Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
File: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json)
Hash identifier: EAPsqJR92kpx1Wqh1Qrra2XjTBRjOQuhumnH5tb4e1A=
Subject key identifier: C8:25:31:50:E7:42:F8:E6:B2:A9:4E:99:73:2A:9F:05:79:46:2D:38
Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
Certificate issuer: /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Certificate serial: 019CB02466702619049C3D31485E9F4F2753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
Manifest number: 0253
Signing time: Mon 02 Mar 2026 20:01:41 +0000
Manifest this update: Mon 02 Mar 2026 20:01:41 +0000
Manifest next update: Tue 03 Mar 2026 20:01:41 +0000
Files and hashes: 1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: 6gB++sgb3wtI/5+TkGHZ+9KUFiNa/OWtYHJZyKfrFj4=)
2: FKy4QquWDiXsB6434vLtVQiZ1BI.roa (hash: E7KgcSUkFp282kfhM/A9rdhpcSBu+wYieQbkPSRtk8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 20:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b0:24:66:70:26:19:04:9c:3d:31:48:5e:9f:4f:27:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Validity
Not Before: Mar 2 20:01:41 2026 GMT
Not After : Mar 3 20:01:41 2026 GMT
Subject: CN=c8253150e742f8e6b2a94e99732a9f0579462d38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:22:03:6b:92:12:f3:52:16:ce:39:14:6d:f6:
e8:c3:40:bb:d3:7b:dc:0f:cd:1a:f1:1e:d4:c3:c5:
ab:7a:65:d9:6c:63:ae:df:1a:5c:71:8f:75:a0:3f:
b3:bd:39:bb:26:73:46:e0:4a:10:71:b5:cb:a4:25:
ee:b6:b2:2e:e3:c4:fe:58:ff:a4:02:29:19:5b:80:
41:02:30:32:89:5e:18:6f:b1:7b:34:c1:c5:4d:e0:
a0:d5:ae:53:63:cd:45:33:30:3a:b8:a0:52:72:17:
35:86:d4:7d:b8:8d:97:cf:62:2c:c7:b8:ad:25:ca:
c5:ee:6a:7e:43:0a:2b:4f:78:1a:65:cc:5b:f0:64:
07:9a:37:29:9c:f4:05:87:75:86:55:33:4d:8e:fc:
0e:97:e8:34:d5:1d:bd:09:7d:a2:9d:76:ea:02:2b:
08:74:5e:6e:24:ba:f3:0d:86:e0:36:7e:05:a6:2a:
f0:8e:ea:2c:5c:a9:e0:48:9a:85:91:e9:cf:04:1c:
f9:ce:47:f1:de:49:6a:95:7e:3c:dc:8c:da:6f:2c:
3d:d2:2f:4b:cc:9b:5d:d8:c6:50:74:cc:b8:1f:b1:
d7:41:da:4f:ff:83:04:08:f8:3f:68:6a:af:43:ad:
07:a3:4e:40:29:57:4d:55:27:61:a3:48:59:79:4f:
9c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:25:31:50:E7:42:F8:E6:B2:A9:4E:99:73:2A:9F:05:79:46:2D:38
X509v3 Authority Key Identifier:
keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:14:f8:81:01:01:10:7e:fd:87:22:73:ff:75:9d:4e:d5:5a:
42:3b:ac:ca:e0:52:82:90:d6:bb:39:00:dd:f6:4a:29:40:1d:
