
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
File: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft (raw, json)
Hash identifier: ugngOfNqY+Q6Bm+tVXNZnCb/FOCE8s/6AGtvP5Sqi9Q=
Subject key identifier: 3F:16:84:5F:AD:80:AC:4F:E4:C4:6D:98:AC:8F:5B:4D:42:6C:4E:B5
Authority key identifier: FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
Certificate issuer: /CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Certificate serial: 01A13D1325A6EC907785273A360219331C4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
Manifest number: 0BA8
Signing time: Thu 15 Oct 2026 01:00:27 +0000
Manifest this update: Thu 15 Oct 2026 01:00:27 +0000
Manifest next update: Fri 16 Oct 2026 01:00:27 +0000
Files and hashes: 1: 1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl (hash: Jgn0BDEhXxpS3FpWWG7TCaojSUuakMDc5fx73e1IK60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:13:25:a6:ec:90:77:85:27:3a:36:02:19:33:1c:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14af16e589f9848fc695d057f81c167e8f63d5
Validity
Not Before: Oct 15 01:00:27 2026 GMT
Not After : Oct 16 01:00:27 2026 GMT
Subject: CN=3f16845fad80ac4fe4c46d98ac8f5b4d426c4eb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:ee:bb:1c:aa:38:58:3c:12:70:5c:51:19:
f5:19:a3:8e:a9:34:34:71:10:de:11:32:82:83:2c:
e3:94:5e:d3:b0:bb:dc:50:1c:2c:a1:5e:f8:94:b8:
c7:31:34:d7:62:1b:5b:a2:05:7c:61:54:50:5e:99:
db:29:41:bf:5b:f5:bf:8f:40:a1:77:d7:4d:96:24:
47:8c:00:98:65:0e:66:cc:f7:9c:79:38:82:e7:ae:
78:2c:26:09:cd:5e:43:cb:ce:e2:31:a4:39:57:0b:
bd:37:a3:17:14:ce:21:bc:c5:2b:fc:e9:e2:ec:55:
3e:98:3d:f7:9d:d1:6d:cb:aa:d6:33:cd:83:35:04:
e2:1e:f2:a5:ae:15:3e:ce:d2:ca:4a:66:9a:3c:76:
35:d2:94:a9:c1:be:77:ae:be:e7:2c:7d:7e:9c:71:
e9:65:3e:7d:60:4c:03:bc:bd:d0:f9:55:61:16:ad:
21:06:37:4e:7d:54:ba:69:af:ba:99:56:09:75:32:
7e:cf:ae:f7:7c:1a:f6:4c:84:ae:f5:c2:2a:66:0b:
4b:e6:85:12:34:f1:4a:a5:c9:55:8c:a7:3d:0c:77:
73:32:25:ab:3b:27:1b:58:74:24:d1:ce:8a:12:7f:
e1:6f:fa:40:b2:4d:d4:b9:4c:61:52:f7:53:31:68:
ba:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:16:84:5F:AD:80:AC:4F:E4:C4:6D:98:AC:8F:5B:4D:42:6C:4E:B5
X509v3 Authority Key Identifier:
keyid:FA:14:AF:16:E5:89:F9:84:8F:C6:95:D0:57:F8:1C:16:7E:8F:63:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/6f502a-fd6f-4278-9ce8-ca51ebf3b35f/1/1-hSvFuWJ-YSPxpXQV_gcFn6PY9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:58:e5:d0:32:75:d6:42:08:4a:2d:d8:6e:20:31:f3:d0:9a:
