Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: vp4/twwsXMJOMlzCpXgh/vBCRKbvKHagw+qsvh/bHo0=
Subject key identifier: 7F:02:30:90:56:C4:A3:EE:52:1F:A5:CD:71:91:1E:CB:54:C0:8A:DE
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 019F90FF64A7A3E19D382F9F3D01FE0CD2DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 1632
Signing time: Thu 23 Jul 2026 22:01:24 +0000
Manifest this update: Thu 23 Jul 2026 22:01:24 +0000
Manifest next update: Fri 24 Jul 2026 22:01:24 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: kkodT3nAgI8ASDy9c+NuRSdlDqjs3rl8jgTX86iH9J0=)
2: 3KIe1YS7QLLqz4eqT1TIg8Y0lHA.roa (hash: E01qUWDxs3w8/EkHXVeEMazo/S6sr6Nl2XEVde5Y+Qw=)
3: BmDJr6NVvMRZJfVxWJAT8OCM7fY.roa (hash: 5dcydJfHt2J/Yp4bz6hC2PeHwVc0JR/YkXEsIrJj0IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:64:a7:a3:e1:9d:38:2f:9f:3d:01:fe:0c:d2:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Jul 23 22:01:24 2026 GMT
Not After : Jul 24 22:01:24 2026 GMT
Subject: CN=7f02309056c4a3ee521fa5cd71911ecb54c08ade
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1e:1e:ec:7d:b1:b3:93:c7:f4:e9:93:b0:d1:
bd:ab:03:3d:61:27:c9:c4:88:f6:b3:dc:9b:b0:e5:
2e:14:04:08:e3:e0:69:de:f5:5d:c7:e5:35:40:33:
db:bd:0a:31:6a:bd:d2:66:ac:33:82:7e:fa:c8:e3:
2d:06:0c:be:6d:37:6f:c9:ab:b7:09:78:df:a7:75:
ba:c5:16:81:ed:ab:0f:2e:bc:0e:f0:3d:c3:55:40:
7c:d6:d1:03:55:cf:96:b0:9f:13:ce:e6:0c:cc:91:
01:94:4e:5f:1b:15:d3:25:13:03:f0:99:75:18:93:
65:2a:33:52:89:1f:4b:fd:df:e1:a8:60:7d:1c:4e:
29:1b:3b:22:82:f1:24:08:3d:ad:ab:0e:0a:07:54:
cc:34:79:88:73:e9:3a:ae:63:a8:ae:9d:71:8b:c4:
23:3c:1b:61:8c:01:00:9a:1f:c4:aa:da:21:63:1f:
77:19:17:df:1a:c2:0e:5f:9c:cc:44:c9:88:3f:75:
2d:eb:f0:d1:71:d2:6d:af:6d:ee:f0:cb:f4:ad:57:
61:07:02:c3:c8:d1:f6:59:dd:5e:5e:85:e6:87:a7:
5e:d6:00:77:f4:59:eb:fd:ab:e5:69:af:7e:3c:c1:
cd:41:1d:c6:29:33:2a:a6:c7:11:a7:52:53:7f:6e:
26:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:02:30:90:56:C4:A3:EE:52:1F:A5:CD:71:91:1E:CB:54:C0:8A:DE
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:d5:dc:f1:85:e6:f7:7e:ec:3d:91:68:b2:70:0e:78:41:d7:
ea:1e:5c:bd:ec:c0:59:be:63:57:bd:4f:ac:3f:72:40:8b:d4:
66:1d:37:fc:f5:2a:a7:08:4c:58:2d:0f:c0:b4:59:bd:76:b1:
90:98:8c:d3:f5:5e:6d:b8:bf:d6:e5:a1:86:d3:67:66:39:f8:
93:75:6b:39:32:72:7b:82:0e:1a:78:91:9c:e7:2c:05:cd:40:
9a:aa:d7:7b:3e:69:fa:30:d5:65:88:10:7d:82:16:a5:16:2f:
bf:a1:0b:98:e7:2e:14:50:cb:49:d1:24:51:f9:29:3a:8a:9a:
1e:5a:fa:9b:38:f8:e0:ec:19:71:16:93:c5:e3:be:21:a3:4b:
11:45:c1:ce:ad:e3:a4:6f:55:97:88:7e:26:50:1b:47:9c:bf:
5c:7c:58:e6:df:5f:42:aa:e6:db:38:57:1c:22:54:8e:0c:89:
3b:7b:42:90:f7:c2:2d:7c:bd:d5:01:e4:29:1f:7d:51:81:9c:
7f:9e:79:b7:69:08:64:5b:df:23:7f:bf:e8:54:70:89:98:c1:
4c:cd:8b:6c:51:24:d5:e7:5e:2f:48:7e:5a:3b:a2:aa:43:95:
be:5a:c3:78:62:e6:95:b7:1a:04:71:93:59:56:02:35:b9:f6:
8e:83:fa:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:58 2026 by rpki-client