Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json)
Hash identifier: SpdVz8S7ldn/UFtkOYOrWqSaMk9B80YBeIL0j4kbKJo=
Subject key identifier: 8E:21:FD:26:62:08:FA:5F:BF:F3:21:90:34:9A:8A:70:B9:27:84:F8
Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
Certificate issuer: /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Certificate serial: 019D2997061C86346DF771D862B2BDD2CBC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
Manifest number: 033D
Signing time: Thu 26 Mar 2026 10:00:56 +0000
Manifest this update: Thu 26 Mar 2026 10:00:56 +0000
Manifest next update: Fri 27 Mar 2026 10:00:56 +0000
Files and hashes: 1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: zP0OEVQpt5Bz2/eNCBVjE38y5QiV6dFLWjxEhC75hNU=)
2: _9jmpjcQFwSsKwZDpKMfAdoAfAc.roa (hash: 6IYluVGKVckZ7UbNb6EnuuXW6bdpQGvWpLycJHrQ2uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:06:1c:86:34:6d:f7:71:d8:62:b2:bd:d2:cb:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Validity
Not Before: Mar 26 10:00:56 2026 GMT
Not After : Mar 27 10:00:56 2026 GMT
Subject: CN=8e21fd266208fa5fbff32190349a8a70b92784f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9d:97:c9:38:ca:23:d5:9f:30:81:ed:dd:da:
29:f7:c7:e4:63:1c:15:9c:41:78:83:b8:6d:83:a2:
98:1e:39:db:52:98:1f:2c:6b:d5:e7:42:17:f3:93:
90:16:31:36:9b:65:4d:77:98:4b:26:35:83:d9:1a:
d4:7d:8c:b9:77:da:3b:a4:b9:50:79:48:cd:75:a6:
85:fa:75:d4:d2:0d:de:06:14:70:7a:82:5c:45:a6:
ff:6b:be:f8:88:51:20:14:4a:18:e6:17:65:77:31:
ba:ff:e2:f1:b8:43:96:f0:0a:d3:20:e9:1c:7f:96:
2e:5a:a9:cc:fc:d2:ab:47:d2:f1:ab:2b:bf:30:23:
67:92:c4:d3:8b:8c:ca:c6:a8:d0:dc:0e:2c:95:22:
8d:19:e8:90:d5:7e:54:cc:9d:1f:74:57:6f:97:31:
0f:ad:ef:9b:07:cb:1b:3e:80:67:aa:0f:51:61:64:
55:49:77:74:cb:6b:20:89:72:db:68:d5:e3:ad:c0:
91:83:73:25:e8:85:94:4c:2d:56:bf:5d:f2:be:40:
c7:76:e4:68:6d:80:2e:aa:2e:50:2a:62:a7:89:db:
f7:cb:73:ec:de:77:ae:a5:34:95:62:1f:4e:2f:e7:
23:5e:a7:f4:1c:d3:99:83:c2:75:64:c4:a9:86:5f:
f4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:21:FD:26:62:08:FA:5F:BF:F3:21:90:34:9A:8A:70:B9:27:84:F8
X509v3 Authority Key Identifier:
keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f6:8b:a9:58:6d:1c:24:42:0c:7a:4e:51:0f:55:04:58:e5:
f6:95:34:04:a5:4f:e0:f8:f7:74:8e:00:75:39:3f:f3:2a:90:
13:3b:83:c1:27:7b:e6:69:53:20:73:9b:f4:8f:99:50:48:28:
e2:9d:c8:03:49:86:bb:62:cf:7f:84:50:49:2e:fc:90:0f:f0:
fa:31:0a:10:93:12:89:1a:2b:f0:32:63:b6:2f:f4:24:38:1a:
30:ee:bb:44:06:9a:3d:6b:f3:2a:8d:7d:80:89:48:25:f1:67:
8a:5c:4a:6c:b7:95:b3:43:be:8d:ee:74:d7:1a:da:06:bd:86:
f4:3b:92:86:1f:44:de:4b:00:12:ba:3f:33:d5:1e:7b:d4:8e:
b5:98:70:19:75:62:ae:07:04:a1:95:a9:66:d3:59:da:b3:9b:
55:f1:c1:8c:fb:98:ad:33:66:56:cd:85:79:10:e9:ee:b1:a0:
28:46:4f:09:ab:dc:70:80:42:a5:73:53:7d:97:52:36:8d:a5:
05:fe:78:7e:17:a7:92:43:43:90:59:c8:db:28:eb:42:3e:14:
96:c3:14:36:e7:36:39:58:14:8c:aa:a1:3b:d6:56:6f:c2:6f:
19:ab:94:82:85:50:1a:40:5c:be:b8:bc:d0:6e:e8:6b:ad:3e:
0c:8d:ca:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:34:59 2026 by rpki-client