:48:fe:ff:ef:0b:85:4c:b0:03:a8:b7:fa:
07:7e:74:84:a3:e7:79:bd:9b:6a:8a:39:f4:29:27:1e:06:9b:
a9:f7:9d:b5:c3:44:10:75:30:8f:46:e5:e1:65:81:8e:a2:07:
e6:45:f7:51:c8:7e:58:af:0d:20:9a:2f:3d:b7:ae:54:45:f8:
ea:b6:09:e3:8d:8f:b0:80:e3:9a:c7:e7:ac:64:d2:49:09:09:
b0:71:c4:ea:a9:e0:20:12:0a:4a:46:3f:3d:16:04:55:3d:89:
f0:38:53:dd:42:0f:46:e3:f3:e1:b3:9a:b3:fd:f8:63:2b:f6:
ee:72:8b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:33:53 2026 by rpki-client