Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
File: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft (raw, json)
Hash identifier: LUX8yDlMIiGbDiWdUhZM4RKSAor5XfIhyWZ6tglYpq8=
Subject key identifier: 4E:5A:9A:57:57:7C:ED:34:98:F1:DD:A5:23:A2:60:FE:A4:EC:D2:3A
Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
Certificate issuer: /CN=faa16909ca4da39935eab9af038b58a5233122b3
Certificate serial: 019D35D2494C901E7FA65CF6F7C1359B6045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
Manifest number: 1822
Signing time: Sat 28 Mar 2026 19:01:06 +0000
Manifest this update: Sat 28 Mar 2026 19:01:06 +0000
Manifest next update: Sun 29 Mar 2026 19:01:06 +0000
Files and hashes: 1: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl (hash: kdcxwx+Bu/R3j9LV/HnCM5FBaRBfu/ZkCUzza0ZT2XI=)
2: GB_a4b1kVxMMUZoZCCtwC17cEDo.roa (hash: 33UFtMiUsHKZAxOVuIqQu69SANl3j9uJJ2Mz9LnCmac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 19:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:d2:49:4c:90:1e:7f:a6:5c:f6:f7:c1:35:9b:60:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3
Validity
Not Before: Mar 28 19:01:06 2026 GMT
Not After : Mar 29 19:01:06 2026 GMT
Subject: CN=4e5a9a57577ced3498f1dda523a260fea4ecd23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:c0:d3:3e:53:2e:c5:3f:42:e8:03:f3:bf:
19:e3:d8:d2:bc:20:2c:b6:17:98:fb:1a:22:0f:c5:
d5:8c:c8:2d:30:e2:d9:7b:fc:5c:d8:23:34:03:42:
48:ce:94:6d:ff:18:15:fe:76:24:a5:06:c6:d5:52:
ef:23:bc:8e:99:8d:84:bb:39:96:f7:d5:0a:bf:69:
68:c8:1e:96:67:11:29:cb:78:ce:b7:97:55:94:3b:
12:71:74:48:ff:76:ad:7c:b5:98:4e:62:4a:2c:35:
e7:47:7b:d4:ed:c6:11:51:17:68:04:03:eb:e4:8c:
35:08:fb:b4:ff:e8:ac:84:5a:d0:bf:20:43:e6:cd:
8b:26:9d:f8:c1:6d:4b:b5:68:8f:58:a3:5d:bb:2e:
1d:43:ae:11:99:98:96:d4:55:ea:73:78:62:7e:78:
bb:4e:e6:8a:60:f6:39:30:4d:2c:c2:46:7b:7b:64:
82:0d:8b:1c:5c:fa:1f:88:d2:c9:73:44:4a:9c:3a:
4b:92:cc:b1:6d:c1:6b:fe:d3:ba:7d:ad:1c:f1:8a:
63:5b:25:5f:54:5a:49:23:bc:1e:86:c3:9e:c1:be:
6a:95:d6:ad:37:0e:84:1e:25:0a:78:6a:6c:9c:b5:
b2:f9:1a:6b:46:c4:39:07:20:d7:c9:4f:ff:b3:3c:
31:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:5A:9A:57:57:7C:ED:34:98:F1:DD:A5:23:A2:60:FE:A4:EC:D2:3A
X509v3 Authority Key Identifier:
keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:ae:05:89:62:75:ab:11:b3:29:c6:cb:f1:46:e2:49:79:fb:
c9:41:30:f3:44:24:78:52:61:2d:78:a0:4a:0c:45:3f:89:b7:
fe:05:00:7d:5a:74:51:b3:c6:b2:a3:f7:bb:4b:2c:8b:e9:d7:
fa:cd:87:06:fe:d4:52:40:e9:3c:7d:54:80:6d:84:26:ce:06:
06:2e:04:34:13:06:d6:84:6e:4f:bb:59:11:a0:30:8a:08:e1:
f0:65:f3:23:8d:83:c8:de:bb:fe:b0:d6:73:7f:42:c0:3d:67:
03:21:15:54:42:fe:12:f4:e5:e2:37:4a:ae:6d:10:b7:16:be:
75:db:e5:6d:e5:ed:5b:9d:c1:e4:b4:47:c9:a7:cb:2f:55:40:
1d:ac:dc:65:d0:94:a5:91:f8:8b:72:38:d6:1b:3c:47:dd:d2:
29:8c:cb:cc:6e:b2:79:b7:89:39:0c:72:54:19:7f:9b:72:32:
5b:6d:37:5f:ec:5f:a1:4c:c8:2c:eb:54:9b:d7:04:c0:5e:dc:
19:b0:9b:ac:ef:d3:24:b5:0e:1e:23:6c:55:7b:24:ba:dc:5c:
6b:72:a2:39:d7:55:c6:3c:63:bf:be:03:e2:81:c5:05:b0:94:
e1:21:c4:6b:f1:bf:01:3a:3a:8c:6b:06:38:49:d4:ca:c7:02:
35:4d:46:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 03:25:32 2026 by rpki-client