Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: qMPPG/+8/RFqJkgyYf7yeATlVoPIXkUfZDvLBHat85U=
Subject key identifier: 03:A3:A9:82:A9:FB:98:DA:FA:D3:3C:25:41:5E:8D:4D:BF:D4:34:27
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 019F87579E7D572395CEB66BC6BF89EA5521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 162D
Signing time: Wed 22 Jul 2026 01:01:34 +0000
Manifest this update: Wed 22 Jul 2026 01:01:34 +0000
Manifest next update: Thu 23 Jul 2026 01:01:34 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: bO6vi6yNUx2n7fWJZfLpzkKq8PigWpmkxWHLb4NByy0=)
2: 3KIe1YS7QLLqz4eqT1TIg8Y0lHA.roa (hash: E01qUWDxs3w8/EkHXVeEMazo/S6sr6Nl2XEVde5Y+Qw=)
3: BmDJr6NVvMRZJfVxWJAT8OCM7fY.roa (hash: 5dcydJfHt2J/Yp4bz6hC2PeHwVc0JR/YkXEsIrJj0IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:87:57:9e:7d:57:23:95:ce:b6:6b:c6:bf:89:ea:55:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Jul 22 01:01:34 2026 GMT
Not After : Jul 23 01:01:34 2026 GMT
Subject: CN=03a3a982a9fb98dafad33c25415e8d4dbfd43427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b4:e5:96:0c:01:9e:71:34:11:54:2b:b8:85:
ee:00:21:af:2d:a2:36:a5:25:bf:be:dd:5f:c5:64:
b1:e5:72:53:d5:bc:71:db:4e:6c:c2:93:b6:92:d9:
3b:89:09:a4:cd:e4:c6:6d:de:2b:d9:25:37:00:fc:
2f:0d:97:79:fa:dc:95:f6:ac:4a:2c:2f:88:f2:db:
fc:71:94:80:d4:5f:62:09:1a:e9:55:cb:a8:d4:39:
d7:c3:26:45:53:db:62:b0:61:af:a9:35:32:2c:86:
3b:21:98:88:90:7b:27:a7:a5:d3:85:b1:f6:ab:14:
5c:cf:ef:81:07:db:e5:ae:8a:96:c4:62:b6:bb:3a:
61:19:ec:a1:5c:e5:49:10:59:86:98:af:76:3c:3b:
aa:78:e1:a6:61:1f:e8:97:e7:fd:db:d0:98:00:d7:
2b:24:ea:d6:5c:8b:e1:83:e0:8d:3f:66:3c:46:9b:
e8:bd:55:a6:08:90:fe:74:60:9e:de:92:a4:ff:af:
25:cc:17:73:41:c0:81:a9:ea:c1:b2:90:be:3e:75:
66:f0:4b:d9:db:70:e2:3c:a6:02:a3:5b:52:6c:ed:
d4:2e:1a:5e:44:9f:bb:bf:49:af:03:7e:b6:95:47:
34:8d:c2:41:da:24:58:d5:53:33:ea:2c:46:58:ff:
03:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:A3:A9:82:A9:FB:98:DA:FA:D3:3C:25:41:5E:8D:4D:BF:D4:34:27
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d7:7f:1e:aa:9e:f7:2e:2c:72:30:c9:60:c9:16:4b:89:7e:
ec:71:50:7a:81:ab:a2:fe:87:4d:bd:5a:84:65:6e:20:1e:9c:
b6:05:ea:22:23:06:79:e0:fc:dd:8e:e5:c8:d7:60:85:ba:db:
dc:51:0e:83:8c:ec:a7:9a:fb:73:6e:0a:bd:db:b0:b6:6d:2b:
36:6c:73:1e:c0:a8:95:71:30:bb:e3:13:a6:45:39:2d:a5:ed:
20:9a:2f:3a:f7:6a:78:bf:68:d9:0d:ad:c8:4e:52:ad:6e:ab:
9a:0e:4e:43:30:25:ee:77:bd:1d:f3:50:1a:58:c4:b5:f2:fd:
a5:8b:6e:cf:f4:23:e7:29:2c:d6:65:06:e0:2b:0e:d4:c2:a3:
7a:52:63:6c:31:28:03:db:a3:d1:08:1e:99:83:b1:69:11:a0:
07:52:dc:e4:3c:a1:26:c2:81:0b:6d:03:1b:53:89:18:3e:60:
6f:d3:fa:87:b1:f4:f9:41:3e:5c:be:5f:61:b5:e7:1d:c0:5e:
c0:92:ee:8c:96:6a:d0:2a:35:14:db:00:13:e3:95:08:50:f3:
13:86:f0:8d:45:fd:ec:e9:f2:d2:a0:84:59:8a:a0:13:0a:ae:
a7:7a:61:1d:d9:36:db:89:c8:03:5a:67:dc:2f:50:ed:79:9a:
ea:0a:50:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+HV559VyOVzrZrxr+J6lUhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NWJhYjIwODY1M2Q0MjYxZWJmMjAyZjYwMzYzMzQxMTk4
NDYwNTUwHhcNMjYwNzIyMDEwMTM0WhcNMjYwNzIzMDEwMTM0WjAzMTEwLwYDVQQD
EygwM2EzYTk4MmE5ZmI5OGRhZmFkMzNjMjU0MTVlOGQ0ZGJmZDQzNDI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbTllgwBnnE0EVQruIXuACGvLaI2
pSW/vt1fxWSx5XJT1bxx205swpO2ktk7iQmkzeTGbd4r2SU3APwvDZd5+tyV9qxK
LC+I8tv8cZSA1F9iCRrpVcuo1DnXwyZFU9tisGGvqTUyLIY7IZiIkHsnp6XThbH2
qxRcz++BB9vlroqWxGK2uzphGeyhXOVJEFmGmK92PDuqeOGmYR/ol+f929CYANcr
JOrWXIvhg+CNP2Y8RpvovVWmCJD+dGCe3pKk/68lzBdzQcCBqerBspC+PnVm8EvZ
23DiPKYCo1tSbO3ULhpeRJ+7v0mvA362lUc0jcJB2iRY1VMz6ixGWP8DiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAOjqYKp+5ja+tM8JUFejU2/1DQnMB8GA1UdIwQY
MBaAFNRbqyCGU9QmHr8gL2A2M0EZhGBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQt
MTI0ZDNmYjM5MDZhLzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQtMTI0ZDNmYjM5MDZh
LzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtd/Hqqe
9y4scjDJYMkWS4l+7HFQeoGrov6HTb1ahGVuIB6ctgXqIiMGeeD83Y7lyNdghbrb
3FEOg4zsp5r7c24Kvduwtm0rNmxzHsColXEwu+MTpkU5LaXtIJovOvdqeL9o2Q2t
yE5SrW6rmg5OQzAl7ne9HfNQGljEtfL9pYtuz/Qj5yks1mUG4CsO1MKjelJjbDEo
A9uj0QgemYOxaRGgB1Lc5DyhJsKBC20DG1OJGD5gb9P6h7H0+UE+XL5fYbXnHcBe
wJLujJZq0Co1FNsAE+OVCFDzE4bwjUX97Ony0qCEWYqgEwqup3phHdk224nIA1pn
3C9Q7Xma6gpQGA==
-----END CERTIFICATE-----
Generated at Wed Jul 22 03:05:42 2026 by rpki-client