Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
File: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json)
Hash identifier: 6pivUStPQNkI2lODSenTWWCQkxuWiAA50KY/gv1btTo=
Subject key identifier: CF:D8:20:88:A7:20:F0:A0:2E:F9:4E:D3:BE:E8:6B:90:4F:71:8A:9F
Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Certificate issuer: /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Certificate serial: 019DB16A834C9FCEC512A5CD7DB98DEE6C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
Manifest number: 048A
Signing time: Tue 21 Apr 2026 19:00:40 +0000
Manifest this update: Tue 21 Apr 2026 19:00:40 +0000
Manifest next update: Wed 22 Apr 2026 19:00:40 +0000
Files and hashes: 1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: SpZwplfyvdVaHwqgvpHeylSdyfAAyhrGSD6ctS9K9Mw=)
2: OytMoAZMK8wtoSzZvtAHJ9Md1Mo.roa (hash: H/07CVFn18uiXemUf+RsWUhgJ/GpamvFqfgXdnjOQDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 14:21:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b1:6a:83:4c:9f:ce:c5:12:a5:cd:7d:b9:8d:ee:6c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Validity
Not Before: Apr 21 19:00:40 2026 GMT
Not After : Apr 22 19:00:40 2026 GMT
Subject: CN=cfd82088a720f0a02ef94ed3bee86b904f718a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:28:98:67:ca:df:45:33:5f:9a:85:04:f4:32:
d6:e1:1f:8e:71:18:d9:79:ee:09:70:00:02:86:45:
1f:b9:fd:5b:ee:2b:3f:89:ab:b5:ff:9a:ae:79:a4:
45:11:f1:6b:24:3d:c6:01:23:c7:d2:b9:6d:b8:31:
13:6e:35:e8:56:bc:2c:9e:0b:8f:03:24:da:1c:16:
ec:57:f7:2a:65:69:8f:c7:ec:d8:07:79:5e:f4:a6:
58:e2:f5:5a:47:32:01:41:25:80:a4:5c:36:d9:15:
7a:b0:49:c8:c3:4e:7c:0d:8f:c2:98:2e:4b:6c:1d:
40:dd:05:80:3f:d3:b0:55:30:68:77:a8:0c:30:71:
f2:cb:cc:34:fa:e6:95:f5:17:2c:7f:65:11:5b:c1:
54:4a:00:48:9c:60:75:72:c1:9b:1d:56:2f:04:63:
b6:a5:96:74:4b:93:38:e4:a5:1e:e5:74:b5:1a:21:
05:d1:e5:53:f7:b4:a3:bd:b4:ac:31:6c:44:dc:92:
94:56:22:36:90:8b:c4:1f:27:01:94:85:e7:1a:11:
e2:56:5a:2b:98:9c:c8:1c:76:32:2d:32:cc:72:2e:
a0:0c:b0:51:c6:16:fb:58:c5:0a:89:0c:7a:fb:99:
f4:5c:92:53:b6:fc:8f:df:8f:78:df:08:f3:6d:25:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:D8:20:88:A7:20:F0:A0:2E:F9:4E:D3:BE:E8:6B:90:4F:71:8A:9F
X509v3 Authority Key Identifier:
keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:16:2b:8c:a5:60:49:21:bc:ee:12:e2:dd:37:05:f1:e6:41:
60:5a:95:39:4a:c3:ea:7d:41:41:fb:16:20:6c:7f:e0:da:b6:
26:29:27:b4:7f:c7:91:1b:aa:5d:24:45:eb:09:6c:55:40:45:
62:3b:68:2f:ed:22:3f:f7:a8:c9:37:8d:75:77:37:70:b8:32:
1e:fb:a2:3e:9b:e3:35:ac:ee:ca:ba:bb:80:59:e3:47:4f:c3:
8d:2b:60:c8:dc:c6:6f:ec:bf:e0:bf:23:c8:c5:fd:f5:3e:38:
49:ec:be:f3:d6:31:64:e1:30:c4:ea:5b:b0:bd:8e:75:9e:2f:
c4:07:aa:69:7d:39:71:2f:d4:0e:07:01:49:28:27:5a:90:6a:
ee:21:14:33:a3:54:f2:f9:e8:02:f0:d0:1a:da:8c:69:45:5c:
36:59:e0:05:11:b8:9d:89:07:71:c1:ec:b3:5f:99:08:26:e9:
65:23:55:b2:ce:2b:0d:93:96:95:08:34:33:64:0d:15:1a:19:
1b:15:60:a4:fe:f6:5b:df:40:ce:fc:d2:72:88:5c:b0:02:de:
65:31:6b:d9:af:55:e8:7e:f3:c4:d6:83:26:71:9f:21:92:bb:
d8:4a:11:d1:82:f4:43:b3:bc:73:69:90:a8:10:10:e5:6d:69:
c2:f8:09:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:03:32 2026 by rpki-client