Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
File: 1foTUAdEKPBxdVoZaMpa-ihFUqI.mft (raw, json)
Hash identifier: 86QYIAVDJG6x19A+YehByWNQLlWIyKni81JhFQ1X04Q=
Subject key identifier: 86:29:C3:17:88:90:A3:13:5D:76:1D:1B:45:CA:FF:0F:7C:EB:2E:43
Authority key identifier: D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
Certificate issuer: /CN=d5fa1350074428f071755a1968ca5afa284552a2
Certificate serial: 01A1DEA71A29E8F2F0DE7A5E1614883F6206
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
Manifest number: 0173
Signing time: Sun 15 Nov 2026 10:00:55 +0000
Manifest this update: Sun 15 Nov 2026 10:00:55 +0000
Manifest next update: Mon 16 Nov 2026 10:00:55 +0000
Files and hashes: 1: 1foTUAdEKPBxdVoZaMpa-ihFUqI.crl (hash: UNlBKoB977K2b+MPtre4eWTf8SyFZQmLjFN1j0Osh+c=)
2: 9MIhJWU8HUXmitWxOyJat2wm1ww.roa (hash: vfpvRVHFiiZtrxcYn/HI/1IZLXq0S7slSX45Bd/FCpA=)
3: sZ_axs5F8_fX3CdTwZOdIUm4748.roa (hash: DDvFlYymHWD/0Ky3pi1IT7ohACaIIvApHxnzVH0w5M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:a7:1a:29:e8:f2:f0:de:7a:5e:16:14:88:3f:62:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fa1350074428f071755a1968ca5afa284552a2
Validity
Not Before: Nov 15 10:00:55 2026 GMT
Not After : Nov 16 10:00:55 2026 GMT
Subject: CN=8629c3178890a3135d761d1b45caff0f7ceb2e43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:b3:2d:c6:6f:ae:97:75:d0:4c:8c:1d:40:
76:4f:1e:e1:fa:bc:0f:1f:db:68:3d:ff:22:f5:30:
c9:7c:3f:d5:7b:a9:cf:cf:78:3d:7d:09:20:e2:a1:
c8:d1:70:7c:41:ff:5e:13:1b:9f:64:30:9e:38:f6:
79:35:c1:f8:07:60:7d:09:e1:dd:b9:37:02:24:c6:
dc:16:eb:7a:f0:c0:42:19:60:e8:33:f2:fc:4b:51:
cc:d6:bb:de:96:2e:48:24:c6:b3:80:77:1d:ac:c9:
3f:ba:69:7a:6f:d5:80:22:8e:1e:5b:d7:4e:ea:d3:
e6:43:d9:28:82:bf:25:69:2d:61:df:7e:4d:56:f4:
59:d2:df:e3:9b:7f:52:5c:ec:16:28:4b:0c:4e:89:
a1:b8:40:a5:d3:62:cd:05:9c:85:85:e9:d8:43:34:
e6:d3:13:87:80:07:5d:4d:3b:51:56:40:7a:3f:31:
a1:05:61:95:38:59:6f:6b:db:ba:3d:3b:44:ef:a2:
9d:37:cd:ba:9d:a8:72:6e:fb:05:01:67:5e:b5:89:
80:1c:4d:95:87:a3:2f:39:ee:49:94:86:79:b6:87:
32:0b:97:3e:c9:eb:3c:3a:05:bc:47:a5:e9:14:22:
d1:43:4d:89:ac:b9:87:7b:5b:af:39:a4:f8:a5:05:
73:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:29:C3:17:88:90:A3:13:5D:76:1D:1B:45:CA:FF:0F:7C:EB:2E:43
X509v3 Authority Key Identifier:
keyid:D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e6:48:08:e7:8b:f2:30:fa:c7:a8:7a:c1:bf:70:c2:c3:74:
fc:30:34:b9:19:c4:8c:f5:d8:cb:cd:b2:88:77:d4:66:32:d4:
a9:84:bf:84:09:f1:bb:77:73:25:ca:ed:b0:2b:8f:d9:1d:4a:
46:ba:71:70:10:2b:2c:00:1d:36:9d:33:59:90:08:f4:44:5c:
5c:ef:0d:44:01:e7:2f:3c:7d:c1:a4:68:61:72:7d:1e:0a:bd:
42:a2:17:d3:00:b3:99:8a:02:ad:13:73:42:1a:04:18:27:be:
7a:75:1e:b6:c8:b1:cb:e6:4d:eb:99:e7:e9:c7:46:b2:26:26:
64:aa:1d:31:71:4a:07:ea:43:72:31:05:b5:47:3d:5a:55:8d:
ab:91:11:03:20:4f:0c:77:99:81:c4:3d:1a:75:8f:df:0b:7c:
d6:67:61:3f:77:d2:1e:09:9a:71:95:c7:64:47:5a:14:cc:ca:
02:cf:0a:51:bf:99:e4:c3:7e:10:9d:dd:82:0a:71:7c:5a:d6:
a5:ad:b8:bc:eb:56:82:e7:6b:b9:2f:c9:18:58:86:f2:d4:e4:
5d:68:cd:32:22:47:88:1f:2a:a6:eb:77:30:2e:04:0a:c4:aa:
23:32:83:62:0f:86:38:69:0a:44:fd:1a:76:13:c0:c3:6f:20:
5c:fc:97:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 19:26:52 2026 by rpki-client