Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
File: 1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft (raw, json)
Hash identifier: xuOMXuDqiROg4C67SIWMEf0bCeyboL0huAsIb+6ocCA=
Subject key identifier: 05:01:A5:A8:39:57:DC:75:4E:CF:FF:64:DC:4B:B2:D4:CC:86:AA:3D
Authority key identifier: FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
Certificate issuer: /CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Certificate serial: 019D3941410F1A54CAA32BD2A0001F8F841F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 11:01:10 +0000
Manifest this update: Sun 29 Mar 2026 11:01:10 +0000
Manifest next update: Mon 30 Mar 2026 11:01:10 +0000
Files and hashes: 1: 1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl (hash: n8kcPsr/EE/Z54iM+8TZKKQNblnNwG0nfw5UBNlZkQo=)
2: mxyRjdGL85xD1WB71F85PjRJOb0.roa (hash: +xewzxEDyTrzGnNo3af2vJnALePnt+9O9HzcMXJ3+M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:41:0f:1a:54:ca:a3:2b:d2:a0:00:1f:8f:84:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=facf153f24fa8d3214cd7c6e250d4b19f506722b
Validity
Not Before: Mar 29 11:01:10 2026 GMT
Not After : Mar 30 11:01:10 2026 GMT
Subject: CN=0501a5a83957dc754ecfff64dc4bb2d4cc86aa3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:29:8f:38:33:bd:e3:cc:31:7f:30:ef:e9:19:
73:1b:97:2a:b6:05:d3:5f:46:17:fd:fd:0f:b1:61:
43:f3:87:4d:d8:a1:f6:97:29:ec:87:16:4e:f5:aa:
ae:b1:75:cb:32:09:db:5f:10:5e:8a:c3:16:d3:1f:
ff:67:b3:b6:89:4d:d0:8a:e3:bb:cf:ae:cf:c8:09:
54:49:83:65:22:32:3b:eb:36:b1:56:f9:61:b3:9c:
3d:15:c1:17:ce:d2:7b:50:ef:7d:b2:bc:21:15:50:
7a:05:af:c1:1a:a4:b6:f1:66:10:9a:6e:d4:fa:84:
70:1e:ff:2d:86:45:ff:b9:1f:9a:f0:81:ce:dc:bf:
90:b1:e1:fb:b1:cb:79:87:66:99:57:09:36:e2:3f:
58:70:7f:5e:54:49:dd:d5:6f:54:6a:20:64:9d:a5:
d6:e2:98:ef:07:a7:eb:d4:97:3a:bf:4a:6c:0b:3f:
1c:4c:21:d3:67:bb:e5:15:42:1f:74:d1:af:dc:d4:
61:fe:dc:21:1a:28:9e:46:13:95:27:b2:93:09:07:
17:2f:66:6b:5e:62:22:c5:7c:5b:cf:dc:5a:f9:b6:
7c:6f:53:4b:1f:47:63:be:68:57:21:6a:43:ed:73:
c9:32:c2:76:5d:1b:29:23:02:49:89:b2:e7:ab:fa:
aa:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:01:A5:A8:39:57:DC:75:4E:CF:FF:64:DC:4B:B2:D4:CC:86:AA:3D
X509v3 Authority Key Identifier:
keyid:FA:CF:15:3F:24:FA:8D:32:14:CD:7C:6E:25:0D:4B:19:F5:06:72:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8621e4-e9a9-4b64-9648-9aa7372b616d/1/1-s8VPyT6jTIUzXxuJQ1LGfUGcis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:a0:c7:5a:e1:8b:f3:18:66:c6:52:93:eb:a0:47:f3:48:14:
c8:1f:c5:c7:04:73:78:e6:77:b2:4e:bb:c7:82:3f:7e:c0:0c:
c4:5f:0f:f0:d9:8a:0e:e5:e4:97:2f:85:19:76:25:d0:08:39:
f1:7f:6f:dd:c6:da:b8:30:19:d6:29:92:7d:1a:57:c8:ff:bb:
5d:6d:87:e8:56:b6:6e:b3:cc:31:47:88:ab:b0:3d:43:8b:80:
67:5c:b9:a6:2d:3c:47:ed:60:31:60:f4:a8:65:84:b7:32:d9:
34:31:df:64:f5:e2:1d:d0:8e:6b:56:55:9c:f4:42:b8:fc:1f:
2c:ea:5e:3d:4e:23:4e:30:de:45:89:f6:3b:1c:1b:e2:fb:d1:
32:9c:d1:6a:86:f2:40:e3:f7:71:63:d3:09:aa:97:21:7a:76:
7d:0a:1f:85:4a:df:92:55:1b:7e:75:4a:27:13:32:df:a9:70:
8c:dc:00:5f:7d:5c:89:0b:f5:75:f4:42:f2:ab:be:9c:37:d7:
65:07:f6:33:1d:73:de:ef:43:5e:3e:5f:ba:a8:ac:8c:cd:32:
df:ff:af:26:9c:7c:ca:11:8c:e0:ea:3f:d1:af:23:33:9f:77:
08:6a:67:d0:5a:0e:6b:21:a2:04:34:50:ce:5f:45:dd:d9:98:
d1:d5:c6:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:42 2026 by rpki-client