Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
File: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json)
Hash identifier: nBSHeYEHhfp8co+WfKC5g8kPv/w4f8to24tVztiI04o=
Subject key identifier: 75:B7:B8:2D:DB:97:2F:66:45:0B:51:E9:04:B9:0C:7E:8E:35:CC:89
Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Certificate issuer: /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Certificate serial: 01A16F4928345589FD029AD62F90D8472933
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
Manifest number: 067A
Signing time: Sat 24 Oct 2026 19:00:27 +0000
Manifest this update: Sat 24 Oct 2026 19:00:27 +0000
Manifest next update: Sun 25 Oct 2026 19:00:27 +0000
Files and hashes: 1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: yfGLBucBzP96lHwgRyeIYgV+qnN21IZqEa0mYJo2byw=)
2: OytMoAZMK8wtoSzZvtAHJ9Md1Mo.roa (hash: H/07CVFn18uiXemUf+RsWUhgJ/GpamvFqfgXdnjOQDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:6f:49:28:34:55:89:fd:02:9a:d6:2f:90:d8:47:29:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Validity
Not Before: Oct 24 19:00:27 2026 GMT
Not After : Oct 25 19:00:27 2026 GMT
Subject: CN=75b7b82ddb972f66450b51e904b90c7e8e35cc89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:15:c7:a6:33:e6:57:2f:ff:15:e6:46:f9:
9c:af:87:55:42:12:58:2d:a7:3b:0f:9f:4b:2b:1b:
05:4c:b9:47:61:aa:d9:d2:c2:c6:78:a9:e1:48:8a:
f9:cf:9d:f4:9f:dd:32:73:1c:aa:57:d7:d5:d8:85:
84:75:9d:bd:36:7b:d6:e6:ea:4d:6b:8e:8d:7b:2e:
ce:fa:98:ca:8a:da:26:17:f2:da:3c:38:32:18:c7:
65:4e:3c:cd:24:05:cf:f5:80:d4:df:9c:1c:ff:67:
d8:78:ea:a3:1e:7e:88:96:65:45:b9:37:90:8a:8f:
22:f9:a0:a8:75:6e:ec:c0:f5:9a:f0:45:8d:31:6d:
49:87:fe:8e:60:ab:34:ef:17:3c:ee:f1:22:fc:63:
06:9d:8c:57:f9:ba:5b:36:49:3a:fa:d2:bc:a3:08:
41:51:08:bd:f7:3f:47:1e:ea:87:d5:d1:6e:b5:3f:
d2:21:8c:f9:40:37:6a:ea:28:bd:67:79:21:1f:55:
8c:32:fb:15:e6:1b:4b:18:b8:b6:fe:46:ef:a7:3c:
dc:c8:4a:90:7d:b9:7a:3a:79:35:f8:ac:f7:97:9b:
53:fc:f6:8a:ee:7a:da:4f:1f:aa:c3:c0:12:a0:20:
ca:6c:52:b9:42:cf:69:aa:ad:8f:f4:6a:b3:bf:7f:
fb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B7:B8:2D:DB:97:2F:66:45:0B:51:E9:04:B9:0C:7E:8E:35:CC:89
X509v3 Authority Key Identifier:
keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:dd:25:ca:78:2d:f6:03:12:d8:7f:f3:e0:75:58:27:1d:33:
ec:d8:60:04:e9:55:2b:04:f8:4b:17:6f:4f:d5:d2:10:1f:2d:
2f:d6:f9:7f:3e:a1:95:7e:da:5f:be:0d:87:1e:6d:d0:e4:d8:
be:6a:ee:81:ce:80:0e:43:70:f7:ca:a8:a0:2c:52:93:1c:4c:
ce:22:21:84:be:b9:da:c6:31:5d:87:23:f4:35:d4:6e:21:0c:
74:a3:e3:ac:4f:eb:74:68:80:1b:e7:e6:c3:c8:9d:25:d9:79:
83:c7:ef:fa:a8:3f:8d:88:1e:58:48:73:ac:95:92:a4:d1:cc:
ee:71:dd:10:36:14:fc:4d:8c:59:19:38:17:6d:e8:11:29:48:
61:5e:85:b7:70:e3:fc:32:d1:f3:2d:6d:e3:dd:fc:dd:9b:89:
32:68:5c:63:d1:95:3a:45:7a:53:bf:73:4e:76:44:0c:ea:f8:
43:e4:64:df:30:87:0a:72:c4:c8:79:0e:50:49:98:a0:f8:6d:
86:e0:76:65:22:22:68:78:d0:bc:0b:0c:f2:a4:9c:1f:93:f4:
39:c1:b3:60:59:27:0e:71:f2:01:08:69:ac:09:92:bf:c0:87:
33:e4:90:71:d9:31:14:9a:f0:ae:f6:a9:e7:35:d8:e1:c2:01:
7b:01:86:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 04:54:35 2026 by rpki-client