Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
File: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json)
Hash identifier: LD3e1JGQbLl+VfrVWdHD+/5eFj/f/xVqjy9RrWLF0js=
Subject key identifier: C1:F6:37:38:6D:D8:A1:EA:BC:D3:AC:7D:D1:B4:2E:8D:EF:E6:A0:38
Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
Certificate issuer: /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Certificate serial: 01A0F1557051111A712C033F80AA2DD9C912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
Manifest number: 0487
Signing time: Wed 30 Sep 2026 08:01:43 +0000
Manifest this update: Wed 30 Sep 2026 08:01:43 +0000
Manifest next update: Thu 01 Oct 2026 08:01:43 +0000
Files and hashes: 1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: lhUNUiRFSI1GUNMvAsReyJBoBN11EIXmZpxO6fRKdrY=)
2: FKy4QquWDiXsB6434vLtVQiZ1BI.roa (hash: E7KgcSUkFp282kfhM/A9rdhpcSBu+wYieQbkPSRtk8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 08:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:55:70:51:11:1a:71:2c:03:3f:80:aa:2d:d9:c9:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Validity
Not Before: Sep 30 08:01:43 2026 GMT
Not After : Oct 1 08:01:43 2026 GMT
Subject: CN=c1f637386dd8a1eabcd3ac7dd1b42e8defe6a038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:fc:81:82:9e:58:ff:2b:81:c9:f6:08:3d:
01:af:53:a1:3e:1f:c3:76:d2:10:ef:c2:24:7e:45:
b3:36:9d:16:22:c1:03:41:03:50:7e:90:3a:d9:52:
ce:4c:43:18:62:cb:68:ed:f6:3e:77:80:a1:a9:46:
ac:21:5d:52:1f:94:74:20:2c:82:94:ef:ad:61:f6:
03:3b:6d:c7:0d:a1:27:cc:4d:e2:e9:d3:15:69:56:
31:6e:15:f2:28:c4:59:0f:c8:e2:b0:8e:ff:0d:f4:
13:e2:c8:a7:d2:b7:c0:f6:37:63:48:f6:4c:2c:ad:
02:6a:64:0a:0a:e7:32:52:c6:d0:d0:8d:4e:0d:48:
3b:df:0b:72:12:c4:f1:1f:ba:b1:6b:91:a1:a3:c2:
5a:7a:bc:82:98:ba:f2:42:25:6e:cf:99:d5:3a:46:
a6:01:57:d0:17:61:18:0f:8d:f2:c7:c3:ce:88:d2:
66:e5:52:c0:74:c7:3f:2f:23:96:ff:61:9a:dc:00:
06:43:7d:0a:92:9c:e4:3b:a3:2a:c0:8e:2b:29:20:
8b:6b:e7:f2:85:ec:82:66:29:7b:ce:87:0d:d7:87:
31:3b:a0:e7:f8:38:31:1b:7d:b6:c2:d3:81:59:82:
1a:07:ac:e3:fd:e6:3e:ee:50:f8:66:fa:ef:96:90:
e0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F6:37:38:6D:D8:A1:EA:BC:D3:AC:7D:D1:B4:2E:8D:EF:E6:A0:38
X509v3 Authority Key Identifier:
keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7f:bd:9a:5f:20:5c:31:d6:d9:63:2a:bd:eb:e5:45:21:08:
bd:82:ab:c4:99:6a:18:8b:01:4f:e6:29:be:71:58:22:aa:28:
5d:29:4f:85:cf:c5:db:68:9f:95:b9:0b:9e:24:82:d0:04:9c:
72:e3:8c:d4:5b:61:39:4c:98:0a:9f:e7:50:0c:68:f3:38:94:
4d:35:46:63:3d:32:c6:2f:8c:ed:c6:87:2f:5f:cc:17:5c:76:
c8:32:f2:d5:d7:81:4b:1e:0a:bc:a2:f9:9d:d2:a5:c6:e7:53:
7d:a3:8c:5a:03:c9:53:73:41:ce:0c:b7:54:3f:c0:eb:89:e1:
3f:1f:92:1c:66:01:5a:93:56:c0:63:25:fa:6c:7e:98:bd:11:
ef:30:34:4f:64:0d:3c:d5:c5:4f:95:bf:1f:fc:fb:7c:7c:85:
9d:28:22:1f:9b:25:cd:ad:3a:a9:56:bc:2b:c2:4b:f1:ef:e2:
31:d2:8e:2c:07:22:da:ed:79:39:37:c5:cb:27:62:5c:6c:51:
4f:16:8c:d4:e9:e3:67:a8:78:8c:16:d4:77:f7:84:ab:b1:71:
8a:6f:9d:8a:96:12:dc:26:1d:03:67:a3:d9:d1:5a:99:5e:11:
b3:2c:eb:7e:0c:31:0d:d8:1a:2c:db:61:18:30:29:27:ca:15:
52:12:8b:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 14:05:40 2026 by rpki-client