Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
File: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json)
Hash identifier: nnc/oX0QNS3d8JQTDAe/rpibZRpxgskNj+K0++6tD/A=
Subject key identifier: AF:8E:DE:A1:30:4D:19:98:1B:29:66:9D:84:1B:6D:DB:89:C5:63:24
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial: 01A001A66A97894413875FA2CE8D8AFC7B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
Manifest number: 0BB5
Signing time: Fri 14 Aug 2026 19:01:18 +0000
Manifest this update: Fri 14 Aug 2026 19:01:18 +0000
Manifest next update: Sat 15 Aug 2026 19:01:18 +0000
Files and hashes: 1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: tjMOX9CbymvJACIPXScix3cjvpFcSzUvYZHrhYeKWtE=)
2: 8SzZYJ9UpnTulHyeUHPHVjPySiY.roa (hash: gpJwGPvf4OsehSE6/EMx/5p/RJPcEJmWMZnsFxVxJ80=)
3: rsroaei2TqcIFnLEgGYzqyrWcFk.roa (hash: 5AMA9aMta9Csy7KyS+5XAc3h7QHkQnnyf2Wg73Az1uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:a6:6a:97:89:44:13:87:5f:a2:ce:8d:8a:fc:7b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Validity
Not Before: Aug 14 19:01:18 2026 GMT
Not After : Aug 15 19:01:18 2026 GMT
Subject: CN=af8edea1304d19981b29669d841b6ddb89c56324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e0:c3:21:f4:41:71:b2:b8:9c:d4:57:8d:e6:
4e:b1:e7:18:f2:c1:30:4e:a6:0f:36:54:65:23:84:
08:e9:da:2e:3d:f2:aa:b7:04:3b:c1:92:f8:3f:4c:
d9:65:b1:07:20:4c:9d:b7:04:3c:68:6f:e9:45:a2:
e0:18:91:1b:36:85:be:ab:2b:c7:27:d1:b9:18:8c:
bc:85:48:ce:6c:a4:ca:f7:fe:e0:15:c2:2a:d7:d1:
5c:83:26:12:b7:a8:82:bb:4f:8b:e8:c5:c3:1b:8d:
db:2b:02:4b:d6:c1:88:9d:c7:01:58:60:33:78:1f:
38:98:85:60:10:d6:54:78:c0:fe:4e:c7:42:2a:04:
4d:c3:f8:5b:86:dd:6c:cd:4c:27:1f:b3:cd:be:99:
83:af:c0:d7:01:de:96:af:da:48:77:e0:7c:0c:c1:
27:88:97:0c:0c:81:7e:77:00:a3:0f:81:bc:2c:d3:
14:27:c9:56:e5:45:4e:e8:c8:30:46:54:44:1d:53:
d7:11:74:80:ab:64:43:61:db:e4:f7:63:38:fb:ff:
60:f2:ff:91:2e:44:56:0e:02:46:4c:b1:38:d5:d2:
69:93:ca:ff:3a:83:91:9e:24:8b:48:40:95:31:14:
c2:00:a8:5a:88:de:44:71:e4:8b:fc:7f:91:51:85:
7f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:8E:DE:A1:30:4D:19:98:1B:29:66:9D:84:1B:6D:DB:89:C5:63:24
X509v3 Authority Key Identifier:
keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ef:54:99:c4:02:d5:98:60:8a:29:76:98:a0:b3:d5:e4:99:
28:de:70:bc:ed:f4:9c:93:8d:aa:07:8d:eb:73:0d:52:52:6c:
24:04:06:e9:d9:96:5f:87:3d:da:e7:93:08:e3:3a:3c:19:c4:
bd:82:ea:af:27:99:2c:01:2d:c4:28:aa:0e:8f:45:a2:c8:3a:
ae:4f:1d:37:f9:90:d6:11:aa:89:c2:c8:1b:d3:c1:fe:c3:48:
fc:13:0d:4b:92:18:40:81:7a:4d:4e:94:36:eb:6f:1f:13:d7:
df:65:50:83:bf:39:1f:6c:ad:84:05:96:a6:de:5b:64:fc:12:
3f:7e:22:05:97:d7:ba:a5:3d:04:49:b0:5d:ec:81:b9:f4:f0:
c0:aa:d9:33:44:f7:bb:38:90:4f:54:60:8d:fb:0d:7a:0d:4f:
c6:71:89:13:fb:1e:a4:02:03:3a:2f:06:99:e8:c0:21:b7:ac:
4d:ce:15:c0:96:73:af:a4:80:af:5b:fb:06:45:ed:ea:c0:a5:
dd:33:20:bc:99:4f:0f:9c:75:2d:f0:8d:aa:42:e9:a4:4e:3d:
da:37:93:05:75:b6:c9:d9:83:d3:12:94:e8:6e:0d:1e:a8:86:
c9:e9:f2:e6:13:2a:c5:f9:fa:af:e7:8a:e9:6d:81:99:b7:cc:
e1:c1:47:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:29:21 2026 by rpki-client