Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/f28f0d-2141-4332-8ad5-ccbff8e9bc37/1/1-FF32BAciIEYtZ3yNaYDWCF7E7w.mft
File: 1-FF32BAciIEYtZ3yNaYDWCF7E7w.mft (raw, json)
Hash identifier: yq3T3dTV6SfXOaM2YszvL3VPiuZMveIxkzb3nV1JLfI=
Subject key identifier: 4B:56:70:65:82:25:38:BD:68:3C:0A:7A:2C:E5:3A:4D:BB:DF:00:8F
Authority key identifier: F8:51:77:D8:10:1C:88:81:18:B5:9D:F2:35:A6:03:58:21:7B:13:BC
Certificate issuer: /CN=f85177d8101c888118b59df235a60358217b13bc
Certificate serial: 01A172EF973AFF0DEA83039FD3453D8981FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FF32BAciIEYtZ3yNaYDWCF7E7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/f28f0d-2141-4332-8ad5-ccbff8e9bc37/1/1-FF32BAciIEYtZ3yNaYDWCF7E7w.mft
Manifest number: 56
Signing time: Sun 25 Oct 2026 12:01:06 +0000
Manifest this update: Sun 25 Oct 2026 12:01:06 +0000
Manifest next update: Mon 26 Oct 2026 12:01:06 +0000
Files and hashes: 1: 1-FF32BAciIEYtZ3yNaYDWCF7E7w.crl (hash: m3NyXU9w/zOFN4YX6kFvQnULVsqLYPmXLrR9DV0DXoE=)
2: e64_xv_SVSzH8QHXc4fcsscKyJs.roa (hash: eCSwYZ7VkqoI2LvR6sLb6i00/lc9o3/Z5vZFSSuJFtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/f28f0d-2141-4332-8ad5-ccbff8e9bc37/1/1-FF32BAciIEYtZ3yNaYDWCF7E7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/f28f0d-2141-4332-8ad5-ccbff8e9bc37/1/1-FF32BAciIEYtZ3yNaYDWCF7E7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FF32BAciIEYtZ3yNaYDWCF7E7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:ef:97:3a:ff:0d:ea:83:03:9f:d3:45:3d:89:81:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f85177d8101c888118b59df235a60358217b13bc
Validity
Not Before: Oct 25 12:01:06 2026 GMT
Not After : Oct 26 12:01:06 2026 GMT
Subject: CN=4b567065822538bd683c0a7a2ce53a4dbbdf008f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:42:2b:d7:81:e8:00:ea:da:84:0e:e9:c6:23:
df:01:30:34:cf:b6:40:25:69:0a:97:7f:80:43:3f:
4f:db:ab:f5:a9:fd:f5:ee:59:1e:28:a7:9c:f8:b9:
21:10:43:3e:0c:c3:61:6f:cb:6a:12:f4:78:e7:1e:
e2:ef:b2:0c:d8:7c:77:f8:ac:1a:df:0b:08:02:fc:
88:9d:f1:bf:e0:6d:34:19:b7:67:28:6c:21:a6:fe:
34:a5:41:03:45:ab:80:6f:c7:97:0a:26:b3:c3:22:
3c:81:3b:80:a4:8e:6b:f1:1b:e3:49:cf:34:ea:2a:
86:17:95:e6:27:00:0e:84:02:57:5a:69:28:ff:0e:
e7:b1:95:85:7f:e9:4e:ef:11:60:0e:a2:95:8b:bc:
83:bd:44:9d:e6:38:b3:91:1e:8c:15:35:7a:5a:25:
e6:45:8a:47:a1:5f:26:66:59:b2:08:c8:12:7c:79:
e5:b2:d4:3c:e8:f7:b4:9d:75:c8:63:fc:05:bb:fa:
6b:b6:93:58:0d:52:83:84:31:dc:71:2b:2f:d2:4f:
96:6c:54:ff:1d:2f:df:73:ce:61:3b:bd:88:f4:28:
34:2a:d9:c8:18:e0:fe:6d:78:a4:04:3f:c0:14:cc:
d0:22:b0:dc:32:68:ad:39:d7:f5:d9:2f:d6:db:52:
e8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:56:70:65:82:25:38:BD:68:3C:0A:7A:2C:E5:3A:4D:BB:DF:00:8F
X509v3 Authority Key Identifier:
keyid:F8:51:77:D8:10:1C:88:81:18:B5:9D:F2:35:A6:03:58:21:7B:13:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FF32BAciIEYtZ3yNaYDWCF7E7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f28f0d-2141-4332-8ad5-ccbff8e9bc37/1/1-FF32BAciIEYtZ3yNaYDWCF7E7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/f28f0d-2141-4332-8ad5-ccbff8e9bc37/1/1-FF32BAciIEYtZ3yNaYDWCF7E7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d3:fa:d9:75:cb:14:cb:15:e2:f4:41:bf:09:3d:7d:40:92:
20:ac:40:0e:f2:32:7d:19:da:e8:6f:66:21:93:ca:86:de:03:
34:c1:0a:72:2f:0b:8f:f5:d5:b8:86:6d:9f:ff:2e:9b:39:cc:
d6:a8:9e:d7:47:75:a5:bf:a1:3b:50:0c:e3:3e:53:35:c0:0c:
38:d2:40:68:21:bd:49:6e:c0:c3:57:01:72:4a:6a:e0:8f:1c:
6a:66:4e:db:62:5f:d5:96:40:fc:07:a4:47:71:dc:44:4c:f3:
b0:d4:ca:e3:6c:78:c0:75:5d:0e:0d:34:a5:93:11:45:e0:80:
2c:a3:80:72:57:aa:20:80:3a:c9:cc:e4:31:04:91:91:9f:9a:
0b:c6:47:3f:44:0a:3e:1f:80:f7:47:63:d1:cd:53:21:76:ca:
79:8f:fc:07:42:2e:cc:f7:04:bb:02:1a:f4:51:c8:eb:d7:aa:
a9:b7:3f:b3:98:b5:37:a1:2f:c1:de:d6:e2:0a:c4:dd:00:b5:
d3:75:da:e4:4f:f9:92:45:f6:08:e5:53:07:d6:0b:6c:57:10:
6f:97:4e:c0:da:e9:8f:cb:f5:a5:58:7a:34:62:a3:2e:25:1e:
3c:ab:ea:d8:d0:bd:2c:29:aa:4c:9a:9f:a1:c5:e2:e4:52:35:
ac:dd:92:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 18:52:16 2026 by rpki-client