
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
File: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json)
Hash identifier: 5gZPk3tgdpNDdd6RM2JUZLOqk136rfs0DZLbNCZxfBg=
Subject key identifier: 31:61:47:8F:1F:EA:CB:41:3F:B8:61:C2:88:DC:31:05:39:56:C6:2F
Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
Certificate issuer: /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Certificate serial: 01A0CCA38C2268B2A9218E23DC14DCAAD22F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
Manifest number: 0474
Signing time: Wed 23 Sep 2026 05:01:05 +0000
Manifest this update: Wed 23 Sep 2026 05:01:05 +0000
Manifest next update: Thu 24 Sep 2026 05:01:05 +0000
Files and hashes: 1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: e6FYuj62hKv8aqGdLvVaxdj+XxcEzdJQYmwSINDJWUo=)
2: FKy4QquWDiXsB6434vLtVQiZ1BI.roa (hash: E7KgcSUkFp282kfhM/A9rdhpcSBu+wYieQbkPSRtk8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cc:a3:8c:22:68:b2:a9:21:8e:23:dc:14:dc:aa:d2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Validity
Not Before: Sep 23 05:01:05 2026 GMT
Not After : Sep 24 05:01:05 2026 GMT
Subject: CN=3161478f1feacb413fb861c288dc31053956c62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c8:f8:d2:30:97:ed:92:1f:3d:30:35:61:d8:
e4:c3:31:9a:40:b8:01:70:79:7c:51:c5:8b:d0:ce:
00:37:09:50:ef:fc:2a:a6:1e:16:ea:e7:eb:cf:93:
c9:14:4e:44:e6:17:e0:cd:bd:93:9a:66:58:91:fa:
69:f8:7d:36:8f:4c:41:49:e9:4d:a8:cc:65:0a:4c:
06:a2:05:94:aa:49:ce:88:9f:d2:f3:d0:b3:e5:31:
7e:62:03:00:18:6f:6d:bb:ac:b8:34:c4:3a:9c:c9:
c9:9c:e6:ff:d8:4a:8a:78:9b:96:4f:14:da:80:53:
87:fd:20:23:5c:a1:33:f5:e4:b0:b2:5b:ac:ee:f5:
2e:fd:21:a5:01:1f:27:aa:88:96:95:f5:b9:98:77:
47:cf:51:ed:0e:19:c3:56:33:d8:cd:e0:8d:32:bf:
cb:f7:4a:ad:5c:86:ff:ab:42:cb:95:af:bf:22:be:
81:40:c8:96:49:18:08:66:50:e7:2e:90:a6:8f:e4:
27:43:a4:3b:d6:6c:e1:b3:71:fa:d2:f4:a4:9a:54:
2f:5a:d4:12:16:93:04:95:50:c8:c9:fc:29:9b:4f:
d6:80:d5:83:b8:3f:7e:f9:48:63:44:29:f1:36:7f:
a6:72:d1:4a:16:35:5b:0a:9a:7c:60:fb:4d:19:bb:
2f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:61:47:8F:1F:EA:CB:41:3F:B8:61:C2:88:DC:31:05:39:56:C6:2F
X509v3 Authority Key Identifier:
keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:61:55:50:85:b4:f3:76:02:8c:1c:ad:46:a7:87:1d:70:fe:
da:bc:d6:01:a8:1b:3a:cc:30:86:ac:4c:03:e0:aa:29:75:a2:
c0:63:58:c3:c8:74:a6:ec:4b:55:ae:c2:92:60:10:34:a0:cb:
91:8a:24:4a:21:9c:cc:5e:4a:c6:77:d8:57:b6:89:88:69:4e:
59:c6:06:51:56:68:75:c4:05:9d:11:ee:cf:ee:1f:87:f2:2e:
0b:65:90:5a:66:5f:b9:ac:ed:b3:1e:a7:c0:fa:ee:df:08:e8:
80:b5:06:da:9f:7f:e7:e8:8c:e8:0e:0d:7c:bd:2e:0c:f3:1b:
d1:88:a8:0c:a9:f8:92:66:55:39:76:2d:77:9e:f1:f4:7e:b4:
49:2e:00:a0:70:54:89:e6:0c:bc:d8:47:bf:e3:98:da:2b:86:
d9:5d:11:38:7e:41:fd:c9:13:c8:62:55:e0:76:96:0d:20:10:
32:ac:ff:f4:3a:71:5a:6a:86:60:68:3c:88:3f:77:82:d9:10:
07:ea:43:d1:3f:85:ff:49:72:28:d3:b8:97:47:8f:ac:60:3e:
f7:1b:fd:a9:d6:46:17:ae:52:ef:8f:4a:12:44:3e:d3:bd:63:
03:2e:e0:6b:be:f8:57:d3:df:74:ee:eb:d3:e3:e6:52:da:2f:
36:31:4b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:55:02 2026 by rpki-client