Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json)
Hash identifier: cSpF9fmNisIYFYinRXHGa6xLfFr5/jT2MwV8vb3p9I0=
Subject key identifier: 60:32:61:C8:6F:BA:B8:0C:AB:00:64:00:33:24:9F:F9:C0:D9:0C:29
Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
Certificate issuer: /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Certificate serial: 019F8FB50CC64432239D2B92E81C3346AD33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
Manifest number: 047B
Signing time: Thu 23 Jul 2026 16:00:34 +0000
Manifest this update: Thu 23 Jul 2026 16:00:34 +0000
Manifest next update: Fri 24 Jul 2026 16:00:34 +0000
Files and hashes: 1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: u5JgVB8b23lBAjdoe5YIi/sdsr7tmDqmMQXFrG/niQo=)
2: _9jmpjcQFwSsKwZDpKMfAdoAfAc.roa (hash: 6IYluVGKVckZ7UbNb6EnuuXW6bdpQGvWpLycJHrQ2uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:0c:c6:44:32:23:9d:2b:92:e8:1c:33:46:ad:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Validity
Not Before: Jul 23 16:00:34 2026 GMT
Not After : Jul 24 16:00:34 2026 GMT
Subject: CN=603261c86fbab80cab00640033249ff9c0d90c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7d:4e:5b:27:06:a8:89:af:4a:54:26:0b:e9:
67:fb:00:8e:aa:69:26:6a:09:b8:ab:b7:d4:68:57:
2f:bf:0d:fc:60:6b:f5:c8:4d:bd:4d:e7:f8:7f:6e:
b9:4d:74:2b:14:0d:c1:ea:40:07:f2:40:f5:41:4a:
c8:66:85:6e:e3:93:ca:2d:87:6e:a7:fe:8d:dd:04:
80:a2:47:43:5b:c2:69:e2:e9:6c:d8:dd:76:8c:ae:
93:01:ec:55:a8:14:34:34:3a:7c:7d:aa:23:a1:09:
0b:b4:e6:e1:4b:b1:ca:0c:c2:28:3a:e0:7d:fb:a6:
f6:b9:db:64:cd:2f:c6:5e:bf:33:3d:8b:ee:d3:e6:
bf:f0:55:ad:2f:f3:73:21:d9:bc:7f:bf:c5:a9:4d:
d0:81:58:dd:34:8f:37:f9:fe:60:02:7f:c0:47:96:
19:fe:bd:55:9d:fe:67:d5:14:96:53:5e:f0:3e:56:
21:29:fa:08:12:ef:fa:e5:93:02:4a:a6:00:17:55:
94:ee:93:af:b9:0c:90:62:c0:ec:1b:e2:cf:16:07:
e6:6a:f1:1c:8c:c3:3b:48:a1:c7:96:70:57:a3:f4:
74:00:e3:e5:46:23:13:20:62:c3:ae:67:a0:04:16:
06:ec:ed:a9:fd:ce:8b:26:c4:61:65:9a:79:86:55:
15:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:32:61:C8:6F:BA:B8:0C:AB:00:64:00:33:24:9F:F9:C0:D9:0C:29
X509v3 Authority Key Identifier:
keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:6b:34:3e:b5:17:de:6f:71:c1:40:48:b3:3b:3e:8b:f7:57:
87:32:e8:5e:f3:a1:79:b9:50:38:4d:61:a3:bc:f2:41:23:3c:
24:c9:a1:73:a1:50:73:56:fb:7e:fd:01:24:63:93:70:99:47:
5b:78:00:38:3d:05:81:fb:65:99:5b:6b:37:71:b0:77:df:9e:
d5:8c:88:c0:18:01:3d:63:b0:b7:27:db:cf:1a:69:3c:e5:26:
83:4f:0d:8a:db:a9:04:f5:47:9a:bf:90:a2:d0:bf:b8:77:1e:
4a:b9:a1:97:c4:e7:7d:a8:e1:1e:27:33:6b:f3:7b:ff:78:49:
3d:0a:e9:33:f1:40:01:fd:61:87:38:4c:e3:a9:24:02:ee:18:
92:cc:a4:80:0c:27:d5:ad:59:8c:eb:8b:5e:47:1f:56:95:75:
9c:75:c0:55:7b:61:39:b8:03:d7:3f:65:36:98:9f:51:3b:2f:
4c:5c:5e:30:b7:c1:1d:f6:34:ee:08:bb:83:92:f2:1f:a5:e7:
15:6d:58:5e:af:02:3b:5f:69:03:0e:d9:9f:f4:b2:99:17:b6:
c2:e5:68:4c:27:b3:b3:7b:9c:a9:16:89:81:0f:bc:9a:44:c7:
57:c9:a9:d3:14:6f:0d:b6:01:8c:3d:6b:1a:24:19:7d:f6:12:
29:5f:6d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:14:26 2026 by rpki-client