Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
File: FqBO4EsSgj6FP_JD02VR5M5oOnM.mft (raw, json)
Hash identifier: p0CAqFIHfg3dROqCwwp3KJwzuEICI3krP+3IhR+ZLFo=
Subject key identifier: 09:C9:6F:18:1B:D5:AE:CC:C7:5E:56:80:DE:18:46:5D:8D:32:21:E0
Authority key identifier: 16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
Certificate issuer: /CN=16a04ee04b12823e853ff243d36551e4ce683a73
Certificate serial: 019D382E322253C1A70AACD969E5040D1266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 06:00:44 +0000
Manifest this update: Sun 29 Mar 2026 06:00:44 +0000
Manifest next update: Mon 30 Mar 2026 06:00:44 +0000
Files and hashes: 1: FqBO4EsSgj6FP_JD02VR5M5oOnM.crl (hash: O09yu86MNSle4ErYkbJTKaUlgO7bGs+gO2VYnr/c1fg=)
2: vPfcpvhTzwgHZxkn9QHqISGa93s.roa (hash: tACs5TPIEpB3nwqH0vyYX3d8zy0v3YaCIyLPccgrw84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:32:22:53:c1:a7:0a:ac:d9:69:e5:04:0d:12:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a04ee04b12823e853ff243d36551e4ce683a73
Validity
Not Before: Mar 29 06:00:44 2026 GMT
Not After : Mar 30 06:00:44 2026 GMT
Subject: CN=09c96f181bd5aeccc75e5680de18465d8d3221e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:71:f6:fc:05:4d:db:79:27:3c:58:75:68:
71:05:e3:a5:9c:76:6f:16:75:35:b8:2f:34:a7:b7:
27:de:68:9d:a1:db:57:de:83:01:03:dd:10:26:6e:
92:88:25:8d:05:1e:90:d6:41:ef:31:ea:5c:91:99:
a8:08:7c:10:4a:b8:8e:47:b3:6f:fe:28:4f:14:dd:
16:c1:b9:80:ce:2a:31:df:cf:69:31:15:aa:fa:31:
1f:d6:94:64:9b:ba:77:1a:ec:e3:75:45:36:c3:49:
66:47:5f:b5:18:73:89:15:7e:b9:13:6a:8d:3c:3b:
42:73:f6:4c:b9:a7:4e:19:b4:02:fa:ae:01:48:e1:
4f:d7:50:e9:db:9c:08:dc:5f:9e:4d:ba:38:fa:f2:
0b:6b:da:71:b6:8e:89:45:0a:41:1e:0d:ce:6e:97:
99:4e:92:29:c8:48:ca:74:96:a2:a1:2e:f6:7d:28:
ca:3a:6a:78:3f:fb:6a:e0:ac:e8:02:52:ff:d4:e8:
84:b2:03:b6:34:e6:3a:aa:07:a4:92:55:cd:1d:40:
59:e8:7e:75:ef:32:e8:a3:11:1f:6c:1f:57:60:70:
97:a5:d4:18:0c:d5:bd:f9:c7:8c:81:b8:e4:a7:70:
4a:a9:1f:93:7f:63:b3:5e:ae:54:b1:d2:1b:78:d8:
75:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C9:6F:18:1B:D5:AE:CC:C7:5E:56:80:DE:18:46:5D:8D:32:21:E0
X509v3 Authority Key Identifier:
keyid:16:A0:4E:E0:4B:12:82:3E:85:3F:F2:43:D3:65:51:E4:CE:68:3A:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqBO4EsSgj6FP_JD02VR5M5oOnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/0e0821-aee9-4b96-8776-590fb949d104/1/FqBO4EsSgj6FP_JD02VR5M5oOnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:fc:65:ce:24:0c:a2:11:f2:b8:12:02:8e:71:dd:79:fc:67:
