Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier: IGOleHMEC3v+adXR4RrOOSid+LV4FDLBZCNN74d9G2o=
Subject key identifier: AA:66:8A:04:5A:9A:56:7F:AF:2F:A9:CD:CF:93:1A:38:5A:57:18:15
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial: 01A000CA4D30DB0A40F9614B0BBAA0034958
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number: 17A2
Signing time: Fri 14 Aug 2026 15:00:53 +0000
Manifest this update: Fri 14 Aug 2026 15:00:53 +0000
Manifest next update: Sat 15 Aug 2026 15:00:53 +0000
Files and hashes: 1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: P0YecoRYnuyUTLJHjv3s4KrblO3Zz/9ZVRDaEWb4l5s=)
2: DIEeHXr-sg72w8tBgzQ5nqnQ7go.roa (hash: EtH8YkhhVk7GVyIh/CoOOspQ4bbxWgxf9R15/OkaX/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:4d:30:db:0a:40:f9:61:4b:0b:ba:a0:03:49:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Validity
Not Before: Aug 14 15:00:53 2026 GMT
Not After : Aug 15 15:00:53 2026 GMT
Subject: CN=aa668a045a9a567faf2fa9cdcf931a385a571815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:05:3d:ad:c0:2e:e5:34:da:e2:79:93:02:35:
68:13:8f:db:cc:50:47:32:4c:61:90:f3:65:b3:3e:
17:a3:f9:6d:83:92:1e:7c:63:ea:86:9c:50:91:3e:
e6:00:0d:9c:4a:bb:d5:77:eb:8d:18:e7:f0:81:84:
19:7f:a8:a8:89:1c:de:66:60:b0:b2:f9:8f:c5:c9:
f7:c1:e5:aa:4e:5c:7e:cc:74:e4:e4:56:de:01:d7:
37:05:73:a7:34:19:67:79:c2:bc:c9:fe:bf:77:71:
e3:8c:62:8e:de:3a:8f:e3:fc:99:b9:d1:b5:bf:af:
6f:2e:88:96:18:e2:82:36:9b:ad:a8:ce:42:19:aa:
f2:cb:6a:f7:b8:98:bb:2d:68:cd:4e:34:1a:36:54:
84:4b:50:ff:b3:c3:e9:99:b8:c4:b9:63:d4:07:e2:
99:f6:c2:31:fe:84:35:ca:6c:62:98:12:8a:31:c6:
a3:49:f3:cc:c2:25:4e:da:0d:9a:36:b6:84:00:8b:
a2:54:92:0d:3d:89:69:ad:6c:dd:dc:42:05:59:98:
db:b1:4b:33:24:cb:19:87:27:46:47:57:82:e3:cb:
d4:21:38:75:e3:c7:3a:f4:60:38:c6:4f:77:fd:b6:
a6:f9:22:43:75:45:38:d6:2a:5d:10:27:6d:2f:f6:
39:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:66:8A:04:5A:9A:56:7F:AF:2F:A9:CD:CF:93:1A:38:5A:57:18:15
X509v3 Authority Key Identifier:
keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3b:46:27:4d:ec:02:ed:6b:e4:b9:32:f9:c1:f2:6f:ef:46:
d1:1e:01:37:19:f7:a5:61:46:ff:62:e3:42:8e:ed:28:1b:21:
ca:30:59:05:ad:8f:ea:f4:56:0c:b4:21:72:81:4b:f4:f9:4b:
ed:e1:b4:d6:68:28:43:41:80:09:30:97:76:03:ad:ff:de:d1:
39:c9:56:4b:1d:ce:0b:07:33:df:65:09:73:40:03:b6:99:9b:
4f:5b:d2:00:ec:40:4c:73:60:b3:3d:87:42:0b:dd:8f:90:83:
f6:b7:95:f2:ae:9b:16:24:8a:fa:70:af:30:8a:a9:78:64:20:
98:d4:d7:fd:34:0a:6a:70:40:df:89:f5:c1:41:a8:f9:95:22:
20:27:16:dc:9e:5c:bd:39:61:3c:09:e7:dc:cc:d8:5b:09:b8:
a9:a1:5f:7f:b3:ca:f5:0b:47:cd:67:2c:5e:1e:c1:ac:9b:61:
2c:4b:e1:c2:72:7c:87:8f:2e:24:34:77:c9:14:0c:b6:ae:e8:
19:b6:44:8a:c9:e9:4c:88:8e:46:f5:fc:6b:85:10:c9:92:67:
3d:c2:f4:79:45:8d:84:46:3c:59:b9:b2:9a:f4:31:75:aa:fe:
49:5d:02:1e:de:16:cb:f0:bf:b9:91:e2:dc:e9:80:ed:37:87:
17:f1:6a:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 22:25:05 2026 by rpki-client