Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
File: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json)
Hash identifier: lnDVJYBWSv7iScYShpmcrN6zXJi7mBhKpCmc0DKuVUM=
Subject key identifier: 0F:F8:E8:5B:E7:30:73:86:89:05:70:51:23:00:DE:D1:1B:17:9A:EE
Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
Certificate issuer: /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Certificate serial: 019FACE38A5754621DFBF0072A8E87FFAC7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
Manifest number: 03DF
Signing time: Wed 29 Jul 2026 08:00:20 +0000
Manifest this update: Wed 29 Jul 2026 08:00:20 +0000
Manifest next update: Thu 30 Jul 2026 08:00:20 +0000
Files and hashes: 1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: jB7YRuaySdnH80EhfXJK6FdSlSFMuTGOkr/evxNuLJU=)
2: FKy4QquWDiXsB6434vLtVQiZ1BI.roa (hash: E7KgcSUkFp282kfhM/A9rdhpcSBu+wYieQbkPSRtk8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e3:8a:57:54:62:1d:fb:f0:07:2a:8e:87:ff:ac:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Validity
Not Before: Jul 29 08:00:20 2026 GMT
Not After : Jul 30 08:00:20 2026 GMT
Subject: CN=0ff8e85be7307386890570512300ded11b179aee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:77:05:1c:b4:28:90:bf:9a:f7:63:76:fe:0a:
90:1b:a6:64:6e:1c:3d:0a:7a:13:36:26:e2:1b:3d:
44:f4:6a:de:b2:df:23:6e:7f:e2:af:94:28:3b:24:
01:25:c5:ca:88:2f:92:4a:69:d7:bd:ad:74:05:b6:
7e:47:74:a4:08:8f:92:5c:21:66:25:09:3d:11:82:
a5:79:dc:fa:c9:8e:03:bf:15:56:ed:b4:d7:e6:83:
ad:b9:15:3b:21:6b:5d:7f:55:41:8b:5d:a3:e7:ef:
02:8a:19:d1:58:c8:52:04:73:49:48:3d:33:38:8e:
77:80:67:d0:37:f8:18:75:ab:0d:0e:ba:84:a6:c1:
d6:a7:2e:99:a9:a1:9a:00:91:f8:45:f8:11:52:2c:
c1:ef:32:c6:fb:75:46:ee:de:9f:0e:bc:d0:91:54:
a0:ab:47:d8:65:38:a1:b8:a7:3b:86:35:73:ca:1b:
10:03:81:db:f0:1e:c0:7b:65:6c:5d:10:3c:bd:cc:
3b:b1:a6:7c:98:27:85:97:5d:0f:93:c9:7f:52:de:
91:d9:3f:54:c4:be:b9:36:01:35:20:0a:80:0b:f9:
6b:d3:d5:e4:d1:25:57:76:58:35:b8:b7:36:6f:22:
99:46:bb:9a:6d:40:f5:fa:73:e7:8b:f1:60:a2:a2:
8a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F8:E8:5B:E7:30:73:86:89:05:70:51:23:00:DE:D1:1B:17:9A:EE
X509v3 Authority Key Identifier:
keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:af:62:a6:10:81:47:23:c7:5d:73:b3:3a:e8:a3:b8:80:17:
28:5d:ce:a9:c1:98:67:48:d3:7d:ab:ab:bd:7b:fd:9f:4b:7e:
43:38:3f:a9:1f:24:a5:ff:a4:b1:8f:9e:0a:b0:b1:88:f4:f4:
18:32:e6:61:49:5b:08:9c:34:34:34:8b:b8:21:ec:d6:89:28:
34:1e:24:1b:27:87:e9:78:9d:fe:d4:00:17:0a:f9:dd:d0:a0:
62:f3:c0:8c:fe:13:0b:51:bd:89:d6:e8:d1:2a:c5:7b:a4:8b:
40:10:61:f6:88:5b:e7:cc:67:f0:2a:fa:5c:e9:5c:72:0a:77:
61:78:5f:26:64:b2:69:25:ac:33:d1:db:34:d8:97:2e:35:ee:
31:61:a7:2a:84:67:41:00:5f:67:e4:ee:26:4c:70:c4:67:27:
c3:65:c3:dc:db:cf:98:37:bd:03:47:cb:94:67:d9:1b:3b:a9:
05:69:c8:de:3a:a8:2f:15:44:c0:10:64:36:dd:ca:2a:1a:7d:
c8:3f:ae:01:e0:79:b1:4c:1a:11:f1:45:3b:9a:32:6a:b5:c7:
f5:fc:d5:8f:db:cd:66:32:f8:a2:3b:b1:83:29:73:b7:4a:dd:
93:26:52:d4:82:b1:02:49:36:ec:19:5c:5c:94:f1:17:c7:43:
a9:19:6a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:25:42 2026 by rpki-client