Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
File: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft (raw, json)
Hash identifier: vaWZLBQyMeTVGc1+75kZ7UdJHIgtxEoHvbLzxTVMrIY=
Subject key identifier: CA:78:73:7D:58:23:FA:47:25:2C:7D:85:52:68:B5:3B:05:3A:CF:B4
Authority key identifier: FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
Certificate issuer: /CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Certificate serial: 01A03F724BFE27B2827928F71A4AA24AB48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
Manifest number: 04D6
Signing time: Wed 26 Aug 2026 19:00:50 +0000
Manifest this update: Wed 26 Aug 2026 19:00:50 +0000
Manifest next update: Thu 27 Aug 2026 19:00:50 +0000
Files and hashes: 1: 1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl (hash: v3gFXDWdEpQJOySPrX6F5nF9OTDa255DTAW9kRxkylU=)
2: _9jmpjcQFwSsKwZDpKMfAdoAfAc.roa (hash: 6IYluVGKVckZ7UbNb6EnuuXW6bdpQGvWpLycJHrQ2uk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 19:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:72:4b:fe:27:b2:82:79:28:f7:1a:4a:a2:4a:b4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1d54e1585ac097c3f91defc033dda5722ea1e6
Validity
Not Before: Aug 26 19:00:50 2026 GMT
Not After : Aug 27 19:00:50 2026 GMT
Subject: CN=ca78737d5823fa47252c7d855268b53b053acfb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bf:3d:a1:49:f1:a6:a3:73:75:3e:81:32:af:
8a:68:8f:b0:b9:db:37:54:e8:d4:63:6c:54:47:12:
36:18:60:aa:39:83:98:6c:04:d8:7c:b1:93:1b:52:
0b:87:ae:bd:26:f5:b3:c3:48:d4:58:b8:ed:91:6e:
3c:11:c8:60:55:9a:0f:18:92:d2:e1:56:26:84:f9:
28:31:7e:f7:02:2e:e2:65:1b:1f:87:94:da:b4:60:
4e:f3:c7:cc:ec:35:51:5d:72:8e:1f:37:67:72:66:
7d:c1:f8:d3:4e:69:55:0a:05:c6:71:d6:4b:c3:cb:
c7:7c:36:8d:cc:51:db:dd:48:10:7c:88:0a:c0:92:
75:e2:b5:36:99:9d:ce:57:1b:06:2d:f9:c8:82:01:
d5:10:63:2b:32:41:cd:9e:e6:30:e0:c9:c1:04:07:
c9:0b:e0:0a:b8:00:9b:e2:98:5c:c2:4d:8d:07:70:
29:99:20:5e:50:d2:23:ca:49:9a:3c:3f:5c:b2:70:
6d:ce:48:ff:32:2c:0c:2e:97:c1:fe:48:42:e9:a7:
d4:2d:e2:5a:60:1e:c9:6b:d4:94:3c:19:65:84:17:
10:8f:c5:86:d6:9c:aa:3d:c9:a9:ee:9c:4a:9d:26:
ed:4f:64:08:1a:78:5e:ae:2e:41:9b:78:a9:b0:02:
8c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:78:73:7D:58:23:FA:47:25:2C:7D:85:52:68:B5:3B:05:3A:CF:B4
X509v3 Authority Key Identifier:
keyid:FA:1D:54:E1:58:5A:C0:97:C3:F9:1D:EF:C0:33:DD:A5:72:2E:A1:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h1U4VhawJfD-R3vwDPdpXIuoeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/4d700e-9f1e-4959-9cfd-b2b572e25afd/1/1-h1U4VhawJfD-R3vwDPdpXIuoeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d4:52:46:90:29:22:c1:cd:7e:af:65:bd:25:f2:50:dd:1c:
b7:99:d3:e6:15:55:11:ef:7b:f0:19:66:a3:84:00:13:ab:e7:
ca:78:2f:cf:ec:a0:5f:8d:d4:d7:7e:c8:49:57:d8:49:11:26:
fe:16:23:97:2f:7d:a3:8a:f8:98:6a:f8:d6:3c:88:89:c7:cc:
14:0e:c2:cc:16:d2:b1:d2:71:8e:a9:28:18:8b:5a:f1:d8:a2:
94:ce:e5:1d:bc:a3:ab:45:79:e9:8c:9f:93:5f:fb:ae:6f:56:
aa:ed:3e:bb:54:40:9f:cc:1a:7c:23:35:2e:3e:0f:f7:88:9d:
80:31:aa:d2:d6:6b:19:10:e3:fb:0c:bf:bd:9f:75:86:e3:52:
88:3d:63:ab:f3:29:60:ad:d5:03:17:5d:fc:ac:29:f1:00:3d:
fe:06:1f:c3:81:d6:40:25:4b:e4:60:14:4e:ce:fa:ea:a2:24:
25:16:13:3a:42:4c:6f:dc:c7:c7:9b:6a:17:12:57:2c:96:b0:
85:10:31:d0:59:0e:c0:8b:52:fc:44:5b:a9:ed:09:78:e1:9e:
63:ed:bd:bd:39:d3:de:44:e3:4c:1d:8c:7d:6b:de:2d:5d:6c:
f9:b2:18:3a:88:23:64:ca:82:31:55:02:80:43:1f:21:a0:d1:
19:d9:19:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:51:37 2026 by rpki-client