f0:b6:d7:e8:6a:9b:93:89:64:c3:b5:4d:d3:b4:2c:93:59:bc:
1a:96:9a:fc:e9:d4:7b:ff:5b:f0:47:7a:f2:c6:49:26:b0:c2:
61:1b:c2:28:58:6e:b5:29:fd:41:5b:b6:5a:5a:6b:dc:19:12:
e7:bd:a2:0d:35:36:36:60:38:52:30:7b:54:2a:8f:eb:6e:c3:
67:e8:60:c4:e7:54:d7:d3:ae:a5:1d:12:06:ca:c1:28:9d:f6:
d6:a4:9b:da:f1:80:65:69:a8:87:1b:11:db:bc:e2:d7:13:c6:
94:ff:ae:6b:73:77:c7:a1:5d:3a:0e:26:00:f4:76:ea:8f:d6:
76:6a:c4:ab:f1:a4:a0:39:0b:eb:52:44:8b:d9:5e:ac:df:00:
bf:36:a5:38:dd:c0:68:50:ed:e3:76:ec:a0:a2:89:92:c1:97:
64:dc:db:ab:ad:d8:19:08:62:db:97:d0:c2:bd:37:ab:60:c1:
0d:9b:22:7d:68:86:74:f7:e8:7a:e6:95:a9:0f:06:67:92:a7:
60:0d:bf:fe:48:26:a9:45:1c:1e:4e:bf:b4:68:55:44:b4:ea:
28:cd:08:73:7b:43:c1:08:a1:90:76:3f:cc:d0:68:2e:27:9b:
5c:66:39:8c
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaE9EyWm7JB3hSc6NgIZMxxNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMTRhZjE2ZTU4OWY5ODQ4ZmM2OTVkMDU3ZjgxYzE2N2U4
ZjYzZDUwHhcNMjYxMDE1MDEwMDI3WhcNMjYxMDE2MDEwMDI3WjAzMTEwLwYDVQQD
EygzZjE2ODQ1ZmFkODBhYzRmZTRjNDZkOThhYzhmNWI0ZDQyNmM0ZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSTuuxyqOFg8EnBcURn1GaOOqTQ0
cRDeETKCgyzjlF7TsLvcUBwsoV74lLjHMTTXYhtbogV8YVRQXpnbKUG/W/W/j0Ch
d9dNliRHjACYZQ5mzPeceTiC5654LCYJzV5Dy87iMaQ5Vwu9N6MXFM4hvMUr/Oni
7FU+mD33ndFty6rWM82DNQTiHvKlrhU+ztLKSmaaPHY10pSpwb53rr7nLH1+nHHp
ZT59YEwDvL3Q+VVhFq0hBjdOfVS6aa+6mVYJdTJ+z673fBr2TISu9cIqZgtL5oUS
NPFKpclVjKc9DHdzMiWrOycbWHQk0c6KEn/hb/pAsk3UuUxhUvdTMWi60wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFD8WhF+tgKxP5MRtmKyPW01CbE61MB8GA1UdIwQY
MBaAFPoUrxblifmEj8aV0Ff4HBZ+j2PVMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oU3ZGdVdKLVlTUHhwWFFWX2djRm42UFk5VS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvODQvNmY1MDJhLWZkNmYtNDI3OC05Y2U4
LWNhNTFlYmYzYjM1Zi8xLzEtaFN2RnVXSi1ZU1B4cFhRVl9nY0ZuNlBZOVUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzg0LzZmNTAyYS1mZDZmLTQyNzgtOWNlOC1jYTUxZWJmM2Iz
NWYvMS8xLWhTdkZ1V0otWVNQeHBYUVZfZ2NGbjZQWTlVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVljl
0DJ11kIISi3YbiAx89Ca8LbX6Gqbk4lkw7VN07Qsk1m8Gpaa/OnUe/9b8Ed68sZJ
JrDCYRvCKFhutSn9QVu2Wlpr3BkS572iDTU2NmA4UjB7VCqP627DZ+hgxOdU19Ou
pR0SBsrBKJ321qSb2vGAZWmohxsR27zi1xPGlP+ua3N3x6FdOg4mAPR26o/WdmrE
q/GkoDkL61JEi9lerN8AvzalON3AaFDt43bsoKKJksGXZNzbq63YGQhi25fQwr03
q2DBDZsifWiGdPfoeuaVqQ8GZ5KnYA2//kgmqUUcHk6/tGhVRLTqKM0Ic3tDwQih
kHY/zNBoLiebXGY5jA==
-----END CERTIFICATE-----
Generated at Thu Oct 15 10:28:49 2026 by rpki-client