Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
File: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json)
Hash identifier: vwbUfblBQAZ3/OdCzxOewcGINsso336WA6lCW+j+We8=
Subject key identifier: 92:E0:05:CF:80:F1:CD:7F:90:3E:E1:FF:0F:03:4F:EC:B1:6B:C8:58
Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
Certificate issuer: /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Certificate serial: 019E1D2280BEF411A7FE487BA34B55288E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
Manifest number: 0310
Signing time: Tue 12 May 2026 17:01:00 +0000
Manifest this update: Tue 12 May 2026 17:01:00 +0000
Manifest next update: Wed 13 May 2026 17:01:00 +0000
Files and hashes: 1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: bCZ0wWj3o5MlX8tBA3i+y6dMxLEZr/dXpid28iVs6Ns=)
2: FKy4QquWDiXsB6434vLtVQiZ1BI.roa (hash: E7KgcSUkFp282kfhM/A9rdhpcSBu+wYieQbkPSRtk8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:22:80:be:f4:11:a7:fe:48:7b:a3:4b:55:28:8e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Validity
Not Before: May 12 17:01:00 2026 GMT
Not After : May 13 17:01:00 2026 GMT
Subject: CN=92e005cf80f1cd7f903ee1ff0f034fecb16bc858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:47:d1:d7:5a:70:58:b7:91:5d:95:d5:93:37:
39:a3:1c:46:37:aa:b1:5e:f4:cf:10:f8:e0:44:13:
a0:3f:19:e2:3d:bf:88:8d:5e:f5:75:8e:67:e3:20:
51:d8:3e:ea:1c:2e:5d:30:c4:e4:af:25:41:e4:50:
e3:ca:6d:ac:f8:9e:2e:7f:3b:aa:45:bd:c4:03:4c:
f7:3e:d5:9c:7a:2d:4f:0c:98:fa:da:b8:27:1b:fc:
10:f9:4a:1f:10:ee:2a:7a:c5:7c:3a:0f:4d:f9:c6:
09:82:46:55:f4:bd:aa:7b:c5:49:4f:ca:02:14:bb:
4a:eb:36:b2:11:c9:56:63:9b:e8:85:6d:c4:6b:9c:
1a:89:18:7f:58:cf:1a:c6:6e:34:d5:e9:0d:0c:4d:
58:2a:de:34:06:33:49:48:50:75:d7:05:b4:74:ce:
86:c7:e1:bf:fa:01:83:d1:d1:20:9b:6c:bb:71:0b:
2d:2f:58:ec:8a:bf:4b:33:9b:29:9a:37:df:43:46:
42:d7:4c:55:09:c3:af:cb:ce:ee:88:3d:98:7a:4a:
c5:68:ba:3c:fc:77:89:55:e3:60:21:1e:fd:4d:57:
08:81:0b:0c:10:af:3d:28:a0:bf:08:85:ac:0e:6b:
e0:d4:4c:a0:87:09:69:d8:7d:bf:47:78:8d:e1:3d:
b6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:E0:05:CF:80:F1:CD:7F:90:3E:E1:FF:0F:03:4F:EC:B1:6B:C8:58
X509v3 Authority Key Identifier:
keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:4d:f3:6d:8b:b2:d4:5f:7e:04:88:ad:f7:d2:c3:d9:d7:84:
56:bb:fa:af:d0:b6:9a:45:d4:9c:36:ec:af:56:9c:f4:d1:8e:
11:30:2f:40:f1:a6:42:2e:60:66:bd:e0:39:d9:96:1e:ba:d3:
27:1a:5a:39:e1:8c:a0:be:3f:b0:67:6d:3c:63:d1:08:9d:38:
89:9d:9c:f0:9f:38:89:cd:96:8e:d4:16:db:01:b7:e3:4b:db:
48:1a:28:ca:e4:18:18:8e:f1:44:56:21:55:4f:6f:6d:7d:77:
7a:b4:6a:0b:33:2f:55:56:a5:4a:89:54:48:9c:25:a7:28:12:
2f:04:a7:ff:ba:f2:6e:cb:73:9a:b9:d0:cb:e6:8a:fe:d0:b7:
b4:7b:ff:f8:72:c4:24:b2:16:f4:35:58:5d:7b:8e:d2:a0:6a:
b5:59:e4:c1:68:d6:a7:ed:42:80:f3:da:9b:6d:bf:8b:e5:d0:
bb:d6:51:29:72:b0:3c:4b:c5:ab:95:b9:d4:a2:ca:4e:5e:4f:
66:d6:9f:08:eb:93:af:98:24:87:ed:21:0e:ed:13:0b:7a:8f:
83:46:0e:69:f7:e2:d0:47:d6:32:65:47:a9:32:f3:c5:72:ed:
b6:dc:85:e3:49:24:94:bc:6e:32:7b:1c:49:38:a4:73:af:ef:
40:cc:7d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:58 2026 by rpki-client