Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
File: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json)
Hash identifier: +eFwGNxKwcakdK8gRN4k6I5QQdJJcp6sUE6KH6+hi2k=
Subject key identifier: E9:29:5B:A4:36:A5:18:E5:DB:4E:AC:ED:89:FF:2C:54:F1:32:21:F5
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial: 019E3072A4474C052CC5E5C1D56FEB979D24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
Manifest number: 0AC2
Signing time: Sat 16 May 2026 11:01:19 +0000
Manifest this update: Sat 16 May 2026 11:01:19 +0000
Manifest next update: Sun 17 May 2026 11:01:19 +0000
Files and hashes: 1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: ItxFkMe36hN6E+6ah5yp2ZpScIBu0UqJKWABsRYpYds=)
2: BDsUG_qKwMK-zw5cb5re_OOs500.roa (hash: MK43bq66jUMUM5Ahm8KsScwtAMlZLSz7Ozov3YQzRIE=)
3: tB4j1pvJwB8N2xtUjgH-EaS2pKM.roa (hash: lQm30cKDdInn0Sofx9UuVyNM+EwoftWy+uBDomRAiDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:72:a4:47:4c:05:2c:c5:e5:c1:d5:6f:eb:97:9d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Validity
Not Before: May 16 11:01:19 2026 GMT
Not After : May 17 11:01:19 2026 GMT
Subject: CN=e9295ba436a518e5db4eaced89ff2c54f13221f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ba:b4:ef:22:04:26:64:cd:14:ed:58:3c:0a:
07:57:ea:ed:ff:ee:9b:8a:6b:bf:24:66:c5:26:ec:
00:62:67:9f:34:85:28:c1:1c:69:4b:e2:20:a3:f0:
d8:1e:47:89:e3:f2:27:5e:d2:c0:2f:b9:7e:aa:4c:
92:bb:9c:80:62:6c:82:1e:f4:07:3b:20:2e:b2:db:
ff:4b:8f:e6:bc:bb:73:94:cd:90:ec:a5:57:78:3d:
a7:d7:04:da:ac:03:41:01:91:cb:f1:cc:56:9f:b4:
74:99:a5:ca:f0:61:d5:eb:a0:16:5c:45:22:d2:60:
80:15:a7:1f:27:d9:c5:38:2c:76:66:f6:e7:b2:1b:
32:e9:6b:a5:3d:ed:20:ec:50:5e:da:d0:6c:98:76:
7d:d8:79:b6:1b:d7:68:70:a3:79:64:a8:fa:1f:56:
af:70:07:b2:9d:87:9d:bc:15:9a:6d:4d:40:ee:5f:
b5:27:9b:09:86:40:59:c2:e4:6f:90:67:f2:e1:fc:
cf:c2:fe:29:b6:86:0f:ed:1b:a8:7a:8b:ee:eb:19:
8e:c0:ae:e2:9d:3a:c8:be:a4:d1:40:71:1b:f8:37:
c6:12:91:d0:89:c0:f1:a5:6c:ea:65:eb:39:a8:d6:
4c:0b:4f:45:9a:b7:35:0b:08:13:99:14:b6:2c:99:
ab:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:29:5B:A4:36:A5:18:E5:DB:4E:AC:ED:89:FF:2C:54:F1:32:21:F5
X509v3 Authority Key Identifier:
keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:76:a2:a2:d0:50:07:ca:fa:ce:a1:31:da:cf:c0:bd:4f:24:
92:45:ff:db:c0:c3:33:29:72:3b:5d:0f:c4:6d:bd:d3:42:76:
0e:40:b6:25:9f:c9:9f:7e:dc:51:3c:63:77:c8:95:2a:4a:e1:
99:00:d4:2a:c6:d9:8f:29:95:49:24:e7:93:68:96:6d:84:5e:
20:33:4d:33:4f:e0:21:b7:8e:20:67:87:d3:57:b4:56:67:a5:
db:0e:33:64:a9:18:d3:71:a0:5c:36:2e:8a:ad:a6:42:85:04:
6a:ba:34:01:2c:6c:54:63:f3:8a:b7:fc:78:ab:42:c6:99:08:
50:2a:87:25:31:d2:5f:76:55:7e:5a:71:13:ab:85:5f:a3:7f:
d3:42:de:f4:4f:d9:ef:c9:66:74:a3:64:46:98:ed:ec:16:36:
26:8c:0a:e4:cc:74:e4:bb:09:52:45:6a:d5:91:fd:14:63:7e:
ab:e3:da:c7:4f:a7:bc:65:6b:a0:48:be:b5:5b:51:2b:58:b5:
71:c2:73:c5:77:0d:f9:95:df:c1:a5:79:43:f0:7f:24:6e:9b:
44:00:7f:17:c8:0a:9f:0c:06:b5:9b:4f:46:e5:f7:9a:d5:c9:
c3:e6:10:b5:9b:cf:72:63:b7:07:08:2a:a4:36:a0:64:97:c1:
57:93:6c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:37 2026 by rpki-client