Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier: lOZDG/OyYeQbWI1D9LeqkHXl3QEJs+NbaZ7wT14uptI=
Subject key identifier: F4:BE:F5:2C:06:4C:01:28:0B:BB:89:82:D2:D3:BA:BF:11:09:98:9A
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial: 019E2F5F9BB72673669FCBF3AA468D3C559B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number: 16B1
Signing time: Sat 16 May 2026 06:00:55 +0000
Manifest this update: Sat 16 May 2026 06:00:55 +0000
Manifest next update: Sun 17 May 2026 06:00:55 +0000
Files and hashes: 1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: CJJgz2SzCjknTcUt125A0BKE+1lnUC08U2MmTZq3S+Y=)
2: DIEeHXr-sg72w8tBgzQ5nqnQ7go.roa (hash: EtH8YkhhVk7GVyIh/CoOOspQ4bbxWgxf9R15/OkaX/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 06:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:5f:9b:b7:26:73:66:9f:cb:f3:aa:46:8d:3c:55:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Validity
Not Before: May 16 06:00:55 2026 GMT
Not After : May 17 06:00:55 2026 GMT
Subject: CN=f4bef52c064c01280bbb8982d2d3babf1109989a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6e:39:03:1c:58:56:07:47:82:25:6f:8d:c1:
2e:70:41:c7:f7:bd:db:09:8b:52:b5:4a:66:15:48:
8b:8c:82:24:27:55:6a:6f:41:ab:92:31:1c:77:3c:
35:63:70:c3:92:b3:63:f4:51:c6:26:e9:4e:e3:2b:
79:76:da:f0:d5:94:88:27:9f:29:04:44:15:d0:65:
65:88:3c:a4:67:bc:59:5a:ec:b3:91:80:02:58:c6:
5b:49:97:f2:b4:7a:ea:ca:de:43:01:bd:06:57:48:
a2:e9:a9:fb:e6:3e:5e:00:15:35:db:2f:94:1b:04:
82:64:41:63:82:d2:14:9b:cc:8a:62:a8:90:89:33:
0e:b7:f4:71:c7:23:47:a9:4d:7a:6f:67:84:bc:c8:
58:45:b4:9a:84:04:b4:79:97:44:66:b4:87:43:22:
5e:5d:9a:f9:0e:7c:3c:67:18:34:f2:7e:fa:c2:38:
b0:5e:db:df:69:3c:d9:4d:55:f8:2c:97:9c:97:70:
7e:79:54:20:5a:9e:80:18:20:aa:e1:87:4c:e5:78:
42:5e:9b:7f:e6:16:19:12:eb:a1:63:46:a9:75:95:
f3:b0:c9:25:bb:e8:db:d9:de:0e:f2:5d:df:63:a2:
c9:eb:2a:27:17:66:3a:cd:92:b3:98:d2:ed:ad:0d:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:BE:F5:2C:06:4C:01:28:0B:BB:89:82:D2:D3:BA:BF:11:09:98:9A
X509v3 Authority Key Identifier:
keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:73:36:b4:d4:95:23:b4:09:ec:6d:b6:15:0e:cc:23:f4:34:
d0:35:74:3c:66:fe:0c:99:f5:c1:31:27:50:15:cf:1f:1f:ed:
13:46:44:aa:36:c9:24:35:c3:2f:c5:36:f7:e7:f0:2e:cb:33:
14:b0:ad:ed:3c:97:40:e8:63:ef:e4:7c:be:28:e4:8f:b1:87:
32:02:45:7e:57:53:26:02:8c:d2:21:f0:a8:95:70:ee:34:67:
66:60:b1:e3:9c:5e:20:55:29:41:14:c3:e6:b3:11:a5:74:a9:
a9:f4:e0:bc:3a:b8:a0:8e:10:6f:a8:3e:7f:ae:33:50:9b:db:
2b:c7:5f:87:4f:3e:ab:92:3b:9b:c5:79:bf:55:27:41:c7:fe:
cf:20:d3:10:8e:51:d7:52:28:1f:49:ca:71:23:50:d8:54:ef:
41:7a:5f:94:27:5a:be:c3:ef:55:7a:2d:d9:e9:d9:65:f9:f8:
1a:80:9d:08:02:0c:19:55:8b:d0:ad:3b:f4:f9:8e:a1:f5:5f:
d5:8c:c3:a2:8b:cd:21:9d:68:a9:5b:29:75:c5:3b:d9:97:b1:
fc:37:c3:d2:28:d3:21:24:14:20:2e:7a:46:d5:bd:f4:d0:ca:
82:82:60:0d:6b:d7:32:43:dc:65:a3:32:7a:58:be:18:e1:89:
2c:46:f6:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:20 2026 by rpki-client