Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: jHfduv0d3KCjAQTLo//cQbHir1UlZ8NtnVy/JD1ShDg=
Subject key identifier: 84:B9:A8:66:B7:29:6E:64:07:03:95:CC:3B:75:0A:A6:43:BE:02:F2
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 01A139DB92869F3D13990EEC9683F5DF89A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 1214
Signing time: Wed 14 Oct 2026 10:00:53 +0000
Manifest this update: Wed 14 Oct 2026 10:00:53 +0000
Manifest next update: Thu 15 Oct 2026 10:00:53 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: lFwfbf/muPaMx4P65Q5TOMOhpK6Ov5JmWH5wMwVtdEU=)
2: MlQTgjgh5uSzQaXxeS49FotuS_Y.roa (hash: 0wxpEKJE8z5xrE9cQTX/pfOjLHngXIh1dDaRLCQI7cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 07:28:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:39:db:92:86:9f:3d:13:99:0e:ec:96:83:f5:df:89:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Oct 14 10:00:53 2026 GMT
Not After : Oct 15 10:00:53 2026 GMT
Subject: CN=84b9a866b7296e64070395cc3b750aa643be02f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:07:0e:04:1f:f7:4d:10:46:14:2c:1f:98:
97:cc:a6:70:30:74:82:c3:aa:3d:92:24:9c:1d:6b:
c7:55:0e:e4:de:03:ba:98:52:40:11:03:33:96:a0:
30:f1:1e:76:58:78:b5:57:f2:12:a0:fd:db:8a:68:
f6:78:6a:f8:d2:22:8a:ca:eb:e1:d9:2a:0b:7b:7d:
7c:d7:c6:4e:c2:a4:21:8e:93:ed:81:39:1f:2a:03:
03:a6:01:e7:b2:ff:dd:09:0f:08:b9:15:2d:8f:f0:
ec:e0:25:75:45:bf:ea:36:94:0c:d4:f3:c4:36:63:
91:54:03:76:b4:0a:59:33:34:de:f4:90:c7:f8:09:
00:a6:8c:52:b7:b7:63:bb:9d:7a:a1:76:cf:8b:8d:
eb:75:8a:1f:e4:15:67:cf:98:9f:23:40:f4:df:09:
cb:12:03:0f:8a:8a:2d:b2:9a:19:10:fe:a4:96:ab:
06:c1:3e:e4:3e:28:19:a7:60:bc:53:7e:d0:88:b4:
81:33:5d:b0:df:56:10:80:9c:82:3a:e8:b3:77:ae:
d9:bb:7e:95:1c:da:9f:ad:c0:4c:15:c3:fe:41:88:
87:0f:dc:7f:75:c6:3d:68:44:37:9f:c1:95:c2:40:
dc:da:bb:6a:86:83:39:af:e2:82:de:39:fa:54:3a:
75:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B9:A8:66:B7:29:6E:64:07:03:95:CC:3B:75:0A:A6:43:BE:02:F2
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d0:22:f4:a7:61:d8:d3:1a:83:8a:f5:01:5a:94:36:99:3c:
d4:38:f3:81:1b:ac:26:c4:a6:41:c2:02:95:13:67:ea:16:81:
4a:07:7d:fd:0c:52:09:b4:2b:f2:31:b8:98:39:6e:85:27:63:
2b:b4:a6:e3:df:c1:62:2a:76:91:10:15:af:f1:4b:8b:8d:ca:
22:90:23:2d:97:f6:4c:03:a5:9a:cb:01:04:70:3d:0c:7d:4a:
39:56:9b:77:be:3e:5d:35:34:dd:de:7b:75:fe:3a:c3:fa:9f:
b6:da:b3:ab:90:6c:87:13:2f:64:db:e2:d1:57:47:37:73:6f:
da:da:e4:f8:64:42:2d:82:61:39:02:cc:9d:48:4b:64:d0:44:
3a:09:10:45:0f:d6:3f:58:c5:0b:9c:17:5d:45:a5:24:8a:6b:
51:ec:50:f3:1e:d2:b9:8b:5f:cb:31:f4:d9:79:6a:db:2a:33:
f1:b7:96:c9:06:a9:1d:a7:cb:69:ba:3c:a9:fd:0e:da:64:b6:
6d:72:2f:5f:07:4b:78:da:f7:22:69:e5:39:45:98:9e:91:a5:
99:75:ac:c7:8e:30:58:54:c8:58:eb:9f:28:a0:24:f5:30:4f:
ce:2c:ed:e2:c0:6a:c7:d8:f1:75:6f:4f:fe:1f:88:3e:f4:47:
7d:3d:12:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 13:04:35 2026 by rpki-client