Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
File: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft (raw, json)
Hash identifier: UnnHrgcHcF070kVMFK0vbQ4hZLMO7mZNP2rYirT9Z2E=
Subject key identifier: 2B:FF:1C:FB:1F:EC:0E:F4:D5:9B:DF:56:90:A5:01:E1:E2:7A:D3:C9
Authority key identifier: FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
Certificate issuer: /CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Certificate serial: 019E1D90D6F91D6E541922AC73CCFC42DF2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
Manifest number: 0A0A
Signing time: Tue 12 May 2026 19:01:31 +0000
Manifest this update: Tue 12 May 2026 19:01:31 +0000
Manifest next update: Wed 13 May 2026 19:01:31 +0000
Files and hashes: 1: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl (hash: +gcL1N5SvQH8zC9Y3fT5CmSxXYNYmBG3DDagqN3WPss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:d6:f9:1d:6e:54:19:22:ac:73:cc:fc:42:df:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Validity
Not Before: May 12 19:01:31 2026 GMT
Not After : May 13 19:01:31 2026 GMT
Subject: CN=2bff1cfb1fec0ef4d59bdf5690a501e1e27ad3c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d8:a7:d8:d6:10:c5:8f:d3:dd:08:79:50:68:
76:a6:72:9f:ae:9b:22:0c:68:f9:7b:f7:b3:db:8f:
52:7c:a0:c7:31:24:bb:32:63:bf:f0:79:2a:62:1a:
79:81:b7:32:92:c0:86:88:35:33:08:9b:56:ab:4b:
a5:2d:2a:de:47:4f:c7:a8:f4:dd:24:38:24:0a:a2:
ae:16:56:db:08:0c:26:e5:75:6e:bb:b9:94:1d:4d:
c0:33:e7:4b:99:50:bb:79:c4:4f:c9:9c:ec:64:45:
74:40:43:b7:39:38:3b:a2:d8:c1:db:9a:6c:e6:42:
57:7e:6e:39:72:60:ef:cf:49:0f:ab:86:2e:ee:ea:
fe:7e:82:47:ca:01:0b:da:8d:31:56:b3:a8:da:f0:
2c:d4:17:71:be:11:b1:0e:d1:6f:c3:7a:78:e6:c2:
44:d3:25:fd:1d:b1:ed:5b:f8:1c:1e:ab:3e:e9:19:
9d:03:8f:be:7d:b6:97:ac:7b:06:5f:a1:55:45:50:
81:d4:98:f7:a4:63:c5:e1:1a:03:86:e2:b9:36:2d:
b0:f6:bb:ca:65:76:ff:12:61:df:ae:02:58:42:51:
05:36:2a:41:5d:c2:86:ad:56:b4:dc:14:a9:f4:d9:
c0:32:2e:4c:11:70:08:34:27:76:b0:46:6e:bf:c4:
3c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:FF:1C:FB:1F:EC:0E:F4:D5:9B:DF:56:90:A5:01:E1:E2:7A:D3:C9
X509v3 Authority Key Identifier:
keyid:FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4a:0f:ea:6b:8f:c4:59:40:65:df:36:c2:fa:6d:64:8b:80:
c3:c9:c4:97:a9:56:21:67:11:b4:5c:4d:68:e3:06:50:a1:24:
63:be:14:28:42:8a:cb:3a:64:c8:15:ae:15:15:fa:a4:74:58:
73:d6:df:26:53:ce:34:f6:47:94:8b:f2:15:f9:90:18:dd:f6:
e8:b6:d4:b8:26:ff:cd:a7:c5:63:80:4d:f2:60:e3:fc:7c:94:
17:ab:54:ba:c1:d2:d6:dc:21:35:43:0c:92:ad:65:5a:b5:a2:
cd:ab:3c:a1:58:c3:46:e8:8c:ad:b0:1e:f8:64:9a:80:7d:97:
13:60:55:5f:9c:93:36:21:95:eb:ac:26:fe:31:3a:c7:31:b7:
f5:ee:e9:a1:75:44:6d:69:d4:c9:af:f9:d2:7c:79:af:06:8b:
bd:c1:21:02:64:8a:65:d6:e3:0d:f8:11:53:c0:08:a5:51:96:
c4:ae:ff:73:12:58:ea:11:e2:94:59:97:5b:cc:33:ae:6a:20:
e3:15:1c:9a:64:be:f6:38:a9:5c:d4:a0:0d:1a:f4:ec:28:ea:
33:80:65:a4:6b:4c:82:68:40:a6:bb:7c:20:7a:2c:32:91:89:
4b:7b:44:be:76:1d:ef:b4:41:39:1a:be:df:c3:6b:7a:b3:6b:
68:cd:e3:6a
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4dkNb5HW5UGSKsc8z8Qt8uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMTRhZjE2ZTU4OWY5ODQ4ZmM2OTVkMDU3ZjgxYzE2N2U4
ZjYzZDUwHhcNMjYwNTEyMTkwMTMxWhcNMjYwNTEzMTkwMTMxWjAzMTEwLwYDVQQD
EygyYmZmMWNmYjFmZWMwZWY0ZDU5YmRmNTY5MGE1MDFlMWUyN2FkM2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptin2NYQxY/T3Qh5UGh2pnKfrpsi
DGj5e/ez249SfKDHMSS7MmO/8HkqYhp5gbcyksCGiDUzCJtWq0ulLSreR0/HqPTd
JDgkCqKuFlbbCAwm5XVuu7mUHU3AM+dLmVC7ecRPyZzsZEV0QEO3OTg7otjB25ps
5kJXfm45cmDvz0kPq4Yu7ur+foJHygEL2o0xVrOo2vAs1BdxvhGxDtFvw3p45sJE
0yX9HbHtW/gcHqs+6RmdA4++fbaXrHsGX6FVRVCB1Jj3pGPF4RoDhuK5Ni2w9rvK
ZXb/EmHfrgJYQlEFNipBXcKGrVa03BSp9NnAMi5MEXAINCd2sEZuv8Q8OwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCv/HPsf7A701ZvfVpClAeHietPJMB8GA1UdIwQY
MBaAFPoUrxblifmEj8aV0Ff4HBZ+j2PVMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oU3ZGdVdKLVlTUHhwWFFWX2djRm42UFk5VS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvNmY1MDJhLWZkNmYtNDI3OC05Y2U4
LWNhNTFlYmYzYjM1Zi8xLzEtaFN2RnVXSi1ZU1B4cFhRVl9nY0ZuNlBZOVUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg0LzZmNTAyYS1mZDZmLTQyNzgtOWNlOC1jYTUxZWJmM2Iz
NWYvMS8xLWhTdkZ1V0otWVNQeHBYUVZfZ2NGbjZQWTlVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkoP
6muPxFlAZd82wvptZIuAw8nEl6lWIWcRtFxNaOMGUKEkY74UKEKKyzpkyBWuFRX6
pHRYc9bfJlPONPZHlIvyFfmQGN326LbUuCb/zafFY4BN8mDj/HyUF6tUusHS1twh
NUMMkq1lWrWizas8oVjDRuiMrbAe+GSagH2XE2BVX5yTNiGV66wm/jE6xzG39e7p
oXVEbWnUya/50nx5rwaLvcEhAmSKZdbjDfgRU8AIpVGWxK7/cxJY6hHilFmXW8wz
rmog4xUcmmS+9jipXNSgDRr07CjqM4BlpGtMgmhAprt8IHosMpGJS3tEvnYd77RB
ORq+38NrerNraM3jag==
-----END CERTIFICATE-----
Generated at Wed May 13 01:39:03 2026 by rpki-client