Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
File: 1-ff4bGznPV12NAP0mO6zL3DEdK4.mft (raw, json)
Hash identifier: IDnYwjY3V3IPSIQf2PWYJV4RcJScD8Z0DX94G5DZh+Y=
Subject key identifier: 0F:4E:51:C8:AD:EB:AB:A6:5A:27:39:6E:5B:4F:1F:D8:78:7B:5B:AE
Authority key identifier: F9:F7:F8:6C:6C:E7:3D:5D:76:34:03:F4:98:EE:B3:2F:70:C4:74:AE
Certificate issuer: /CN=f9f7f86c6ce73d5d763403f498eeb32f70c474ae
Certificate serial: 01A03FE05B50B1EF8DA9347954A01E6646B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
Manifest number: 0371
Signing time: Wed 26 Aug 2026 21:01:03 +0000
Manifest this update: Wed 26 Aug 2026 21:01:03 +0000
Manifest next update: Thu 27 Aug 2026 21:01:03 +0000
Files and hashes: 1: 1-ff4bGznPV12NAP0mO6zL3DEdK4.crl (hash: vYU2nB+ngFnhU3lgIkTecPK0biTvkPvt9B086TD96fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:e0:5b:50:b1:ef:8d:a9:34:79:54:a0:1e:66:46:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9f7f86c6ce73d5d763403f498eeb32f70c474ae
Validity
Not Before: Aug 26 21:01:03 2026 GMT
Not After : Aug 27 21:01:03 2026 GMT
Subject: CN=0f4e51c8adebaba65a27396e5b4f1fd8787b5bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c8:b5:1b:8f:9b:2a:04:ea:1d:2c:5b:08:67:
6f:8b:27:e4:cb:3a:1a:33:8a:74:68:34:03:94:b1:
08:89:25:eb:cd:c3:ec:4f:04:35:04:34:bd:28:91:
d7:4b:c7:94:51:e1:65:c9:61:42:c8:cd:e1:2a:46:
56:5b:3d:7a:a1:ba:32:e2:73:d7:e3:79:06:f1:84:
5a:0b:fb:d3:c1:71:65:4d:3f:c7:8f:c5:5d:1c:67:
09:30:e5:0f:b6:9b:ef:11:a9:62:be:4e:c9:93:f5:
54:7d:2a:09:ab:86:68:45:ab:fb:09:b3:6b:0b:9a:
33:bc:19:75:8a:39:d9:b0:67:e2:3c:39:e2:7a:3f:
86:98:8d:20:22:8e:35:15:1f:d8:f8:0e:fb:a0:0c:
d0:d8:13:ae:60:26:e5:2e:ce:a3:47:bd:3f:0d:9d:
4a:e8:1c:da:80:89:c7:cf:63:ca:3e:8b:31:91:7d:
8a:3a:d8:70:67:1a:b7:e7:e0:7e:03:49:7a:85:3a:
7a:2a:1e:5c:80:08:1e:4e:00:c3:01:44:80:0e:68:
76:f4:ea:d4:dc:79:c7:61:d1:de:26:24:85:7d:dc:
d2:fc:21:3f:51:4a:fe:2d:9a:5f:0a:4d:9d:9b:3e:
52:a3:5d:d2:90:ef:76:ee:d0:34:c8:7a:78:a1:39:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:4E:51:C8:AD:EB:AB:A6:5A:27:39:6E:5B:4F:1F:D8:78:7B:5B:AE
X509v3 Authority Key Identifier:
keyid:F9:F7:F8:6C:6C:E7:3D:5D:76:34:03:F4:98:EE:B3:2F:70:C4:74:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-ff4bGznPV12NAP0mO6zL3DEdK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d69d58-c229-4c2b-bf55-456345332f8b/1/1-ff4bGznPV12NAP0mO6zL3DEdK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7c:54:b0:ed:88:54:9e:ac:99:b5:7e:50:5c:c5:e0:94:ae:
02:72:16:b1:4c:91:ed:e5:32:22:8c:45:b2:96:11:f7:db:f9:
bc:2c:06:5c:34:89:06:eb:1b:10:0d:1f:25:53:46:0c:5d:61:
35:63:76:3a:0f:ff:f8:f8:2d:42:6a:5b:fc:26:08:aa:a9:29:
3e:f4:42:d5:95:a5:2a:a8:d1:2c:c8:9b:87:cb:b6:34:a1:51:
32:d7:fb:48:62:0b:b7:33:75:d4:7f:14:66:ae:5c:56:71:34:
79:e1:c2:d3:be:a2:d3:b1:57:6c:b8:20:24:03:e9:a6:ef:03:
23:87:1c:32:c3:87:ef:0e:7c:8c:21:6e:7e:ed:28:a2:98:46:
75:60:19:af:e3:4b:f5:30:b1:ce:c7:f8:d1:04:55:cb:69:f6:
ad:94:01:d1:f5:92:1b:1f:ca:5a:10:55:8d:2b:24:7b:69:63:
35:c1:ca:10:22:5b:c0:cd:2d:53:6d:6a:d2:32:fd:83:ff:36:
c9:62:56:a8:7a:e3:02:04:62:b6:f0:94:d6:ca:91:d2:84:a8:
ae:f7:90:0e:b1:39:32:39:04:34:15:95:bf:95:fd:d6:31:18:
12:03:05:2f:88:ce:0f:98:41:74:f0:68:48:a7:6a:9f:0e:85:
09:31:31:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 05:35:48 2026 by rpki-client