Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: F6CIfuhyjbcrdDW8aeE5V7ikJqCtcHuq+r4XN3Hmz6w=
Subject key identifier: F7:CF:D3:58:C6:A8:17:78:A8:1B:4D:61:85:A1:71:25:29:3B:4E:18
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 019DB20FECBC1C61267C80C72CB0499C49D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 153A
Signing time: Tue 21 Apr 2026 22:01:21 +0000
Manifest this update: Tue 21 Apr 2026 22:01:21 +0000
Manifest next update: Wed 22 Apr 2026 22:01:21 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: 6Xi+n+aHTEva3cA4WMz3i2gOBGlubgxYbhS6/SvB4lk=)
2: 3KIe1YS7QLLqz4eqT1TIg8Y0lHA.roa (hash: E01qUWDxs3w8/EkHXVeEMazo/S6sr6Nl2XEVde5Y+Qw=)
3: BmDJr6NVvMRZJfVxWJAT8OCM7fY.roa (hash: 5dcydJfHt2J/Yp4bz6hC2PeHwVc0JR/YkXEsIrJj0IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:0f:ec:bc:1c:61:26:7c:80:c7:2c:b0:49:9c:49:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Apr 21 22:01:21 2026 GMT
Not After : Apr 22 22:01:21 2026 GMT
Subject: CN=f7cfd358c6a81778a81b4d6185a17125293b4e18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:58:50:d9:09:14:36:27:5f:2a:2c:78:73:01:
4c:5f:74:4e:e3:6b:91:2b:20:7d:93:1a:e7:3d:d8:
6d:34:83:6e:dc:25:11:65:a5:50:41:bd:b5:a7:97:
ee:5c:ab:e5:ef:a1:15:77:67:ed:86:4e:8c:2e:68:
19:48:88:f4:69:46:96:63:59:24:de:6e:f6:4b:ed:
7e:b1:f1:e1:31:ce:02:43:e7:82:6c:9a:4e:78:3a:
5a:39:6c:a6:82:ec:3b:ac:49:69:26:5d:41:09:91:
02:bb:46:74:d4:66:f9:e1:6b:4a:76:a5:ca:89:d7:
9c:52:70:af:ed:3d:cd:30:89:a3:21:fa:b0:ee:98:
85:af:d2:5e:70:f7:cf:fa:03:f0:d4:20:bc:3d:e4:
1b:c3:1a:d4:6f:a5:db:78:ca:17:c3:1c:c1:d6:1c:
44:d1:f7:13:b3:9c:fc:cf:ac:af:4d:0e:e6:fe:c0:
ff:b3:40:00:b9:de:37:7f:48:1e:98:1c:a9:e3:2c:
ee:f3:3a:cf:03:7a:0d:7b:fe:4d:e8:ac:e2:ce:17:
b8:5a:88:d8:5a:93:21:b7:f2:36:e7:d7:9a:2a:d2:
86:f8:91:cc:40:b0:9c:6b:97:35:5f:5e:c8:fc:cf:
07:56:f4:be:b0:6b:ea:79:5d:77:19:5c:cf:f5:5c:
c0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CF:D3:58:C6:A8:17:78:A8:1B:4D:61:85:A1:71:25:29:3B:4E:18
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:f9:3b:db:75:70:80:65:bf:b5:13:4a:0f:65:6b:19:a4:71:
0f:66:d0:ac:a7:78:5b:77:01:97:38:42:25:d7:ef:3e:82:08:
11:ee:4f:ee:d6:bf:cb:32:e2:5e:15:62:e1:58:f7:37:22:28:
94:37:61:ab:f3:be:1d:0a:0a:24:92:45:05:2d:68:b3:25:44:
3d:a0:a4:30:f5:35:39:f4:b4:63:6e:8b:31:ab:e9:13:b0:00:
67:04:8b:cc:fd:b5:30:ad:7e:f4:3a:e6:b8:d4:e1:3f:45:39:
4c:c6:a7:9a:f1:48:81:53:48:ee:60:d2:b9:56:1e:dd:4e:32:
81:3d:0f:93:02:66:90:1a:06:ed:a6:a6:19:2a:c6:2a:ab:99:
fd:39:2f:d3:3b:59:ad:1a:38:26:1c:e8:06:00:3f:22:41:26:
c3:57:99:d0:fd:15:ee:26:d1:24:85:10:15:1d:8a:3c:91:63:
6b:d5:46:0b:59:60:04:2f:52:9d:67:0e:aa:66:85:cd:88:b0:
fa:02:a9:01:fb:4a:4d:3a:f2:87:f2:0b:ae:64:bf:4c:4d:df:
4b:04:15:9a:b2:31:7a:7b:81:42:09:32:3b:5c:1b:13:d9:b2:
13:4b:94:0a:48:83:9c:f0:4b:f0:3a:cd:ff:88:ea:33:aa:03:
9e:df:ae:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2yD+y8HGEmfIDHLLBJnEnQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NWJhYjIwODY1M2Q0MjYxZWJmMjAyZjYwMzYzMzQxMTk4
NDYwNTUwHhcNMjYwNDIxMjIwMTIxWhcNMjYwNDIyMjIwMTIxWjAzMTEwLwYDVQQD
EyhmN2NmZDM1OGM2YTgxNzc4YTgxYjRkNjE4NWExNzEyNTI5M2I0ZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoFhQ2QkUNidfKix4cwFMX3RO42uR
KyB9kxrnPdhtNINu3CURZaVQQb21p5fuXKvl76EVd2fthk6MLmgZSIj0aUaWY1kk
3m72S+1+sfHhMc4CQ+eCbJpOeDpaOWymguw7rElpJl1BCZECu0Z01Gb54WtKdqXK
idecUnCv7T3NMImjIfqw7piFr9JecPfP+gPw1CC8PeQbwxrUb6XbeMoXwxzB1hxE
0fcTs5z8z6yvTQ7m/sD/s0AAud43f0gemByp4yzu8zrPA3oNe/5N6Kzizhe4WojY
WpMht/I259eaKtKG+JHMQLCca5c1X17I/M8HVvS+sGvqeV13GVzP9VzA2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfP01jGqBd4qBtNYYWhcSUpO04YMB8GA1UdIwQY
MBaAFNRbqyCGU9QmHr8gL2A2M0EZhGBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQt
MTI0ZDNmYjM5MDZhLzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wYWVjMWYtNjA2NS00ZDg4LTg0NTQtMTI0ZDNmYjM5MDZh
LzEvMUZ1cklJWlQxQ1lldnlBdllEWXpRUm1FWUZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPk723Vw
gGW/tRNKD2VrGaRxD2bQrKd4W3cBlzhCJdfvPoIIEe5P7ta/yzLiXhVi4Vj3NyIo
lDdhq/O+HQoKJJJFBS1osyVEPaCkMPU1OfS0Y26LMavpE7AAZwSLzP21MK1+9Drm
uNThP0U5TManmvFIgVNI7mDSuVYe3U4ygT0PkwJmkBoG7aamGSrGKquZ/Tkv0ztZ
rRo4JhzoBgA/IkEmw1eZ0P0V7ibRJIUQFR2KPJFja9VGC1lgBC9SnWcOqmaFzYiw
+gKpAftKTTryh/ILrmS/TE3fSwQVmrIxenuBQgkyO1wbE9myE0uUCkiDnPBL8DrN
/4jqM6oDnt+uyA==
-----END CERTIFICATE-----
Generated at Wed Apr 22 00:08:34 2026 by rpki-client