Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: wdY96I4rewT/JshdSwdj6dCkzFXhMrlfQWEZoXDXHJo=
Subject key identifier: 44:4E:63:41:CB:B7:48:CF:C6:1B:16:52:64:6F:D1:13:8B:BA:E0:9D
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 019E9BBC902A3F64E852AE3F3AF60154EDEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 15B3
Signing time: Sat 06 Jun 2026 07:01:26 +0000
Manifest this update: Sat 06 Jun 2026 07:01:26 +0000
Manifest next update: Sun 07 Jun 2026 07:01:26 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: YA+s7zgsb+r2qw1LOksybbjfNkmAhuN8ER4mdgupKJo=)
2: 3KIe1YS7QLLqz4eqT1TIg8Y0lHA.roa (hash: E01qUWDxs3w8/EkHXVeEMazo/S6sr6Nl2XEVde5Y+Qw=)
3: BmDJr6NVvMRZJfVxWJAT8OCM7fY.roa (hash: 5dcydJfHt2J/Yp4bz6hC2PeHwVc0JR/YkXEsIrJj0IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9b:bc:90:2a:3f:64:e8:52:ae:3f:3a:f6:01:54:ed:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Jun 6 07:01:26 2026 GMT
Not After : Jun 7 07:01:26 2026 GMT
Subject: CN=444e6341cbb748cfc61b1652646fd1138bbae09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:db:c1:47:8c:4e:cc:46:8a:c9:af:5e:22:37:
bd:fa:0d:62:18:87:5d:b6:df:c9:0a:f3:69:3a:6d:
de:e3:d0:39:fc:80:67:cf:3e:6d:99:5d:ab:fb:0b:
1b:ca:57:f8:b7:8a:5e:4a:0d:75:c4:a8:bb:ef:0e:
6f:b0:74:71:c3:9a:07:3f:5f:3c:c4:aa:e4:96:99:
f4:d5:94:43:05:38:77:b2:3e:bb:6b:6c:f4:ed:e3:
fb:b0:b6:32:3f:a4:52:9c:21:16:61:1d:dd:ed:b8:
5d:63:47:93:36:3b:a8:fa:4e:43:9d:da:b1:7c:5e:
ae:da:35:f8:28:f0:bd:8a:d1:77:92:ed:b0:3d:9b:
c6:c7:7e:dd:e6:9f:72:d1:ff:1f:8b:6a:a8:6a:1f:
40:5d:83:7e:f1:8f:20:55:39:9f:5e:45:0f:27:e7:
1a:8e:e3:e2:05:e4:d3:7d:ea:64:92:4f:e5:d4:43:
66:64:7b:41:a8:de:8b:a0:43:1a:3e:ad:18:50:33:
3b:50:a6:7b:52:69:c6:6f:7b:10:7b:de:9b:0c:f2:
44:3e:da:3c:8c:54:d0:2b:4e:7f:e9:2e:bc:b3:2a:
62:99:0f:47:85:54:11:c6:0c:d6:69:1c:15:6e:3d:
1e:af:39:c6:b5:d8:50:3d:46:8b:17:d6:63:b5:c6:
16:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4E:63:41:CB:B7:48:CF:C6:1B:16:52:64:6F:D1:13:8B:BA:E0:9D
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:16:ed:80:0a:1d:25:87:c1:fb:32:ef:fb:67:53:9d:9b:7c:
a6:dc:32:53:e0:13:e5:e4:05:e6:9b:66:96:4a:35:c9:6d:35:
32:14:5a:6b:3c:94:78:8f:96:24:f4:bc:16:2c:f9:c8:92:7b:
0e:0e:a5:2e:d0:d2:06:13:92:6d:61:14:3f:0a:09:29:10:d9:
68:70:04:e7:df:26:a0:82:c8:e2:ee:78:5e:af:62:0d:64:92:
5f:24:e9:c5:2b:d5:99:c2:68:f5:73:98:6c:22:eb:f0:a3:0f:
5e:e9:cb:1c:b8:89:0b:b1:31:60:5d:33:ab:e8:72:b9:2f:9e:
51:e9:38:9b:d8:92:51:5d:21:7c:37:34:ee:e8:b9:14:ed:66:
cc:ec:6d:cd:db:4e:99:bc:5d:79:fc:94:ee:fa:a8:9e:b4:9f:
17:7e:e0:ed:ce:1b:e2:81:17:25:83:bb:1b:23:88:92:45:b6:
54:58:f4:eb:6e:c8:6f:5c:d5:c3:e9:18:06:c4:de:16:51:62:
ff:1f:7d:7a:3b:89:31:85:45:76:60:28:52:8e:50:2e:48:f5:
d6:da:63:e9:03:85:f0:80:4e:c7:1f:5f:bc:af:26:65:1c:c8:
76:01:94:5b:37:16:ae:76:49:d7:e8:59:2a:66:a8:5f:0e:31:
00:30:1e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:21:13 2026 by rpki-client