Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
File: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json)
Hash identifier: os6rFQuo0jXyZGU6O7xxwk43OKW20Ywd1blv85b395I=
Subject key identifier: DF:37:BA:48:B7:1D:2C:D6:1A:7A:85:09:F4:A5:8D:C5:E6:44:2A:02
Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
Certificate issuer: /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Certificate serial: 019EC14984DBD60AF7A6E1EE0DC9FDE1BDF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
Manifest number: 0365
Signing time: Sat 13 Jun 2026 14:01:21 +0000
Manifest this update: Sat 13 Jun 2026 14:01:21 +0000
Manifest next update: Sun 14 Jun 2026 14:01:21 +0000
Files and hashes: 1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: KTwOsTtHBWT3AwV5pbqc+4SzYX/kA1m0QAWowQDxXEM=)
2: FKy4QquWDiXsB6434vLtVQiZ1BI.roa (hash: E7KgcSUkFp282kfhM/A9rdhpcSBu+wYieQbkPSRtk8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:49:84:db:d6:0a:f7:a6:e1:ee:0d:c9:fd:e1:bd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Validity
Not Before: Jun 13 14:01:21 2026 GMT
Not After : Jun 14 14:01:21 2026 GMT
Subject: CN=df37ba48b71d2cd61a7a8509f4a58dc5e6442a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e9:22:f7:80:6b:bb:f0:d9:fa:c8:cf:d2:5a:
66:81:c2:14:8d:c6:a3:0d:01:3d:7c:24:1e:0f:64:
6a:19:1a:32:89:7f:f2:d4:e2:83:66:77:53:8b:3e:
e8:ba:48:4c:7c:a7:e8:c3:29:10:61:02:c1:5e:b5:
90:e1:00:5b:8b:09:0b:84:92:39:6d:65:af:ad:a9:
3b:9a:3c:01:c8:42:db:24:a0:ee:47:ad:71:33:34:
ce:6f:16:ef:67:61:b9:8e:17:4b:38:6f:0c:d6:f6:
51:16:f0:3e:aa:ab:85:7a:ee:11:c9:88:e0:7c:57:
66:da:76:35:18:e1:5e:a0:03:73:59:b0:bb:03:07:
af:ac:1f:b0:bd:cf:e4:26:c6:17:3d:45:ab:b0:40:
89:5e:fb:d2:16:34:7a:d7:32:88:71:2d:e1:88:21:
b3:d0:58:bb:ea:fc:d5:8a:ba:56:21:ac:cf:50:bc:
ed:94:dc:32:15:e2:8f:cf:21:44:33:dd:ed:7e:7f:
39:1b:c8:66:98:d4:17:fc:75:7f:db:74:b8:bb:c6:
75:b9:a9:89:6a:09:62:af:94:5f:23:4a:e6:86:ce:
cc:e7:e9:5c:79:11:32:7f:dd:f4:a0:d1:d2:e8:b5:
66:f9:d0:3a:ed:e8:7c:02:2a:e4:97:66:d1:47:12:
96:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:37:BA:48:B7:1D:2C:D6:1A:7A:85:09:F4:A5:8D:C5:E6:44:2A:02
X509v3 Authority Key Identifier:
keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:f9:81:cf:a1:81:51:65:25:58:0b:03:7f:2e:64:45:b9:2b:
c5:4f:31:42:cf:52:16:58:9d:43:f4:e5:47:36:39:20:35:c0:
d5:b7:57:28:06:6b:28:f8:8f:ce:cb:e0:ae:ce:92:20:e0:ef:
e3:a6:28:b0:0f:07:99:87:23:cc:cc:cd:b4:bc:d0:13:b9:d9:
e0:cc:e4:df:e7:ab:38:ab:fe:aa:84:1c:a4:73:2b:7a:4e:a7:
fe:b6:05:c0:bb:f9:67:b1:d8:d0:b6:9d:f9:88:8b:1a:38:36:
4c:c9:68:ca:2e:a9:79:12:8b:ac:48:db:ff:6b:87:b4:36:bb:
a3:25:14:71:91:f2:55:e4:c6:0e:10:c0:24:9c:4c:70:05:50:
6e:59:39:95:df:81:95:83:45:71:35:d8:59:24:13:79:ea:55:
23:12:e0:09:e3:3a:08:05:6c:f6:37:4a:c7:0a:d2:3e:1d:a4:
a6:50:54:09:ee:71:cd:90:a1:24:ab:4f:cc:8f:b2:15:a7:0d:
21:36:70:6d:f6:6b:51:63:d5:62:97:93:fd:f9:b0:1b:23:7d:
c7:d4:f9:55:07:af:14:9b:94:22:6a:aa:53:44:33:df:25:9f:
4d:59:d2:6a:1f:22:cf:a7:37:46:93:f0:e6:8b:af:7c:54:8a:
72:15:77:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:19:51 2026 by rpki-client