Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
File: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json)
Hash identifier: 8i5TvrbfT2VDfQFUIXZWQrV3ZXnl7f98VDvWPt2qZAU=
Subject key identifier: 33:66:A5:3C:ED:78:13:AA:64:A1:5F:75:CE:BC:22:47:43:FF:D6:5A
Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Certificate issuer: /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Certificate serial: 019CC5CFC0DB97D8399CBFFA215E65F49FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
Manifest number: 0410
Signing time: Sat 07 Mar 2026 01:00:52 +0000
Manifest this update: Sat 07 Mar 2026 01:00:52 +0000
Manifest next update: Sun 08 Mar 2026 01:00:52 +0000
Files and hashes: 1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: gqNpB19rRWgrJVRxpZk/DaOtQW51Awsgr13omNZiinA=)
2: OytMoAZMK8wtoSzZvtAHJ9Md1Mo.roa (hash: H/07CVFn18uiXemUf+RsWUhgJ/GpamvFqfgXdnjOQDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Mar 2026 00:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:c5:cf:c0:db:97:d8:39:9c:bf:fa:21:5e:65:f4:9f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Validity
Not Before: Mar 7 01:00:52 2026 GMT
Not After : Mar 8 01:00:52 2026 GMT
Subject: CN=3366a53ced7813aa64a15f75cebc224743ffd65a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:25:5f:9a:7f:2e:e7:e0:1f:2e:62:61:a8:7c:
b7:c1:86:43:b2:86:d4:45:d0:ff:f4:ce:39:66:97:
6d:af:90:8a:87:54:b6:8e:01:88:b1:79:d0:11:7b:
b1:db:93:be:28:c8:48:0e:0d:be:97:9b:d2:cd:17:
b0:ee:ac:e5:48:7f:0d:2a:b8:a9:1d:d1:89:5f:6f:
c8:86:d7:d6:c6:d3:48:b1:12:b6:8a:6e:8a:43:c1:
58:cf:a0:98:10:7c:12:17:2b:37:9f:d9:de:a7:cf:
1b:23:93:71:00:d0:25:53:8c:00:67:9f:9c:ec:b7:
2a:b4:cb:43:74:23:3f:29:bf:dd:21:dd:64:2a:b2:
c6:52:6a:ca:b2:36:f1:ba:62:2c:7c:0e:95:a3:f4:
14:01:09:43:36:7f:17:b6:42:d1:d8:de:88:06:a8:
b1:dd:13:08:d6:3b:d5:98:e5:fc:4b:62:b6:9c:34:
2f:01:85:33:da:92:2b:71:a5:f2:1b:85:71:c4:e0:
19:b7:53:03:83:52:cc:05:86:d0:32:21:59:c3:c8:
14:e2:20:8c:ba:8f:40:be:78:65:ba:f6:46:06:00:
a0:70:cc:f3:3e:a8:59:5a:de:02:00:c2:ee:23:e7:
32:5f:f7:e0:1b:dc:35:1e:e5:35:91:25:76:87:4d:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:66:A5:3C:ED:78:13:AA:64:A1:5F:75:CE:BC:22:47:43:FF:D6:5A
X509v3 Authority Key Identifier:
keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:7a:c8:dc:1b:57:3a:17:b4:0b:39:7b:5f:39:b1:55:3a:ef:
e2:ec:ee:41:9e:99:c5:d9:4f:b2:46:fe:52:79:1f:4b:0a:f6:
bf:51:32:43:b6:91:c3:80:21:a6:e2:ae:75:67:f2:fd:b0:a2:
03:75:e3:c8:99:cc:1f:2f:d9:92:1a:d4:fb:92:c0:72:a1:e1:
ab:e1:bc:50:0a:9c:45:fa:5d:5b:8b:95:3a:6d:8a:29:91:11:
c1:15:19:5b:1e:7b:13:4e:2c:3c:5c:c1:1a:ed:d0:d5:b6:ae:
e9:2c:bd:79:34:18:57:be:05:54:d3:f1:ea:95:cd:9c:04:6a:
00:c1:58:23:75:52:d3:2a:ee:c3:67:ba:08:cb:65:88:7d:09:
e7:82:b8:18:ac:95:89:81:97:0e:72:41:5a:7d:63:a7:7e:26:
9a:e8:a5:82:69:ae:a8:c6:b4:2a:95:42:7f:29:04:e5:c4:b1:
f9:6a:f7:52:fe:53:0c:7c:d5:87:61:61:e5:c8:f8:f4:3d:b4:
8f:83:c1:5a:ae:44:49:a7:6a:5f:d8:ff:08:f9:f7:6d:e8:94:
45:cb:40:22:7d:28:f8:43:90:07:c5:db:76:d2:2f:a2:80:be:
41:5e:b7:78:dd:08:db:11:2b:e3:58:f9:18:a0:0f:12:c4:70:
90:b1:7e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 06:27:10 2026 by rpki-client