27:3c:80:e5:5b:f1:9e:7b:45:ec:91:78:80:4e:1e:25:7f:9b:
1e:20:9c:03:a6:9d:0d:40:c0:7c:9a:95:d3:9b:92:3c:c9:0f:
47:7b:24:d9:24:76:4b:ec:43:27:5b:05:24:8d:a1:23:17:b8:
f4:e6:33:75:ad:73:d7:37:bd:9f:e9:de:f4:f8:2d:d9:13:39:
07:8a:7d:93:dc:61:8a:67:0d:7a:db:22:53:e2:b3:61:bf:77:
cc:c3:1c:65:51:94:f7:8b:a1:e9:38:a8:ae:8f:0f:74:6f:f9:
28:54:ee:4d:2b:4e:b8:0a:b2:4b:8c:bf:fb:08:be:9f:79:61:
c7:0b:40:4d:58:47:e8:de:60:ed:cd:2b:d2:ab:6d:39:74:ea:
b8:3d:7e:71:75:40:31:ff:4c:5e:af:0a:1f:ef:32:95:e9:aa:
5a:e2:e0:15:93:d8:89:3a:2e:9e:8e:92:36:54:bc:17:b6:cd:
9c:e5:01:6e:94:b8:31:24:a0:1f:5e:8d:44:4f:bc:e9:4b:40:
d0:36:66:c9:a4:10:de:8b:5c:73:dd:d9:0e:54:18:a6:33:8f:
41:7d:a6:ca
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZywJGZwJhkEnD0xSF6fTydTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMTRlODE1M2NkM2Y5MWMzMzM5N2Y5YjdkZjkxYmYxNzNj
NGQxNmIwHhcNMjYwMzAyMjAwMTQxWhcNMjYwMzAzMjAwMTQxWjAzMTEwLwYDVQQD
EyhjODI1MzE1MGU3NDJmOGU2YjJhOTRlOTk3MzJhOWYwNTc5NDYyZDM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyIDa5IS81IWzjkUbfbow0C703vc
D80a8R7Uw8WremXZbGOu3xpccY91oD+zvTm7JnNG4EoQcbXLpCXutrIu48T+WP+k
AikZW4BBAjAyiV4Yb7F7NMHFTeCg1a5TY81FMzA6uKBSchc1htR9uI2Xz2Isx7it
JcrF7mp+QworT3gaZcxb8GQHmjcpnPQFh3WGVTNNjvwOl+g01R29CX2inXbqAisI
dF5uJLrzDYbgNn4FpirwjuosXKngSJqFkenPBBz5zkfx3klqlX483Izabyw90i9L
zJtd2MZQdMy4H7HXQdpP/4MECPg/aGqvQ60Ho05AKVdNVSdho0hZeU+cQwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFMglMVDnQvjmsqlOmXMqnwV5Ri04MB8GA1UdIwQY
MBaAFPoU6BU80/kcMzl/m335G/FzxNFrMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oVG9GVHpULVJ3ek9YLWJmZmtiOFhQRTBXcy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzcvMjQwNzgwLTgxMTAtNDVkNy1iZDcz
LWZkZmQyZDcyYjU0MS8xLzEtaFRvRlR6VC1Sd3pPWC1iZmZrYjhYUEUwV3MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2M3LzI0MDc4MC04MTEwLTQ1ZDctYmQ3My1mZGZkMmQ3MmI1
NDEvMS8xLWhUb0ZUelQtUnd6T1gtYmZma2I4WFBFMFdzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmxT4
gQEBEH79hyJz/3WdTtVaQjusyuBSgpDWuzkA3fZKKUAdJzyA5VvxnntF7JF4gE4e
JX+bHiCcA6adDUDAfJqV05uSPMkPR3sk2SR2S+xDJ1sFJI2hIxe49OYzda1z1ze9
n+ne9Pgt2RM5B4p9k9xhimcNetsiU+KzYb93zMMcZVGU94uh6Tioro8PdG/5KFTu
TStOuAqyS4y/+wi+n3lhxwtATVhH6N5g7c0r0qttOXTquD1+cXVAMf9MXq8KH+8y
lemqWuLgFZPYiTouno6SNlS8F7bNnOUBbpS4MSSgH16NRE+86UtA0DZmyaQQ3otc
c93ZDlQYpjOPQX2myg==
-----END CERTIFICATE-----
Generated at Tue Mar 3 03:32:25 2026 by rpki-client