Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
File: 1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft (raw, json)
Hash identifier: pNi1Qbc8OvHmjfVsg76+EGZX5BiteXagrXgjxr5Rdck=
Subject key identifier: 85:1E:2F:76:EB:3C:9F:D5:F0:AC:A2:AE:CC:FC:63:8B:3C:ED:33:A2
Authority key identifier: FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F
Certificate issuer: /CN=fa160e75add6ebf6f44581321477fab92d22e44f
Certificate serial: 019E29CBD3C397FEE1151FC3BAA2F3E992F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
Manifest number: 011F
Signing time: Fri 15 May 2026 04:01:24 +0000
Manifest this update: Fri 15 May 2026 04:01:24 +0000
Manifest next update: Sat 16 May 2026 04:01:24 +0000
Files and hashes: 1: 1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl (hash: mGnApTzcnH+9d5I+QYSCkXMjd0Y0ZqZrskhpgYot3UU=)
2: thQigH6iIZFTzygl3Rx0-Gq-vvI.asa (hash: 0qoZ/U/Zc4qr6dxGiq1WxSNmVGjBwb4uBW1cZmhhZq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:cb:d3:c3:97:fe:e1:15:1f:c3:ba:a2:f3:e9:92:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa160e75add6ebf6f44581321477fab92d22e44f
Validity
Not Before: May 15 04:01:24 2026 GMT
Not After : May 16 04:01:24 2026 GMT
Subject: CN=851e2f76eb3c9fd5f0aca2aeccfc638b3ced33a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e0:e8:22:31:51:41:b8:2c:d8:cb:b9:ba:8d:
c3:09:47:ba:54:e4:92:09:de:63:49:55:35:3b:a0:
de:13:c2:43:af:9f:f8:54:ab:a2:69:c5:ee:88:19:
0a:08:84:a8:db:2c:0c:92:5e:62:01:e9:47:81:6f:
cb:b3:9e:3e:de:8c:01:ea:b0:bf:33:fb:b2:88:ca:
de:61:95:7b:10:63:8a:f2:4d:35:95:7a:08:ac:a3:
30:88:31:d9:ce:9d:36:8c:6e:53:d4:8c:cf:87:53:
f4:dd:2c:e2:28:6b:5b:03:a9:65:89:07:4b:2b:3e:
6a:c4:99:59:7c:e2:d3:f2:19:b6:5e:77:11:bb:4d:
d7:d3:eb:f8:76:15:99:d9:bf:53:ef:68:66:18:26:
fc:d8:0c:01:3c:b1:87:fb:74:f8:b6:3a:01:a7:2d:
b7:4f:c2:46:06:54:b5:c9:8a:1f:cf:78:be:c7:b5:
cc:7a:cb:35:71:3c:90:c5:df:1b:79:11:f5:94:69:
60:b0:07:80:cd:a0:86:dc:64:4a:d9:06:20:ca:d7:
a7:55:8c:76:87:72:48:da:3c:7f:e4:04:af:bb:6e:
2a:60:28:43:1a:d5:f3:15:b8:03:c8:f3:77:8d:be:
af:86:62:c8:ed:43:8b:d2:b8:c9:65:53:b7:93:90:
3a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:1E:2F:76:EB:3C:9F:D5:F0:AC:A2:AE:CC:FC:63:8B:3C:ED:33:A2
X509v3 Authority Key Identifier:
keyid:FA:16:0E:75:AD:D6:EB:F6:F4:45:81:32:14:77:FA:B9:2D:22:E4:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hYOda3W6_b0RYEyFHf6uS0i5E8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/489e82-4769-46f8-b4d6-5920b9814419/1/1-hYOda3W6_b0RYEyFHf6uS0i5E8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:f7:e2:0d:45:d3:a5:44:f4:79:c1:ed:6e:d7:f9:8c:45:4c:
