Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
File: 1foTUAdEKPBxdVoZaMpa-ihFUqI.mft (raw, json)
Hash identifier: LC/bCIgfQfD0OjSoSY3FPqwo7P1ifr6lomzgBEfPtfY=
Subject key identifier: 33:EB:31:D3:23:73:EE:1E:65:46:73:D1:50:16:CD:03:B0:8F:D0:25
Authority key identifier: D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
Certificate issuer: /CN=d5fa1350074428f071755a1968ca5afa284552a2
Certificate serial: 01A181BDBBAB9F04EFE2E3E1CA7797CF4B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
Manifest number: 0141
Signing time: Wed 28 Oct 2026 09:00:57 +0000
Manifest this update: Wed 28 Oct 2026 09:00:57 +0000
Manifest next update: Thu 29 Oct 2026 09:00:57 +0000
Files and hashes: 1: 1foTUAdEKPBxdVoZaMpa-ihFUqI.crl (hash: aT3w2KZ46Cd7zvnoTICHHKkvWU9+KJPb05DO+Wk8gAo=)
2: 1xg7adVXPiGdkBhp_sNzxuzreFg.roa (hash: 2uXt3/w741xTFDmIndVVSu8CCPreiOPbFW1zo41VUgk=)
3: XpVd8TEHFdbwUBtoAGpaT1un8nw.roa (hash: ePXp/0+VEKMUCzKgS41AYjixo9sL8aeMR15qF8zIMW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:bd:bb:ab:9f:04:ef:e2:e3:e1:ca:77:97:cf:4b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5fa1350074428f071755a1968ca5afa284552a2
Validity
Not Before: Oct 28 09:00:57 2026 GMT
Not After : Oct 29 09:00:57 2026 GMT
Subject: CN=33eb31d32373ee1e654673d15016cd03b08fd025
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d5:ad:61:82:b7:a6:6a:b9:f7:f2:b5:14:4f:
93:79:cf:f1:a1:5a:e7:ec:46:58:18:99:39:f5:53:
88:bc:42:55:61:b2:1d:57:03:9c:51:d2:9c:82:73:
81:d0:a1:5f:33:8a:00:45:bb:26:dc:5d:af:fd:5d:
5f:e9:19:d1:a9:0c:4b:45:ec:2f:5c:97:c5:43:86:
f4:94:44:00:58:88:2c:02:08:92:78:a3:02:14:b9:
3b:82:6a:f4:21:77:cb:08:e8:33:6f:0a:cc:4a:11:
65:d1:44:c3:b7:f2:dd:68:b5:47:ba:d1:54:04:79:
57:bc:57:1e:17:45:72:36:48:fc:ba:12:4d:ee:f9:
10:a3:9f:eb:cf:2b:34:82:09:c2:6e:94:0f:f4:40:
48:dd:8e:21:81:e1:72:f4:88:f3:73:53:85:b1:28:
5b:37:65:d6:87:70:a5:1c:dc:47:90:f5:a6:4e:0a:
4a:9a:a7:c0:d6:dd:fd:63:2e:3d:b7:fb:ca:3d:6f:
9f:b1:d2:86:ba:99:03:0e:b1:b1:2d:db:fa:93:01:
88:81:b2:c3:63:f8:2d:ad:11:0c:b6:e6:17:34:ad:
20:2f:d1:1d:b4:93:0f:c6:42:e1:c0:a0:50:ca:3d:
19:27:52:11:1b:43:7b:cb:a8:b9:05:e2:46:5c:50:
50:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EB:31:D3:23:73:EE:1E:65:46:73:D1:50:16:CD:03:B0:8F:D0:25
X509v3 Authority Key Identifier:
keyid:D5:FA:13:50:07:44:28:F0:71:75:5A:19:68:CA:5A:FA:28:45:52:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1foTUAdEKPBxdVoZaMpa-ihFUqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/c3174a-a794-44ee-8d26-bc5b69144587/1/1foTUAdEKPBxdVoZaMpa-ihFUqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:cc:d8:5a:55:1e:15:8c:b9:79:02:a1:df:f0:f0:4b:2a:a4:
07:27:bd:be:9a:c9:6d:d6:39:48:90:fb:ef:3e:9f:8b:3b:3d:
ba:1d:da:be:6d:7c:5e:ea:ba:c7:c6:4d:ed:ec:e2:4c:b9:6a:
e0:80:00:ef:91:52:25:9d:10:50:59:70:96:b3:a3:b7:bd:cd:
e5:90:d2:94:d1:66:53:e7:f8:60:b3:7b:b4:55:4f:c3:f7:dd:
d9:eb:db:2c:99:c8:9b:0d:5e:eb:55:c9:ab:36:6f:2a:35:5f:
32:19:79:64:69:ed:d3:8e:9d:d1:15:d1:06:3c:e0:af:dc:bc:
13:9e:85:55:ad:51:94:ac:11:37:29:a9:56:98:0d:d1:28:fa:
61:f6:28:c2:af:53:07:b9:d8:79:d5:e5:8e:94:62:11:78:70:
b3:24:e6:04:fb:21:e4:69:51:1e:8f:32:77:bc:87:78:66:3d:
b1:7b:56:a2:31:1f:71:ef:7d:b2:62:72:f7:a5:08:95:5c:06:
72:6a:51:36:f1:5b:8a:7b:ec:12:5a:d8:e3:d8:2c:b7:76:7c:
52:a2:fa:da:7d:34:ea:44:e7:ad:09:8b:82:29:2c:a4:55:a7:
1d:a6:f7:65:51:ef:1b:cc:3d:70:4c:a4:ac:2c:0f:dc:57:55:
f1:67:fb:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 16:31:23 2026 by rpki-client