Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json)
Hash identifier: PnWM0xDwoEBh+7CQ8le/JqLxdMpA2e+pnp/9rHM2G8k=
Subject key identifier: 0F:BD:1C:00:80:EC:DC:1F:BF:79:3B:7B:5A:9A:2C:51:6D:53:7A:C6
Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
Certificate issuer: /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Certificate serial: 019E1CEBCA9E12E5F7E31DBD77C1CEBF6845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
Manifest number: 03BB
Signing time: Tue 12 May 2026 16:01:15 +0000
Manifest this update: Tue 12 May 2026 16:01:15 +0000
Manifest next update: Wed 13 May 2026 16:01:15 +0000
Files and hashes: 1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: iwTjScahjdq4Bxxf6wdaVu0ASwfvh/aTYhy8qO+ppxI=)
2: _9jmpjcQFwSsKwZDpKMfAdoAfAc.roa (hash: 6IYluVGKVckZ7UbNb6EnuuXW6bdpQGvWpLycJHrQ2uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:ca:9e:12:e5:f7:e3:1d:bd:77:c1:ce:bf:68:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Validity
Not Before: May 12 16:01:15 2026 GMT
Not After : May 13 16:01:15 2026 GMT
Subject: CN=0fbd1c0080ecdc1fbf793b7b5a9a2c516d537ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:92:ce:ca:22:d4:25:89:f9:58:9a:c3:bb:54:
30:6f:2b:d6:62:c1:a4:5c:99:84:18:63:dd:60:d7:
06:d4:9e:02:b6:64:48:b4:3d:e1:87:25:62:3c:61:
a1:97:df:de:06:cb:cc:e8:20:ff:4c:8f:44:b5:f7:
f2:f9:99:e8:30:30:fe:e7:70:36:94:2e:e4:f4:4b:
fe:9b:ed:94:c2:e6:bf:15:b8:bb:80:94:4f:c2:15:
ce:f2:1e:05:08:a2:6c:51:56:75:28:61:39:5f:08:
c1:91:99:69:09:69:ef:b7:66:fc:55:54:cd:0f:51:
0e:76:60:fb:ac:52:41:26:7c:8a:c1:99:aa:61:9f:
65:b2:dd:59:4b:dc:a0:1f:9f:c1:fe:85:89:d6:c1:
90:69:fc:ea:8a:d0:b1:3b:44:0f:c2:8b:50:e4:e5:
09:5e:1a:11:7a:3f:f6:4e:8b:ba:bd:62:1c:25:5d:
50:97:6e:95:1c:e0:32:54:93:7b:a6:70:01:3b:32:
8f:58:85:61:1d:4f:4e:cf:5a:d0:90:9e:27:42:6e:
78:34:2e:f5:2f:cc:b0:4b:78:f9:e8:0c:e3:49:2a:
27:4d:64:95:80:22:6e:60:dc:7f:1a:10:38:0a:f9:
c4:14:2c:7e:cb:7e:a7:41:6d:a0:a4:ff:64:c9:92:
01:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BD:1C:00:80:EC:DC:1F:BF:79:3B:7B:5A:9A:2C:51:6D:53:7A:C6
X509v3 Authority Key Identifier:
keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9c:d0:62:69:1d:bd:36:a1:f0:b6:86:2a:8e:da:73:59:f1:
e1:5e:83:cd:45:d4:86:bb:43:3f:de:69:a8:7e:f2:f7:a0:60:
11:40:bf:f9:1e:f5:d7:12:de:6f:97:55:1d:07:bc:5c:64:14:
60:3e:43:d3:d5:0d:7e:70:e7:3d:f9:13:6b:c2:28:87:75:0d:
95:d2:79:9d:3e:0f:67:bd:45:15:46:34:75:be:c2:23:3c:f7:
a0:b8:87:56:21:78:e5:11:91:0a:39:70:ab:ff:b8:10:22:b7:
57:f4:e7:59:2a:c8:fd:04:d4:da:68:84:63:00:6d:6b:c0:bb:
39:45:6f:d2:65:bb:95:75:8e:98:29:fc:1c:9e:82:ce:4a:22:
94:96:13:06:14:0b:74:a2:df:b5:59:cf:cb:6c:de:bc:de:dd:
c8:69:3b:39:8d:70:0b:c6:d3:f3:90:09:4a:3a:24:a4:7f:4b:
73:94:62:2a:b9:81:74:d0:18:3e:1b:64:cc:fb:7b:67:e2:d1:
59:ec:38:de:83:7d:20:c9:01:cf:cb:9e:3c:85:eb:04:5f:d4:
a7:1d:55:5b:d0:29:b1:79:cf:85:dc:b0:2d:31:27:ab:c2:59:
db:14:a9:51:45:a9:e7:fa:e0:c3:6b:50:65:c9:ee:e9:15:0c:
9b:72:7b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:21 2026 by rpki-client