5d:86:bc:36:58:9c:c3:0c:86:d7:2d:49:55:e9:b1:89:eb:d7:
53:1d:c1:6c:ac:ca:46:ad:d7:28:de:65:7b:ee:51:c6:80:5a:
92:96:44:4a:5b:34:ae:82:0b:1e:2c:09:75:d6:c3:5d:68:d8:
be:93:4b:e7:0a:0d:7e:7b:60:5f:09:fe:6b:cc:3d:2d:14:03:
0e:f1:97:87:06:76:bb:fa:2c:cc:85:28:28:03:11:97:e9:6f:
ac:15:8f:2b:31:44:a8:1b:5e:48:99:fc:93:af:cc:1c:03:0b:
ac:b9:f3:e1:9b:a9:0b:be:02:36:d1:77:2c:8e:8c:d9:48:87:
59:45:ab:6d:42:6a:55:9c:01:1c:c3:b4:34:b2:f1:e5:9b:fd:
f0:8a:69:04:ac:4c:ec:d6:78:3e:93:49:8b:73:88:57:ae:c2:
89:09:ca:8f:35:ae:50:df:20:34:c7:94:63:8f:f9:e1:e1:11:
01:92:eb:fc:a3:d6:05:da:68:fe:79:e8:fb:a2:5f:c0:98:6f:
f0:86:c0:39:a9:c7:a0:e4:db:fa:98:08:89:64:15:16:3b:c0:
e4:57:29:1c:e1:c6:92:dd:d1:27:ef:34:0f:ee:46:d9:3e:8e:
0f:38:92:34
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ4py9PDl/7hFR/DuqLz6ZLxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMTYwZTc1YWRkNmViZjZmNDQ1ODEzMjE0NzdmYWI5MmQy
MmU0NGYwHhcNMjYwNTE1MDQwMTI0WhcNMjYwNTE2MDQwMTI0WjAzMTEwLwYDVQQD
Eyg4NTFlMmY3NmViM2M5ZmQ1ZjBhY2EyYWVjY2ZjNjM4YjNjZWQzM2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+DoIjFRQbgs2Mu5uo3DCUe6VOSS
Cd5jSVU1O6DeE8JDr5/4VKuiacXuiBkKCISo2ywMkl5iAelHgW/Ls54+3owB6rC/
M/uyiMreYZV7EGOK8k01lXoIrKMwiDHZzp02jG5T1IzPh1P03SziKGtbA6lliQdL
Kz5qxJlZfOLT8hm2XncRu03X0+v4dhWZ2b9T72hmGCb82AwBPLGH+3T4tjoBpy23
T8JGBlS1yYofz3i+x7XMess1cTyQxd8beRH1lGlgsAeAzaCG3GRK2QYgytenVYx2
h3JI2jx/5ASvu24qYChDGtXzFbgDyPN3jb6vhmLI7UOL0rjJZVO3k5A6nwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFIUeL3brPJ/V8Kyirsz8Y4s87TOiMB8GA1UdIwQY
MBaAFPoWDnWt1uv29EWBMhR3+rktIuRPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1oWU9kYTNXNl9iMFJZRXlGSGY2dVMwaTVFOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWYvNDg5ZTgyLTQ3NjktNDZmOC1iNGQ2
LTU5MjBiOTgxNDQxOS8xLzEtaFlPZGEzVzZfYjBSWUV5RkhmNnVTMGk1RTgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzlmLzQ4OWU4Mi00NzY5LTQ2ZjgtYjRkNi01OTIwYjk4MTQ0
MTkvMS8xLWhZT2RhM1c2X2IwUllFeUZIZjZ1UzBpNUU4LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGvfi
DUXTpUT0ecHtbtf5jEVMXYa8NlicwwyG1y1JVemxievXUx3BbKzKRq3XKN5le+5R
xoBakpZESls0roILHiwJddbDXWjYvpNL5woNfntgXwn+a8w9LRQDDvGXhwZ2u/os
zIUoKAMRl+lvrBWPKzFEqBteSJn8k6/MHAMLrLnz4ZupC74CNtF3LI6M2UiHWUWr
bUJqVZwBHMO0NLLx5Zv98IppBKxM7NZ4PpNJi3OIV67CiQnKjzWuUN8gNMeUY4/5
4eERAZLr/KPWBdpo/nno+6JfwJhv8IbAOanHoOTb+pgIiWQVFjvA5FcpHOHGkt3R
J+80D+5G2T6ODziSNA==
-----END CERTIFICATE-----
Generated at Fri May 15 06:20:23 2026 by rpki-client