Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json)
Hash identifier: MUrLtsoFar6KgmWQKhco6CMVWYquO+PDFD3ahOOULCY=
Subject key identifier: 1D:4D:FA:04:23:CF:E4:22:88:91:4F:1A:D6:50:09:F6:C0:47:A4:FF
Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
Certificate issuer: /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Certificate serial: 01A0CC6C46CECA0CC5DAE3F6B3A554165DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
Manifest number: 051F
Signing time: Wed 23 Sep 2026 04:00:43 +0000
Manifest this update: Wed 23 Sep 2026 04:00:43 +0000
Manifest next update: Thu 24 Sep 2026 04:00:43 +0000
Files and hashes: 1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: uRTkYQPmGxLfr/K5m+tX/vKvIrBtZ7wl27iCS1Z1+LA=)
2: _9jmpjcQFwSsKwZDpKMfAdoAfAc.roa (hash: 6IYluVGKVckZ7UbNb6EnuuXW6bdpQGvWpLycJHrQ2uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:6c:46:ce:ca:0c:c5:da:e3:f6:b3:a5:54:16:5d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Validity
Not Before: Sep 23 04:00:43 2026 GMT
Not After : Sep 24 04:00:43 2026 GMT
Subject: CN=1d4dfa0423cfe42288914f1ad65009f6c047a4ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d9:9e:bd:86:06:75:66:04:36:12:0f:9f:79:
e8:c2:35:cd:7c:3d:6c:2f:01:7f:f8:6b:cc:39:d5:
9f:c8:46:64:fb:7c:92:01:f2:54:dc:7e:d5:a9:16:
98:7d:21:4d:7f:1b:20:a1:27:62:75:76:ba:59:98:
be:1f:f7:5e:88:6e:00:7b:86:62:81:b0:20:0d:f7:
08:6b:d8:c6:35:ce:54:2c:ed:4b:ab:39:c1:2a:0c:
b2:a2:8f:7f:d7:e7:37:ea:39:cb:f6:7b:cc:d3:8b:
53:4a:c1:6d:83:33:cc:55:f0:5a:5a:e9:e0:b3:e0:
37:b1:a0:c0:72:bd:d8:b0:22:b3:ff:cb:6c:46:59:
db:3e:ab:10:d7:ca:ee:81:ee:a3:7a:9f:ea:2c:3c:
f0:1c:5e:11:7f:06:39:04:ba:af:ec:4c:09:e6:8d:
b6:bf:73:25:93:c7:80:e7:6f:e1:53:6b:bb:b3:1b:
30:76:85:84:1e:8e:87:2a:3e:93:45:69:65:f9:58:
8b:ec:93:23:33:f4:03:51:e0:09:34:76:29:7a:05:
c7:d8:13:90:78:a2:8a:cb:9b:f8:a5:72:d2:e8:0e:
d5:f8:89:55:9d:a8:66:79:ed:ca:d5:58:c3:78:40:
e8:36:82:8c:31:c9:17:30:da:4f:59:b7:79:03:8e:
26:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:4D:FA:04:23:CF:E4:22:88:91:4F:1A:D6:50:09:F6:C0:47:A4:FF
X509v3 Authority Key Identifier:
keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:4f:72:65:57:d6:59:e3:7a:9d:0a:f3:3d:21:a3:e6:59:5d:
6f:e1:58:ec:6e:83:31:7e:1b:2e:ca:36:e1:f2:ed:e6:b9:bb:
af:0e:c7:13:19:6d:76:30:cc:90:f2:e8:13:a0:7d:04:19:69:
b2:bd:09:c1:58:db:b8:22:58:c5:5d:52:19:45:d0:f6:e1:03:
c4:58:e6:66:f5:c5:d2:42:df:4f:9a:88:0f:b6:51:4e:58:e7:
83:24:51:52:d3:c3:6c:ac:fc:51:71:22:87:95:4c:c9:a7:bf:
49:9e:64:56:c5:b9:f0:9c:06:5c:80:de:13:3c:8a:a2:34:77:
ac:d6:ac:c2:c0:b7:e2:a1:9f:35:a6:20:02:c0:df:f9:c5:2f:
11:28:69:a8:92:38:2d:ac:35:81:f6:12:a1:b5:31:2b:dd:05:
66:33:03:9d:af:b0:de:64:88:85:0d:b3:c8:ba:7f:ac:3f:b4:
8f:b9:64:ad:27:1e:9e:d5:1f:75:a4:54:da:c7:aa:fc:f6:4b:
21:e3:fa:93:3f:4f:97:33:73:12:49:68:75:f9:ac:ba:47:99:
d7:28:78:fa:25:ca:aa:5a:35:dc:94:a6:09:12:2d:78:1e:68:
85:8b:d0:5f:85:d2:4d:bf:86:84:c1:6e:e4:58:4b:a2:b6:1e:
53:8e:8c:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 14:13:40 2026 by rpki-client