Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
File: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json)
Hash identifier: iLNpie+85x49G6JiR3bhi5BFOlF8RyOihou3fq4gSKw=
Subject key identifier: F3:C8:86:57:AB:00:C9:64:2D:DF:6F:4D:4B:C5:BD:C4:D4:24:52:CA
Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
Certificate issuer: /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Certificate serial: 019F91DA6E1115DF926945C27D5423E64670
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
Manifest number: 03D1
Signing time: Fri 24 Jul 2026 02:00:38 +0000
Manifest this update: Fri 24 Jul 2026 02:00:38 +0000
Manifest next update: Sat 25 Jul 2026 02:00:38 +0000
Files and hashes: 1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: 4AMl65L/GnWe+W4r8+8QBuiQJ0/MvhScuuepRiwiJcw=)
2: FKy4QquWDiXsB6434vLtVQiZ1BI.roa (hash: E7KgcSUkFp282kfhM/A9rdhpcSBu+wYieQbkPSRtk8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:6e:11:15:df:92:69:45:c2:7d:54:23:e6:46:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Validity
Not Before: Jul 24 02:00:38 2026 GMT
Not After : Jul 25 02:00:38 2026 GMT
Subject: CN=f3c88657ab00c9642ddf6f4d4bc5bdc4d42452ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d3:89:78:e4:c9:f0:ff:b3:ba:b4:4a:71:dd:
4d:bd:94:33:6c:35:fe:76:fa:8c:f4:dc:f8:b9:45:
1b:35:54:21:94:97:ad:c4:a0:4d:b3:60:d2:1c:94:
d3:8f:af:c9:b1:9c:38:dc:c5:ef:0e:2a:43:1e:69:
00:d2:03:89:9c:65:93:01:e0:16:a6:ac:75:51:04:
c0:e1:f0:d2:ab:fb:e7:69:27:50:47:7b:53:4a:ac:
13:c2:f3:b0:00:4b:8c:1a:67:1e:17:24:fd:64:09:
74:33:8d:79:e4:88:aa:b8:a0:f6:71:08:c8:df:46:
6e:ca:85:60:19:b1:6e:6c:90:d4:3e:e5:35:a1:e7:
22:18:35:c2:c9:28:bd:3e:43:c4:b6:1f:7a:27:32:
78:41:1b:2b:fe:6b:41:45:f5:22:5e:e0:50:a4:77:
1e:56:b6:ca:82:79:fb:1c:09:28:92:fc:77:ca:87:
6f:b8:9a:40:ee:e3:36:7d:e4:b3:2c:37:3c:3c:ee:
46:10:c8:0c:5f:cb:17:4f:32:36:dc:18:32:a0:6f:
15:0a:7c:e5:ff:c3:e2:e8:b3:ad:f2:c7:3b:4c:85:
46:09:fa:94:86:07:12:44:82:53:b3:14:37:d3:f2:
22:50:bc:82:e3:99:e6:29:d0:7e:50:06:30:b4:cc:
de:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:C8:86:57:AB:00:C9:64:2D:DF:6F:4D:4B:C5:BD:C4:D4:24:52:CA
X509v3 Authority Key Identifier:
keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:ac:87:f7:64:9d:41:37:23:b6:c1:ac:ec:16:26:70:0c:06:
ab:b8:44:e3:24:6f:be:2a:82:b6:86:12:03:90:8e:fc:d7:a5:
e3:4c:a0:44:f5:cb:94:5a:88:bf:8e:ad:df:cb:03:61:6d:75:
84:87:c6:ec:2b:8f:66:62:70:63:00:84:27:11:7d:0c:09:fc:
f9:56:6f:91:dd:e7:97:d4:ec:87:0d:fe:ec:e1:3f:e5:22:c8:
8b:30:1b:ca:8f:f2:ba:ae:c0:0f:8b:ef:b3:ce:22:71:95:d7:
a5:64:b4:c6:30:eb:24:02:58:5e:74:6d:38:cf:f2:06:23:7b:
43:43:7f:82:ee:d2:63:2b:4c:b4:a4:d6:30:ac:9d:9a:d6:03:
db:df:6c:79:c0:39:e2:e5:43:d6:79:eb:2a:10:8d:13:01:b5:
42:ea:9e:10:62:56:f1:17:0d:df:e2:7b:0f:41:10:aa:6d:af:
ba:e4:3b:df:f1:c5:d1:43:45:e3:01:24:45:ac:bf:a5:a3:bd:
ce:de:e7:2f:11:a7:e8:2f:ee:c5:be:07:2c:f6:b7:24:bf:b4:
ec:48:53:99:fb:9f:d3:9e:c4:27:57:09:f0:fd:8e:64:2c:ec:
a3:a8:07:dd:3d:bd:1e:f3:73:45:27:c2:c1:b6:28:b5:ea:c1:
a8:6c:d8:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:39:36 2026 by rpki-client