Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json)
Hash identifier: XIEIqLXwlVZrn4jDqNwusm6JHbuZZNp+eGP6XQ8PcLQ=
Subject key identifier: 01:61:99:4D:1C:EF:B6:BC:F7:AB:69:37:08:36:89:FA:1A:4A:F5:03
Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
Certificate issuer: /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Certificate serial: 01A1CF33CA3FD818A6C95DF83E4D732CCE54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
Manifest number: 05A5
Signing time: Thu 12 Nov 2026 10:00:40 +0000
Manifest this update: Thu 12 Nov 2026 10:00:40 +0000
Manifest next update: Fri 13 Nov 2026 10:00:40 +0000
Files and hashes: 1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: mu6CQpXq6qa0wuElttHMhPRIyCQofmO8SuCiEd+leFQ=)
2: _9jmpjcQFwSsKwZDpKMfAdoAfAc.roa (hash: 6IYluVGKVckZ7UbNb6EnuuXW6bdpQGvWpLycJHrQ2uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Nov 2026 10:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cf:33:ca:3f:d8:18:a6:c9:5d:f8:3e:4d:73:2c:ce:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Validity
Not Before: Nov 12 10:00:40 2026 GMT
Not After : Nov 13 10:00:40 2026 GMT
Subject: CN=0161994d1cefb6bcf7ab6937083689fa1a4af503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b3:82:f2:6a:c0:da:16:38:37:56:b1:97:ca:
0e:c3:b9:50:4b:ae:ce:2a:fb:83:68:0c:49:f1:f8:
0f:54:17:90:ef:fe:63:af:2d:3f:97:c3:70:53:66:
5a:2c:dc:63:91:39:3d:cd:99:80:c3:95:23:78:fc:
7a:b1:0d:28:5b:b8:60:b5:1e:3c:e7:4a:5a:97:ac:
59:78:46:19:7e:02:66:bc:85:26:99:05:f1:85:f0:
65:ee:22:7f:85:a8:76:09:91:31:02:ee:ad:ee:54:
c9:64:0a:66:e7:16:04:5f:0b:c2:c2:e0:97:4b:0c:
b3:02:9c:85:b3:10:15:fc:92:a7:ff:54:5b:e9:ba:
25:62:d9:48:c0:c4:e8:2d:5d:93:d1:87:8b:eb:23:
42:8c:53:2c:1a:b5:18:ba:c8:e2:9e:d5:ae:5e:b2:
27:af:f2:92:00:97:2f:a0:98:76:c6:90:96:21:10:
df:a5:58:2e:79:e6:13:71:75:bf:77:86:c3:cd:a7:
98:52:fa:5e:6f:1d:21:6c:1e:45:b0:e1:ff:68:22:
05:3f:54:5b:2b:85:b9:3d:26:e3:0f:7e:60:a0:79:
0e:4b:c0:bf:0a:46:b9:1b:aa:2a:7c:83:7e:ef:04:
1c:3f:a4:90:db:fc:88:8e:db:b6:cd:ad:0e:79:38:
71:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:61:99:4D:1C:EF:B6:BC:F7:AB:69:37:08:36:89:FA:1A:4A:F5:03
X509v3 Authority Key Identifier:
keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fb:1d:ab:78:a1:bb:f8:9f:0e:00:32:40:30:6f:47:0e:d8:
04:1a:32:7a:c4:7c:38:81:86:1d:2b:9f:97:44:32:04:ec:e2:
18:de:9f:68:cb:f0:89:91:c0:2d:d3:88:6f:4b:82:4c:7b:27:
06:36:3a:45:93:31:c0:0d:51:4e:74:6e:ce:5c:ce:75:a4:12:
62:32:39:b6:f1:53:fb:c5:a5:bc:07:4a:59:75:e5:32:18:a9:
24:05:00:6c:27:12:60:23:cc:3f:34:f9:db:ad:99:90:0b:85:
7b:33:53:1b:8c:0b:62:b0:60:8e:8b:36:6d:32:41:ea:8c:ca:
5d:28:1a:c4:d3:d3:c4:30:53:69:fe:18:9d:8b:f2:3f:2a:d5:
24:a2:1a:91:57:2a:c9:3e:ed:55:14:0c:0f:3b:13:d7:c4:b2:
89:12:3b:3a:80:49:ec:e5:c1:6f:2b:a3:fe:8b:7e:da:5c:01:
de:ea:96:ed:9c:82:e9:9e:1d:bd:09:10:83:be:ea:e8:69:d0:
41:33:08:e9:e5:8c:96:42:c5:27:31:62:d5:d1:e4:2e:e5:f7:
db:8b:ac:c1:52:f5:c4:3a:71:ea:53:b2:57:b4:6b:12:c1:39:
f7:3f:91:03:c8:32:50:54:e6:00:bf:62:d5:c6:8d:df:a3:94:
cf:3d:3a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 12 19:57:33 2026 by rpki-client