Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
File: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json)
Hash identifier: CLJA9/g/SvteBnf0uYoWp1QjtoTsGVsTop7LlAwpDMs=
Subject key identifier: CF:08:94:5B:79:0F:DD:0C:18:FD:6C:77:0B:BE:79:5D:DA:DA:81:8E
Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
Certificate issuer: /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Certificate serial: 019D27E025A11F43E12B4349B4DF21302684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
Manifest number: 0291
Signing time: Thu 26 Mar 2026 02:01:34 +0000
Manifest this update: Thu 26 Mar 2026 02:01:34 +0000
Manifest next update: Fri 27 Mar 2026 02:01:34 +0000
Files and hashes: 1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: W3Im/S5urG110y9S4Ov+Mtgafwe0rRXRXK3dePd9c1g=)
2: FKy4QquWDiXsB6434vLtVQiZ1BI.roa (hash: E7KgcSUkFp282kfhM/A9rdhpcSBu+wYieQbkPSRtk8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:25:a1:1f:43:e1:2b:43:49:b4:df:21:30:26:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Validity
Not Before: Mar 26 02:01:34 2026 GMT
Not After : Mar 27 02:01:34 2026 GMT
Subject: CN=cf08945b790fdd0c18fd6c770bbe795ddada818e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:d0:cf:ff:85:24:3f:80:d6:81:81:20:f9:cf:
38:d7:4b:c9:4e:80:dd:95:66:0a:58:55:18:5f:57:
62:2f:3c:57:2f:76:49:31:6d:68:c8:1c:2c:14:4a:
dd:e6:55:e3:81:63:7e:cf:2f:cc:20:9c:3e:b1:b2:
84:17:b7:a7:df:93:b3:6f:6d:c8:f2:34:bd:6c:8f:
47:55:8a:c4:ca:e0:12:f6:52:21:b4:19:76:a6:4f:
47:95:1a:9f:e4:7b:57:d2:48:37:b8:fc:b4:79:29:
3e:1f:35:6b:c1:ec:78:04:21:9e:4c:c0:56:24:d1:
28:53:e0:b4:63:2f:ed:22:53:18:be:9e:49:9e:34:
e6:43:83:3e:79:46:d1:70:58:3c:26:4e:ad:77:06:
14:96:e9:4a:ba:a1:86:46:9d:3a:f4:ae:3a:d1:23:
dd:cf:58:15:d8:85:e0:67:c4:42:88:36:e7:8a:c6:
30:26:0a:68:29:ba:ff:b2:53:bd:55:9e:2f:5b:0b:
4e:3b:eb:a7:7f:98:87:47:63:43:f2:12:0f:a1:79:
13:cc:9c:23:19:d6:23:9a:19:20:54:8d:85:37:31:
ba:6d:dd:a8:74:53:33:cc:eb:80:3d:e8:be:a6:a5:
6a:e2:1b:c6:f3:61:fc:61:00:aa:9b:6c:cb:7f:56:
27:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:08:94:5B:79:0F:DD:0C:18:FD:6C:77:0B:BE:79:5D:DA:DA:81:8E
X509v3 Authority Key Identifier:
keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f8:8b:1d:69:c7:16:86:d2:25:2b:c0:b2:43:a7:6b:1b:1e:
8f:9b:9e:d8:84:ca:12:99:10:75:75:34:8e:4e:74:15:99:48:
49:8a:d7:eb:8b:01:5b:7d:ba:86:72:11:2c:cd:dc:6f:bc:21:
7d:c1:ab:52:e8:7a:1a:fb:eb:6e:e7:40:32:8c:50:d9:c1:b7:
28:e4:cd:18:09:22:14:ea:f5:cf:d5:9d:f3:31:a8:dc:07:9c:
8c:c5:f2:69:67:09:fd:5b:0c:8d:57:eb:7a:c2:fd:99:d6:44:
26:b6:37:84:41:b4:6c:b9:65:fd:22:1a:20:9f:8b:a2:ec:9a:
2b:87:50:ee:cc:2e:bb:b3:ce:67:da:17:15:a3:d4:ab:60:75:
a8:2a:00:ce:cb:5e:00:bf:21:3b:e0:15:45:36:4f:f9:1a:8a:
d5:a6:c2:6b:c6:a2:25:df:bd:d0:43:13:1a:e0:2a:20:a0:83:
5b:27:73:43:b3:7a:49:dd:f6:04:b0:7c:0c:31:0a:eb:c7:0c:
66:68:c3:9c:50:29:3d:6b:e8:e0:f1:d2:0b:16:1c:c1:a1:5d:
ac:a4:d7:b4:aa:ec:05:0c:f7:62:2c:90:d9:5d:8b:7d:4a:ee:
aa:74:5c:e6:3f:4c:ac:a5:58:d3:37:a1:a2:b9:17:e9:33:a4:
01:87:9e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:44:26 2026 by rpki-client