Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: vU42cT5RQfE4uw8uChmACcPAu+qLdfMud6chZVkxkFA=
Subject key identifier: BF:DA:31:83:E0:74:79:4F:EE:40:CF:D8:99:0F:EB:3A:FA:66:5B:B2
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 019CC862E9B5C5731035F5859962ADA8E7D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 14C1
Signing time: Sat 07 Mar 2026 13:00:51 +0000
Manifest this update: Sat 07 Mar 2026 13:00:51 +0000
Manifest next update: Sun 08 Mar 2026 13:00:51 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: lZ4N7vh04q362ha+6NcUkzmX4jqPMaB3QSz9znebHWI=)
2: 3KIe1YS7QLLqz4eqT1TIg8Y0lHA.roa (hash: E01qUWDxs3w8/EkHXVeEMazo/S6sr6Nl2XEVde5Y+Qw=)
3: BmDJr6NVvMRZJfVxWJAT8OCM7fY.roa (hash: 5dcydJfHt2J/Yp4bz6hC2PeHwVc0JR/YkXEsIrJj0IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 10:49:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c8:62:e9:b5:c5:73:10:35:f5:85:99:62:ad:a8:e7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Mar 7 13:00:51 2026 GMT
Not After : Mar 8 13:00:51 2026 GMT
Subject: CN=bfda3183e074794fee40cfd8990feb3afa665bb2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5d:fa:f6:1e:b9:4f:6b:56:da:be:80:e9:df:
1c:19:6f:bb:1a:6b:da:01:65:96:a9:ba:fb:d5:d4:
1f:93:33:19:a5:eb:f5:a8:b1:14:49:1e:d2:6f:55:
b6:18:8d:c5:6a:63:57:33:4d:a9:bc:13:ab:39:e5:
80:1e:6f:60:26:cb:ac:71:e3:df:7a:a1:2e:54:00:
ef:6b:e0:8f:22:9d:ae:57:e0:70:ef:62:b7:57:14:
18:30:9b:8f:e8:8d:01:ae:57:9c:78:b0:9c:22:a6:
f9:c0:27:b8:1d:d6:50:92:d7:0f:72:65:34:ce:19:
ed:eb:c6:14:4e:62:ed:db:2b:45:e5:ee:f6:dd:64:
a1:81:c2:d9:4f:e2:93:57:7c:2a:37:38:d9:cf:f1:
94:14:4f:ca:42:3e:0f:f0:ba:61:63:ee:3f:f3:80:
3a:cf:d1:a7:9a:ad:fc:de:d7:f7:b4:96:88:ff:6d:
c1:46:1c:2b:7d:89:85:47:97:27:8d:15:dc:bb:f4:
0b:74:68:19:87:ec:16:77:b0:50:4c:f5:07:70:c1:
a0:61:23:83:ba:d5:2a:68:85:70:dc:de:55:a1:a3:
39:58:fc:45:2c:fc:06:95:8e:e1:09:c6:1c:b2:ef:
76:7b:e2:8b:2c:b0:1c:78:db:ab:6a:2e:b3:62:a7:
dc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:DA:31:83:E0:74:79:4F:EE:40:CF:D8:99:0F:EB:3A:FA:66:5B:B2
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:7f:69:5f:a3:63:a3:cc:79:67:58:e4:5f:0f:49:95:f2:06:
55:73:59:05:43:16:76:8b:0b:38:31:f5:6d:8b:e8:84:67:51:
44:d5:f5:50:c5:83:d6:dc:9d:58:75:80:ab:77:2a:ec:a0:01:
75:96:97:6b:7e:e7:61:82:ca:7c:f1:9c:a6:77:5b:e3:ed:74:
89:69:69:ee:e8:cb:63:b5:86:67:c4:74:04:71:15:3a:7c:6f:
e8:a7:03:18:76:a8:df:36:76:7e:c4:81:df:fb:02:d0:a4:92:
71:95:f9:d7:3a:6b:19:95:6c:59:49:87:01:56:e7:b2:aa:b3:
03:5e:c2:45:80:fd:ac:f0:4b:c5:04:2b:f1:dc:ae:c5:10:f6:
0e:7c:7e:4e:4c:3b:d7:df:92:49:9a:e8:d5:7f:fa:ed:96:5a:
79:b9:14:30:42:ae:01:c9:0e:35:b9:31:60:1d:5a:7f:2d:43:
1f:3b:d1:26:1c:c4:ea:ad:ac:1b:97:17:d7:31:8f:94:8b:04:
e5:dc:fd:e6:ec:f6:83:3b:a2:51:d7:10:16:da:be:e8:30:b5:
bd:4e:19:9d:19:f4:78:e5:c8:88:1a:5d:48:20:cb:b6:fd:29:
85:9a:5a:88:e6:80:d3:9f:7f:10:a4:99:5d:82:14:25:76:1b:
18:86:5e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 19:03:17 2026 by rpki-client