Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
File: Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft (raw, json)
Hash identifier: N/Yabh3S9T6wWQxv66oyNTDvuMWKDtDXIIq3L3QeJNE=
Subject key identifier: B3:CF:A2:A4:4C:71:2A:3F:23:79:2E:2C:5F:50:D9:B2:04:07:F1:A9
Authority key identifier: 17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41
Certificate issuer: /CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
Certificate serial: 019D3909EF6B7C7E8FCBC1FB825576CD8D2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 10:00:45 +0000
Manifest this update: Sun 29 Mar 2026 10:00:45 +0000
Manifest next update: Mon 30 Mar 2026 10:00:45 +0000
Files and hashes: 1: Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl (hash: VlszFrHwtqi5fB8q/81lh7f223N79E3a8NqgphRSdFk=)
2: Lz5wCJXM7C8kU6jXb0ZYWr6LPX8.roa (hash: oJMErKQ6IHUrut+90HwB8OFS0TRtq6dDiD0tvuI9pO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ef:6b:7c:7e:8f:cb:c1:fb:82:55:76:cd:8d:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1719aad5d4b22f4873e0947bc7f42fa1dd5c1f41
Validity
Not Before: Mar 29 10:00:45 2026 GMT
Not After : Mar 30 10:00:45 2026 GMT
Subject: CN=b3cfa2a44c712a3f23792e2c5f50d9b20407f1a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:4f:c6:1a:f2:d7:50:e0:91:96:39:52:8c:
50:95:06:f4:49:0d:78:f8:9e:3b:51:47:58:19:df:
10:b4:f1:de:d2:8b:de:ec:2d:f3:0a:7a:28:ed:62:
e2:ec:95:01:a6:36:d8:26:af:18:6a:f5:f8:e6:09:
e6:80:6a:f1:58:de:c6:7d:72:1b:04:48:c3:50:e3:
b4:c5:b2:f0:ee:4e:f6:cf:66:0f:1c:2b:47:38:8f:
eb:51:cf:45:34:18:da:54:03:cb:6b:dd:04:8d:c1:
89:fb:5c:fe:d7:54:90:7f:7f:b2:c6:ee:06:b0:61:
ee:57:fb:94:6d:ff:10:4a:12:cb:ac:0f:87:ae:dc:
0d:81:38:dd:10:4c:03:fe:8c:f8:3e:c3:3b:30:d8:
6c:a2:60:17:01:e8:18:85:bc:76:e1:64:3d:1c:f0:
55:ba:ab:09:5a:6d:4d:b1:1c:8d:63:d9:16:70:97:
be:f6:f3:83:60:a8:99:4a:2d:2e:26:8b:2b:3d:44:
f5:c4:5c:d6:ea:6a:84:13:98:08:4d:53:61:a6:3c:
5b:89:3d:da:94:da:21:72:da:26:ee:17:43:6a:46:
fb:26:7e:24:15:db:10:e4:86:21:3b:fa:5c:10:ca:
94:e4:ab:fa:45:d7:5b:23:d1:54:8d:a0:6d:e1:e2:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:CF:A2:A4:4C:71:2A:3F:23:79:2E:2C:5F:50:D9:B2:04:07:F1:A9
X509v3 Authority Key Identifier:
keyid:17:19:AA:D5:D4:B2:2F:48:73:E0:94:7B:C7:F4:2F:A1:DD:5C:1F:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/290fec-28f3-44b0-9cff-331d4a0d1427/1/Fxmq1dSyL0hz4JR7x_Qvod1cH0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:58:e1:ce:13:cf:08:3d:9a:4d:21:bd:d6:ba:d7:d1:8d:3d:
7f:00:40:ff:79:e0:88:1b:18:ca:38:72:48:b9:b3:b7:85:4f:
56:a5:62:94:f7:37:a0:ed:78:01:78:d6:e9:05:22:74:8d:92:
2c:29:5e:89:f5:6b:f0:ec:57:b1:92:b1:b9:57:94:5b:e8:85:
91:c1:c6:c9:94:bf:9c:50:68:9b:28:5e:3b:31:86:f0:e6:21:
bd:8a:7a:f4:81:bd:77:28:32:0b:b8:68:66:1f:29:1b:49:ea:
43:77:fc:d8:cd:b5:c9:9f:9c:6f:d1:14:b1:04:c2:5e:0b:a1:
f6:ea:30:24:3e:fc:fa:4d:11:03:91:8f:4d:8f:61:6d:29:39:
8e:96:57:8e:4e:ca:00:a0:36:7a:52:43:28:78:99:63:1c:30:
bc:a9:e0:55:82:68:44:55:95:f1:9d:3c:dc:d3:ef:33:2c:d8:
6f:ad:85:9a:cb:c1:cb:c2:cb:48:94:4f:3a:b9:00:7f:4e:2b:
35:85:3d:7e:05:f1:35:c9:2c:ea:d1:4c:bd:82:0f:65:12:42:
43:ac:4a:ef:2b:65:20:7d:b1:45:8e:48:a0:41:09:85:69:48:
f1:4c:85:c2:34:28:55:bd:b8:69:6b:ff:1c:ea:9c:4b:8d:5e:
43:9f:e8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:34:51 2026 by rpki-client