Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
File: Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft (raw, json)
Hash identifier: sHeIKAiV2aGLzWUMSsSNekvDUKI/LPjYMiS4Ihwcw3g=
Subject key identifier: 9A:FB:6B:9D:8C:41:E2:6B:FD:D1:E5:23:76:03:27:AA:AB:17:07:5A
Authority key identifier: 16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
Certificate issuer: /CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Certificate serial: 019D371BEC8B5533275D6EFC068FE54B8C82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
Manifest number: 181C
Signing time: Sun 29 Mar 2026 01:01:10 +0000
Manifest this update: Sun 29 Mar 2026 01:01:10 +0000
Manifest next update: Mon 30 Mar 2026 01:01:10 +0000
Files and hashes: 1: Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl (hash: fveRJYl5I/VV1lrWTZeq6jIwxdKv6vinjbuHI1czS8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:ec:8b:55:33:27:5d:6e:fc:06:8f:e5:4b:8c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Validity
Not Before: Mar 29 01:01:10 2026 GMT
Not After : Mar 30 01:01:10 2026 GMT
Subject: CN=9afb6b9d8c41e26bfdd1e523760327aaab17075a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4e:47:f2:76:2c:42:c4:6d:a9:0b:5f:9f:6e:
a8:ef:b3:e8:d2:00:92:55:6a:4f:fe:f0:e4:03:77:
8a:63:76:d4:0b:8b:05:de:8f:23:c9:87:6b:84:f7:
3a:a7:cf:9c:36:95:a9:c0:84:f6:31:5a:1f:92:ee:
1c:77:a2:03:cc:d5:6f:37:95:eb:b7:f4:11:31:f5:
40:1b:e7:35:6d:29:bb:67:c1:8a:77:7f:aa:32:fd:
e7:e8:16:fb:ba:3b:27:30:eb:18:7f:49:c8:6d:45:
61:13:f2:be:88:58:f4:8f:ad:ef:cf:5e:7a:7e:e3:
78:61:9b:cd:a9:fd:79:05:16:43:c3:d9:e4:3e:3d:
74:36:1d:e9:a1:88:30:81:81:7c:a7:82:8e:23:dc:
01:e2:6b:e0:27:85:1f:d0:50:46:cc:2a:cc:e3:24:
42:8a:de:b9:e0:7b:37:c1:0a:9f:ab:52:aa:b3:44:
72:aa:53:46:5a:09:ce:32:3c:5e:1b:dd:34:c2:57:
05:7a:4f:53:5d:5a:8e:53:11:04:57:a8:be:92:da:
1a:43:3c:48:5b:41:3d:6e:c7:33:af:ac:fa:a8:89:
12:ea:df:64:bf:bd:20:96:8c:af:82:b7:4e:91:3c:
06:b6:1d:f3:6b:f4:20:af:7f:fc:03:9b:1e:0a:d0:
b1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:FB:6B:9D:8C:41:E2:6B:FD:D1:E5:23:76:03:27:AA:AB:17:07:5A
X509v3 Authority Key Identifier:
keyid:16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:a8:f8:90:66:52:8a:c6:fc:e7:6e:f4:80:1a:1a:ba:41:5b:
ca:a8:ab:28:dc:90:73:ca:55:2d:a3:19:73:63:c6:66:28:88:
d0:12:64:69:c6:86:5e:a4:b0:73:53:f1:ac:b0:60:2c:47:1f:
36:12:87:ac:70:50:2a:4a:82:47:56:f8:2d:66:74:ff:b1:7b:
85:5f:13:ad:90:8a:27:0d:1e:67:2d:93:d4:25:9f:fa:0a:1d:
e9:ae:b7:d4:f8:4e:9e:89:96:4b:0a:a5:f8:0b:e8:3d:ae:76:
5d:2c:fc:30:f4:48:45:1e:3b:28:35:66:4d:a8:d1:81:1c:2d:
3c:de:05:4f:d3:02:85:25:7a:6b:f9:67:15:b5:75:c4:b4:dd:
ca:7b:a7:7c:26:42:a9:09:de:23:0d:c9:b4:3b:7b:b2:b4:30:
6d:3f:50:eb:16:ba:2e:11:b6:5b:bd:28:7e:5e:fa:80:74:69:
83:8b:d4:71:90:8d:2b:ac:0c:7f:20:3e:f5:d4:21:3e:eb:ab:
28:fe:b5:b8:45:29:42:b0:b3:c6:20:e1:41:89:d5:30:6c:5f:
fe:66:23:72:aa:09:80:a7:dd:f9:be:3d:5b:ba:f3:06:62:22:
bf:54:f7:54:a1:a2:72:bc:4a:b9:c9:08:97:3e:27:ff:e0:12:
82:88:9b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:42 2026 by rpki-client