Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
File: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft (raw, json)
Hash identifier: 6JcGSNDeQJHBdsiYVVdj2TxYI8dl7VXrgeHonu04mNE=
Subject key identifier: 3F:23:C2:93:12:37:48:02:2F:3C:D1:AD:DA:CD:72:D7:3F:5A:3E:4F
Authority key identifier: FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
Certificate issuer: /CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Certificate serial: 01A00100F34FB2961658C89E756E4344F8A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
Manifest number: 0686
Signing time: Fri 14 Aug 2026 16:00:34 +0000
Manifest this update: Fri 14 Aug 2026 16:00:34 +0000
Manifest next update: Sat 15 Aug 2026 16:00:34 +0000
Files and hashes: 1: 1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl (hash: cOv/24ZrAIvnGjxZIAJmV3Q7CIX2LOAK11kx2rEHn+s=)
2: wELXb2upKDUk9ug1VUWo0G60EVg.roa (hash: tEEqGfojVYh3aK4OosjlDUvbLIy7wKvl+V1lWIlr7hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:00:f3:4f:b2:96:16:58:c8:9e:75:6e:43:44:f8:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf647df218e2c6f3fd1cf549d27df4e50cd6db0
Validity
Not Before: Aug 14 16:00:34 2026 GMT
Not After : Aug 15 16:00:34 2026 GMT
Subject: CN=3f23c293123748022f3cd1addacd72d73f5a3e4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:0b:40:d0:20:a3:4f:66:ba:1d:0a:6f:1b:
aa:8e:30:00:d4:da:6d:ec:1d:e9:79:af:d4:b5:8f:
33:e3:ac:a2:05:30:99:34:39:8b:fc:6b:8c:cd:ec:
f7:50:0c:7a:45:ba:b9:c6:7f:c2:81:f3:bc:5e:90:
35:c3:4d:c7:a6:6e:76:6d:8a:58:8d:9a:99:15:14:
3f:e9:f0:7f:be:75:4c:f4:57:d4:55:26:8e:9e:ee:
ef:aa:6c:1d:e9:2f:2c:71:42:c3:41:de:97:a0:db:
ca:7d:7c:49:4b:4d:59:c0:1e:d4:97:07:27:ea:36:
c3:d3:65:d6:59:0f:17:d1:cb:d2:df:78:07:2e:47:
1d:9c:d7:2d:25:71:2f:2d:a7:99:48:37:c9:ba:7e:
75:3a:ee:2e:b5:b5:60:71:0b:b2:a0:7e:31:aa:e8:
5f:22:01:c2:a9:39:ed:b3:71:30:c4:a8:27:1e:62:
48:7d:c4:b5:df:bf:e6:1b:0d:82:fc:f4:5d:d5:18:
e9:fa:c5:97:eb:18:3b:ec:4e:b3:7b:5e:f2:f3:57:
dc:8f:f6:28:2c:c2:ba:7b:24:31:3b:5e:ec:6e:cf:
66:2e:1c:e7:c1:13:78:e3:55:33:22:0b:33:28:08:
7e:f4:18:d2:87:37:98:a0:11:ed:39:cc:9a:be:2a:
dc:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:23:C2:93:12:37:48:02:2F:3C:D1:AD:DA:CD:72:D7:3F:5A:3E:4F
X509v3 Authority Key Identifier:
keyid:FA:F6:47:DF:21:8E:2C:6F:3F:D1:CF:54:9D:27:DF:4E:50:CD:6D:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZH3yGOLG8_0c9UnSffTlDNbbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/45a572-b808-40f5-8b25-ddca153a20ab/1/1-vZH3yGOLG8_0c9UnSffTlDNbbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6f:e7:2c:d2:23:3b:c7:2c:6f:0a:33:2c:26:eb:56:1f:06:
ac:6b:a9:6c:67:70:a9:77:74:62:e0:b2:7d:e8:72:c7:97:55:
1d:64:f4:67:c7:e6:e4:6a:e0:a7:41:eb:a4:c0:b1:d0:f7:a1:
b8:43:fb:4d:27:1b:34:5e:30:e0:54:0a:a7:d1:61:39:ea:fe:
ff:cb:ad:9d:49:32:51:60:be:95:89:39:e7:53:5a:65:5c:87:
2a:49:63:c4:92:b6:22:5f:2e:ca:5c:da:9e:c0:11:86:3b:5b:
7f:f7:0c:28:81:54:64:c0:56:01:45:05:cf:46:92:21:52:44:
b8:a9:45:c6:57:41:9d:2b:43:06:d3:22:68:a8:e1:12:ec:ad:
e8:cb:21:9c:49:10:1b:97:67:f7:0b:72:e1:0e:06:a4:be:c3:
5f:d3:74:0e:aa:17:cc:44:0a:1c:04:9f:2e:f3:f9:f4:0d:7e:
36:10:70:88:08:cd:f9:b8:0c:0e:d2:57:72:b1:e3:e2:22:cb:
2f:2b:c3:75:6b:2f:86:8f:73:89:b6:7c:58:9c:0c:12:74:6e:
5e:47:b3:3c:a5:c5:ba:0a:29:ef:21:c9:7b:0a:6f:cf:ab:27:
69:78:75:ae:35:88:a6:c5:e4:ab:4d:db:cb:f6:e0:b5:04:2b:
f9:31:c3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:26:33 2026 by rpki-client