Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
File: 1-h3je7xsBkINpibAu01yMjHpPoQ.mft (raw, json)
Hash identifier: lHeQaUpt471jv3uV6YuUagVzowkc818waMt79RwkQvI=
Subject key identifier: 5F:D7:AA:4B:17:47:30:4C:64:AD:B1:59:3A:5C:03:97:95:86:B3:A4
Authority key identifier: FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
Certificate issuer: /CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Certificate serial: 01A13DB8955750F065E8A73364A85D7CE3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
Manifest number: 1216
Signing time: Thu 15 Oct 2026 04:01:09 +0000
Manifest this update: Thu 15 Oct 2026 04:01:09 +0000
Manifest next update: Fri 16 Oct 2026 04:01:09 +0000
Files and hashes: 1: 1-h3je7xsBkINpibAu01yMjHpPoQ.crl (hash: bFvUTcdOT3c3auIsgs328ceUwF7xO8rKTuBwSd4uPsU=)
2: MlQTgjgh5uSzQaXxeS49FotuS_Y.roa (hash: 0wxpEKJE8z5xrE9cQTX/pfOjLHngXIh1dDaRLCQI7cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3d:b8:95:57:50:f0:65:e8:a7:33:64:a8:5d:7c:e3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1de37bbc6c06420da626c0bb4d723231e93e84
Validity
Not Before: Oct 15 04:01:09 2026 GMT
Not After : Oct 16 04:01:09 2026 GMT
Subject: CN=5fd7aa4b1747304c64adb1593a5c03979586b3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e3:b2:1a:4b:71:a1:fd:36:6a:69:39:3c:4e:
e1:70:51:08:e3:83:76:98:9f:49:c2:dd:dd:bc:96:
20:01:44:cc:49:ab:7b:40:bb:7f:2d:82:31:67:4e:
f5:f4:65:aa:d1:39:09:0f:cc:73:0c:3d:09:57:bb:
1b:7e:e4:c2:07:fb:e5:37:c9:56:4d:9b:a7:91:78:
b3:87:39:63:51:5e:93:5e:fc:d9:dc:9d:86:41:d6:
4a:89:07:0b:4e:84:bd:d9:34:df:b0:b2:ca:d0:59:
da:e6:8b:8d:4d:01:d2:64:95:7a:51:81:88:92:59:
b9:52:fa:c4:cc:32:35:a9:35:ed:8d:5e:70:68:3e:
c6:12:9e:26:e9:37:78:79:e4:95:31:da:9c:8f:ba:
a4:de:2a:ff:d5:69:cd:a1:4a:b1:5a:d7:cd:f6:ac:
12:ba:1f:ea:10:a2:b4:04:f1:71:e7:dd:86:6e:f9:
e5:24:25:52:bd:4f:b1:82:0e:85:73:09:f0:07:58:
75:4c:40:3d:51:30:aa:06:77:01:93:32:97:3c:37:
a4:d9:e7:65:80:1a:f0:75:10:d2:2d:e2:82:40:1f:
fd:bb:5c:54:44:67:e3:50:52:4e:8b:76:0b:ec:88:
a9:78:1f:64:cd:d4:06:5b:48:60:66:19:0d:f2:9b:
9d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D7:AA:4B:17:47:30:4C:64:AD:B1:59:3A:5C:03:97:95:86:B3:A4
X509v3 Authority Key Identifier:
keyid:FA:1D:E3:7B:BC:6C:06:42:0D:A6:26:C0:BB:4D:72:32:31:E9:3E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-h3je7xsBkINpibAu01yMjHpPoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/608f6d-8cd1-499e-a518-5f15939e7680/1/1-h3je7xsBkINpibAu01yMjHpPoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:77:1d:8c:31:5e:05:a3:1f:ab:d8:44:1a:26:fc:55:9d:88:
ab:69:8c:08:0f:81:61:77:d4:eb:ae:e1:64:aa:10:ba:20:5c:
86:95:6a:04:33:52:4d:92:48:a8:de:0a:a1:94:22:ce:28:76:
63:6c:86:82:94:8e:66:53:e3:a7:59:08:9a:c0:ba:a8:62:6a:
40:ef:64:e3:e5:9a:2c:74:02:e6:0a:e2:eb:3c:e7:67:89:5a:
3c:2c:d4:59:c9:01:5c:22:76:39:ef:ad:de:15:a4:f4:57:24:
29:e1:b1:39:20:a0:21:a0:25:a3:8a:ec:89:ec:7c:fa:88:dc:
ab:bc:95:5b:c4:7d:6f:9a:88:16:fa:28:18:19:50:b7:c5:92:
c9:44:e0:e5:86:85:94:d6:48:a3:8c:b5:c7:b9:64:78:80:bd:
ee:8a:54:67:ae:32:59:dd:b1:4c:75:29:b3:e4:eb:3e:55:30:
09:62:c4:9a:f9:0c:83:3e:b1:50:af:5f:81:08:38:3b:ae:a5:
dd:f6:57:91:d2:64:f4:86:0e:39:d5:fa:dc:8a:1c:d8:45:c4:
79:71:a0:a8:c9:81:56:d0:5e:71:51:4c:ee:8f:f7:be:c2:75:
04:89:9d:83:84:ce:ea:23:19:93:05:50:f4:ea:56:60:50:44:
b9:35:9d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 13:31:16 2026 by rpki-client