Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: 28Keehs0YmLdTd7Iev2FP6Ryrs7rs9Hdjaf+2cHGVI4=
Subject key identifier: D8:AC:9A:20:0B:F7:3C:4A:41:43:16:A4:E9:71:7E:81:06:4B:4B:06
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 01A06F15C87CF38C7929E5B0A4FA179D2C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 16A5
Signing time: Sat 05 Sep 2026 01:01:33 +0000
Manifest this update: Sat 05 Sep 2026 01:01:33 +0000
Manifest next update: Sun 06 Sep 2026 01:01:33 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: Wjn/Zan26YZk+wEx4I7CBloegXRgOR8wHt2Ar8AmBNc=)
2: 3KIe1YS7QLLqz4eqT1TIg8Y0lHA.roa (hash: E01qUWDxs3w8/EkHXVeEMazo/S6sr6Nl2XEVde5Y+Qw=)
3: BmDJr6NVvMRZJfVxWJAT8OCM7fY.roa (hash: 5dcydJfHt2J/Yp4bz6hC2PeHwVc0JR/YkXEsIrJj0IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:15:c8:7c:f3:8c:79:29:e5:b0:a4:fa:17:9d:2c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Sep 5 01:01:33 2026 GMT
Not After : Sep 6 01:01:33 2026 GMT
Subject: CN=d8ac9a200bf73c4a414316a4e9717e81064b4b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a4:b4:8b:e2:2d:aa:a0:b0:ec:34:89:a9:cd:
a9:94:80:ab:74:82:fd:11:32:40:ee:74:92:e6:31:
2a:57:4d:35:19:30:be:d3:81:5b:d2:45:f4:bd:8c:
a9:f5:09:f8:b9:db:43:e9:ae:8a:5b:2e:c0:38:f6:
ea:fb:61:85:30:44:e5:dd:56:19:a3:c1:1d:43:18:
99:db:0d:5a:11:71:e8:9a:7c:34:df:c5:88:af:2b:
7c:3f:77:8a:af:ac:b2:63:1b:74:7a:cb:47:af:a3:
ef:07:94:55:e4:b0:db:f7:bb:9d:16:5a:42:79:fe:
8a:a8:3f:d1:ef:f5:b7:57:de:c7:a1:6c:b8:4d:db:
0b:46:1a:ef:4c:d2:be:1e:9b:f6:06:6d:c2:de:ac:
0a:88:0d:32:8e:e5:37:8d:27:1d:e1:48:f4:57:1c:
0f:75:05:33:29:89:dc:be:00:6f:41:75:90:13:89:
23:d1:b7:18:eb:6e:f8:92:b9:16:27:36:69:f5:ef:
61:b2:83:9c:f9:d6:4c:f7:12:5b:6b:e0:87:bd:3b:
25:48:2a:4b:09:52:bd:be:e9:ab:83:b0:58:b8:28:
5b:7f:d1:da:80:a5:62:04:cb:c1:86:36:88:9a:76:
47:35:9b:b3:3b:3c:ac:68:0f:94:0e:85:21:11:df:
ec:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AC:9A:20:0B:F7:3C:4A:41:43:16:A4:E9:71:7E:81:06:4B:4B:06
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4b:35:40:94:43:0a:ec:5d:a9:28:3d:02:a6:56:46:23:3c:
89:55:41:cc:ac:bd:53:33:46:fc:a7:90:3e:fd:c4:71:49:3f:
c8:f8:7e:72:2b:fb:8f:d7:2d:e6:c0:25:ca:74:b1:97:48:f1:
d7:0c:21:57:c2:c1:67:fb:c1:57:7d:2a:9d:55:35:a0:c4:4d:
ca:38:42:43:bc:22:b4:af:0c:29:f1:14:25:6a:13:48:33:57:
21:9a:2d:ff:23:e6:23:e0:d1:d5:ea:11:66:e7:87:9a:ed:3f:
e3:be:89:5f:8d:5c:c0:da:fd:e8:98:18:e9:d6:48:b4:09:a1:
1d:59:af:c2:ce:83:17:43:0e:4f:25:9a:6c:06:86:10:09:b2:
53:fa:72:74:28:4d:8d:14:9e:20:3f:2e:07:0e:ab:06:0c:7f:
a1:cb:25:46:c5:4f:fe:cb:7c:3b:cd:11:6c:ce:bc:f7:e5:c6:
9d:f6:e0:bf:d8:35:49:46:f2:bc:f6:1d:38:b7:48:1e:b0:06:
dd:76:f2:44:51:b4:3f:30:70:0a:be:98:15:0d:af:1b:ac:cc:
f2:da:d9:92:27:c5:9c:85:dd:27:9e:9a:4e:a7:ca:83:2c:45:
99:bc:7d:48:64:27:f8:ef:87:63:26:fd:aa:05:ac:cd:5b:18:
3c:4b:07:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:40:56 2026 by rpki-client