Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
File: 1FurIIZT1CYevyAvYDYzQRmEYFU.mft (raw, json)
Hash identifier: EgA2gLgWbNL8/jvmi91xWdPDrFCtUKX2Vd1juQIyxh4=
Subject key identifier: 17:77:88:77:47:7F:4F:38:15:13:BC:37:65:1D:11:6E:61:2D:1D:77
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 01A16C118B1012E10EBB163A379ECE9753D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
Manifest number: 1728
Signing time: Sat 24 Oct 2026 04:00:51 +0000
Manifest this update: Sat 24 Oct 2026 04:00:51 +0000
Manifest next update: Sun 25 Oct 2026 04:00:51 +0000
Files and hashes: 1: 1FurIIZT1CYevyAvYDYzQRmEYFU.crl (hash: 7u0f3JyMowM6RfGSKsBZPCMJE4/CzjeW6G34FSiKiC0=)
2: 3KIe1YS7QLLqz4eqT1TIg8Y0lHA.roa (hash: E01qUWDxs3w8/EkHXVeEMazo/S6sr6Nl2XEVde5Y+Qw=)
3: BmDJr6NVvMRZJfVxWJAT8OCM7fY.roa (hash: 5dcydJfHt2J/Yp4bz6hC2PeHwVc0JR/YkXEsIrJj0IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6c:11:8b:10:12:e1:0e:bb:16:3a:37:9e:ce:97:53:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Oct 24 04:00:51 2026 GMT
Not After : Oct 25 04:00:51 2026 GMT
Subject: CN=17778877477f4f381513bc37651d116e612d1d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:13:91:f9:b4:d1:8c:04:68:80:59:47:81:83:
df:3d:48:b6:48:e1:40:21:c1:0e:b7:e5:55:82:61:
2f:38:83:86:7f:40:7c:29:78:77:5f:6d:11:f5:f4:
f9:4c:8f:33:b6:4e:b5:40:06:21:67:c0:71:97:53:
a7:2b:ed:73:d0:70:08:95:ea:1e:c2:62:bf:fb:ae:
5e:05:14:e1:23:07:c3:fc:76:2f:4e:5b:20:25:bb:
23:7d:e3:02:b1:82:e4:f5:f6:72:29:41:2a:c4:a1:
f2:68:18:3a:77:be:6b:4d:4a:ea:c7:8b:72:ef:a7:
a6:4c:e4:1a:e8:a1:f1:73:97:a5:9f:ac:28:75:c6:
92:34:4a:b5:88:b8:00:60:26:07:fd:70:b0:e4:9e:
37:79:06:34:ee:49:a0:46:7b:fa:77:fe:95:77:59:
9d:8a:23:e0:f3:df:a3:e0:19:2f:e9:16:a8:4e:82:
61:0d:70:b8:ed:92:a9:10:b9:54:0a:79:82:3c:57:
dc:bb:c4:ba:44:c0:6a:77:3e:b0:04:f2:fc:af:84:
bf:e3:28:24:bd:6d:2f:9a:f8:7a:ca:00:c0:06:0c:
26:68:ee:0c:88:42:17:4d:41:08:78:40:8c:96:4a:
31:65:f7:db:c9:5f:2e:24:5e:17:a7:fd:04:21:48:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:77:88:77:47:7F:4F:38:15:13:BC:37:65:1D:11:6E:61:2D:1D:77
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:0d:1c:43:ba:7e:e8:a0:e2:ef:00:c6:0b:a0:05:90:39:9f:
db:e6:69:74:62:f3:88:3b:26:54:7e:33:a0:f3:50:63:83:bc:
00:ed:43:d8:32:5d:da:13:5d:a4:ec:b8:81:3e:34:d3:54:d4:
4f:66:df:f9:38:5a:55:d8:45:cd:5d:32:cd:62:b9:51:f7:63:
a6:64:38:cc:1d:a1:cd:e0:96:89:6c:3d:0c:94:62:fe:01:24:
bb:ca:8b:9b:23:9f:c4:af:2c:ae:80:05:e4:a6:1d:52:86:24:
fc:7a:c8:46:ad:a3:64:65:1f:d6:36:18:3d:53:40:6a:38:4a:
7b:dc:d5:a2:17:40:eb:1a:0c:49:ca:5f:da:2c:f5:08:86:f7:
74:cf:5f:e7:21:5c:59:f7:59:62:50:ae:9b:f6:d9:b7:b3:a5:
4b:10:58:ff:a5:39:9e:79:be:eb:11:1f:10:6b:73:a1:76:16:
8a:ea:03:1b:3e:9f:12:09:53:92:15:9b:09:ab:b9:30:a7:71:
aa:97:d7:bb:c4:ab:92:45:67:5c:20:fc:7b:cb:b9:81:c4:54:
b9:f6:e7:40:d9:39:41:2e:10:db:de:92:40:c8:a6:93:82:9a:
6f:38:26:8e:5f:00:52:b6:4e:d5:0f:a7:3e:29:47:9a:64:b5:
d2:a9:fb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:12:14 2026 by rpki-client