Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
File: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft (raw, json)
Hash identifier: ovcXqxSqFJclUciBN6qUI4jNQjvWST2ZmVTHL30QEXw=
Subject key identifier: 9D:B7:C4:8D:F2:38:3D:69:1B:2F:57:21:D3:0C:0B:8E:E9:39:7F:EB
Authority key identifier: FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
Certificate issuer: /CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Certificate serial: 01A11BD14B246A17374682269E3467081CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
Manifest number: 049D
Signing time: Thu 08 Oct 2026 14:01:03 +0000
Manifest this update: Thu 08 Oct 2026 14:01:03 +0000
Manifest next update: Fri 09 Oct 2026 14:01:03 +0000
Files and hashes: 1: 1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl (hash: m9bhJZhhDIV9sowTNEJURHa8MsDAgMS0ddk4gjQkhEE=)
2: FKy4QquWDiXsB6434vLtVQiZ1BI.roa (hash: E7KgcSUkFp282kfhM/A9rdhpcSBu+wYieQbkPSRtk8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1b:d1:4b:24:6a:17:37:46:82:26:9e:34:67:08:1c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa14e8153cd3f91c33397f9b7df91bf173c4d16b
Validity
Not Before: Oct 8 14:01:03 2026 GMT
Not After : Oct 9 14:01:03 2026 GMT
Subject: CN=9db7c48df2383d691b2f5721d30c0b8ee9397feb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:27:fb:59:75:d8:0c:a4:c0:62:b3:c9:54:c5:
6e:58:3e:5d:e6:37:95:d0:32:ea:6e:f6:ee:e4:e3:
88:18:d4:7c:09:1e:cb:38:41:10:36:ed:af:e4:c8:
a2:67:27:49:38:9f:82:3b:46:a0:03:28:ab:f9:90:
f2:35:54:bc:9b:bd:03:70:0c:93:3c:46:d3:01:2c:
79:0a:04:c0:09:12:80:39:fa:d1:e0:85:f0:e8:f8:
0b:95:47:b3:19:3a:9e:f0:f6:02:e8:ae:b2:9b:53:
c5:04:94:76:9c:f1:a1:84:ab:52:e0:75:7a:35:15:
34:22:48:ac:73:77:4b:6c:f2:f7:95:9f:5b:b8:04:
5d:4b:81:6d:e3:4a:22:cf:27:af:eb:cd:84:e2:63:
21:6c:18:9c:28:21:65:aa:c7:4f:b9:b1:7b:57:9e:
ac:3b:4d:ef:00:d6:0c:63:c0:2f:68:06:f5:e3:2c:
1b:50:c1:c5:8b:31:d3:d8:c5:46:b8:72:56:6c:80:
7c:c2:06:94:ce:e1:26:db:ea:5b:13:f5:64:1c:4b:
3d:b8:74:a0:b9:ba:9a:8d:ce:9e:7d:ed:da:c9:97:
96:6a:72:ab:fc:d4:74:7b:4d:e7:8a:aa:bd:e6:a7:
a6:7c:88:90:48:b2:bb:2a:c3:f4:28:2b:ae:5c:af:
72:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:B7:C4:8D:F2:38:3D:69:1B:2F:57:21:D3:0C:0B:8E:E9:39:7F:EB
X509v3 Authority Key Identifier:
keyid:FA:14:E8:15:3C:D3:F9:1C:33:39:7F:9B:7D:F9:1B:F1:73:C4:D1:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hToFTzT-RwzOX-bffkb8XPE0Ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/240780-8110-45d7-bd73-fdfd2d72b541/1/1-hToFTzT-RwzOX-bffkb8XPE0Ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:19:7d:cf:1e:35:61:fe:e5:ae:ff:da:e9:c3:05:b3:65:12:
6e:f3:75:b5:ba:3d:ad:54:82:04:2a:8b:af:0f:61:5b:ef:93:
3f:aa:13:97:50:1d:7c:f2:dd:d5:b6:07:3e:88:07:15:d8:b8:
3c:a9:73:20:9d:68:f0:27:0d:0c:ab:1e:6b:a8:15:1c:0e:1e:
96:07:b5:53:e1:ba:52:f4:22:bb:a8:2e:8e:39:f7:9d:ee:58:
86:46:6f:8f:de:14:24:13:e2:e3:63:2d:ee:00:89:02:40:2e:
7c:30:4f:fc:59:b3:27:5a:58:ee:80:60:c0:43:a6:9a:5e:4e:
01:91:b2:0f:c1:32:e6:e6:f8:5f:81:df:66:97:96:07:10:a5:
56:16:98:03:19:1d:a1:a2:a9:cd:ea:b7:0b:4e:d5:fc:06:a4:
21:0d:32:4b:50:03:5f:71:cf:8b:f2:57:fa:40:be:cb:6a:42:
63:4e:d5:49:4a:a8:ab:ac:00:a6:81:94:71:77:94:8d:e9:6b:
68:5f:25:e8:59:75:71:c7:f4:22:b2:1d:02:76:ac:9c:05:fc:
d2:42:2d:13:dc:9e:bd:20:a8:0e:48:c2:57:b1:bb:8a:02:b1:
a1:5a:ea:e1:69:0d:a6:62:4b:eb:a6:d6:9b:38:df:d0:2e:0b:
e7:92:13:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:33:54 2026 by rpki-client