af:17:4c:ef:7e:4a:08:8a:69:78:14:92:ba:7d:bd:c5:51:89:
6d:c2:cc:d7:b5:af:38:cd:70:ce:af:65:fa:4f:17:7d:1f:76:
fd:88:c0:ad:30:cd:b7:e9:09:d6:53:34:ef:f3:14:79:f4:ce:
8b:86:45:31:4f:f1:2c:40:65:5d:c2:61:fc:e7:15:d0:f3:00:
55:58:ea:9b:44:c8:4c:dd:9f:c9:ba:18:39:a9:08:67:80:b3:
4d:77:2f:5a:19:f0:80:00:a0:da:6e:d7:68:60:12:12:ec:5e:
0a:7e:d9:37:a4:01:46:ce:12:fa:5b:cd:37:a8:0e:6d:84:60:
c3:7f:c9:32:ee:be:67:21:06:43:59:ba:9c:31:c3:d2:3e:39:
0b:5d:3c:5e:2b:9d:da:a3:f7:a8:29:91:44:68:be:41:1a:d8:
bb:a7:11:9b:9b:5a:e7:de:90:03:16:db:93:ba:96:a6:cf:25:
79:76:49:39:30:bf:2a:b2:ef:01:ec:da:ec:50:ec:1b:29:9e:
7c:e6:fb:ca:fa:b0:fb:86:03:48:55:c5:0c:0b:cd:08:86:7c:
fe:77:bf:5e:f3:8e:52:d9:b9:a2:66:2d:66:89:cb:56:d6:22:
80:8d:c2:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04LjIiU8GnCqzZaeUEDRJmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YTA0ZWUwNGIxMjgyM2U4NTNmZjI0M2QzNjU1MWU0Y2U2
ODNhNzMwHhcNMjYwMzI5MDYwMDQ0WhcNMjYwMzMwMDYwMDQ0WjAzMTEwLwYDVQQD
EygwOWM5NmYxODFiZDVhZWNjYzc1ZTU2ODBkZTE4NDY1ZDhkMzIyMWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7Zx9vwFTdt5JzxYdWhxBeOlnHZv
FnU1uC80p7cn3midodtX3oMBA90QJm6SiCWNBR6Q1kHvMepckZmoCHwQSriOR7Nv
/ihPFN0WwbmAziox389pMRWq+jEf1pRkm7p3GuzjdUU2w0lmR1+1GHOJFX65E2qN
PDtCc/ZMuadOGbQC+q4BSOFP11Dp25wI3F+eTbo4+vILa9pxto6JRQpBHg3ObpeZ
TpIpyEjKdJaioS72fSjKOmp4P/tq4KzoAlL/1OiEsgO2NOY6qgekklXNHUBZ6H51
7zLooxEfbB9XYHCXpdQYDNW9+ceMgbjkp3BKqR+Tf2OzXq5UsdIbeNh1JwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAnJbxgb1a7Mx15WgN4YRl2NMiHgMB8GA1UdIwQY
MBaAFBagTuBLEoI+hT/yQ9NlUeTOaDpzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnFCTzRFc1NnajZGUF9KRDAyVlI1TTVvT25NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8wZTA4MjEtYWVlOS00Yjk2LTg3NzYt
NTkwZmI5NDlkMTA0LzEvRnFCTzRFc1NnajZGUF9KRDAyVlI1TTVvT25NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8wZTA4MjEtYWVlOS00Yjk2LTg3NzYtNTkwZmI5NDlkMTA0
LzEvRnFCTzRFc1NnajZGUF9KRDAyVlI1TTVvT25NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwfxlziQM
ohHyuBICjnHdefxnrxdM735KCIppeBSSun29xVGJbcLM17WvOM1wzq9l+k8XfR92
/YjArTDNt+kJ1lM07/MUefTOi4ZFMU/xLEBlXcJh/OcV0PMAVVjqm0TITN2fyboY
OakIZ4CzTXcvWhnwgACg2m7XaGASEuxeCn7ZN6QBRs4S+lvNN6gObYRgw3/JMu6+
ZyEGQ1m6nDHD0j45C108Xiud2qP3qCmRRGi+QRrYu6cRm5ta596QAxbbk7qWps8l
eXZJOTC/KrLvAeza7FDsGymefOb7yvqw+4YDSFXFDAvNCIZ8/ne/XvOOUtm5omYt
ZonLVtYigI3CHQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:46:30 2026 by rpki-client