Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
File: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json)
Hash identifier: PFPX10LA1P2zbC6lK94UshOjNLtpgQLKH9XFl80PXLY=
Subject key identifier: 0B:0C:76:30:DA:FF:5A:2A:8E:A2:47:50:24:28:C1:96:AC:A4:69:65
Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
Certificate issuer: /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Certificate serial: 019D9BBED7C073D70A63ECF1A5D0D5D21D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
Manifest number: 02CD
Signing time: Fri 17 Apr 2026 14:01:08 +0000
Manifest this update: Fri 17 Apr 2026 14:01:08 +0000
Manifest next update: Sat 18 Apr 2026 14:01:08 +0000
Files and hashes: 1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: 5Wmtd7I0W37wJfCiX70DBWRMhq1vuS98GdFp0N29mFc=)
2: FKy4QquWDiXsB6434vLtVQiZ1BI.roa (hash: E7KgcSUkFp282kfhM/A9rdhpcSBu+wYieQbkPSRtk8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:d7:c0:73:d7:0a:63:ec:f1:a5:d0:d5:d2:1d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Validity
Not Before: Apr 17 14:01:08 2026 GMT
Not After : Apr 18 14:01:08 2026 GMT
Subject: CN=0b0c7630daff5a2a8ea247502428c196aca46965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:44:0f:b5:5d:f6:35:c5:07:60:78:f8:73:14:
1d:1b:4f:b0:62:56:ff:86:d8:d0:5f:27:b2:e6:83:
a5:5d:20:84:4e:56:a0:ed:d7:47:20:4b:18:e4:5d:
ca:51:03:20:a4:39:f5:ef:94:7d:2b:c6:57:9a:16:
9a:12:eb:96:1f:7a:8f:05:d5:ad:a0:31:2e:61:c9:
aa:64:01:e5:39:6d:30:40:99:24:a7:8f:a9:e0:d2:
b7:33:24:0a:ad:23:62:e2:ef:e3:d2:c7:18:5a:f0:
b6:2d:ac:2f:f8:db:82:56:b1:72:96:fb:c8:54:18:
76:f3:bb:11:33:35:02:fc:d1:bb:3a:29:7b:d2:60:
e8:90:1b:ff:e0:31:8f:76:c0:65:6a:21:53:fc:e7:
d6:bb:ce:60:29:24:9a:bf:b7:be:ec:72:5f:6b:f2:
2a:e0:52:d1:ba:44:6c:50:15:e9:78:9b:3c:34:ed:
f0:1e:ea:33:7b:cb:bc:a1:78:a8:15:35:db:f9:f5:
10:81:96:44:ac:57:29:e7:b1:4e:fe:84:cd:0d:cd:
62:81:8b:3a:c9:6b:d8:60:14:7e:c0:8d:9f:04:8c:
45:ba:6a:9e:c4:02:2f:d6:2f:56:98:27:e2:57:47:
b4:5c:e4:68:48:ed:fc:97:ed:9f:a1:f0:44:ed:b9:
a7:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:0C:76:30:DA:FF:5A:2A:8E:A2:47:50:24:28:C1:96:AC:A4:69:65
X509v3 Authority Key Identifier:
keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b9:99:83:26:73:95:d5:d7:6c:38:d1:c0:5e:dd:df:dd:72:
9a:77:c4:90:87:b4:43:d9:e3:32:72:d8:e1:30:1a:b1:26:a9:
7d:9e:b1:48:a9:bd:79:56:f8:0e:7f:4e:52:3b:c2:e8:98:2a:
6d:0e:06:94:0a:2b:51:1c:f6:3f:8f:a0:7d:05:60:a5:b7:8e:
e8:cc:1c:f7:4f:ed:f8:00:05:5c:06:13:e1:de:2c:14:a5:76:
44:0e:cd:58:b6:b8:c3:50:62:7f:3f:3a:61:8c:e3:46:d8:26:
31:b9:52:ce:b8:5e:2a:44:88:30:90:5b:7b:2a:8b:f9:17:9a:
b5:7c:25:78:eb:74:bd:81:3f:75:29:0f:6f:e0:ac:25:49:2c:
d1:0c:26:a9:18:9f:0f:cf:02:69:3a:fa:95:4b:90:53:a2:4e:
0a:ad:10:59:96:f8:74:05:87:35:4d:96:a4:1e:a6:ab:72:25:
47:de:b5:91:08:26:f4:4a:6a:e4:51:83:e9:83:c8:f7:2c:8c:
db:79:ee:c6:ef:8d:db:ae:cd:0b:fc:42:91:bd:8d:ab:d4:e2:
b9:77:b8:17:5b:96:3b:8b:64:ff:bc:1e:c9:65:6d:3c:1d:58:
93:19:05:e8:e6:3b:dd:0e:1c:ca:7b:bb:c0:bf:a2:30:bf:64:
99:61:24:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:38:33 2026 by rpki-client