Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
File: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft (raw, json)
Hash identifier: z8bd1LdjUm4kvfPgA8jW4mJMVnhFzvVQJ3HAby6IDfs=
Subject key identifier: F9:52:E1:2E:07:9A:EF:C8:1F:3A:A9:EC:4D:52:35:5A:72:3B:33:E9
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Certificate issuer: /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial: 019D39779902E3C37E86EA9E0D1F46A0AE8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
Manifest number: 18A1
Signing time: Sun 29 Mar 2026 12:00:32 +0000
Manifest this update: Sun 29 Mar 2026 12:00:32 +0000
Manifest next update: Mon 30 Mar 2026 12:00:32 +0000
Files and hashes: 1: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl (hash: aq3wapI2GP7yaK9GigwULRos9RO1qsgv0oq+zpiHAt4=)
2: SsijrrcZeuQhP_HaD4XVk_EWwn4.roa (hash: zKAAiwYgXYcXj2UxjxtGejsCb+VWZb5M4yKkcDyDWw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:99:02:e3:c3:7e:86:ea:9e:0d:1f:46:a0:ae:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Validity
Not Before: Mar 29 12:00:32 2026 GMT
Not After : Mar 30 12:00:32 2026 GMT
Subject: CN=f952e12e079aefc81f3aa9ec4d52355a723b33e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c7:a6:34:86:92:38:0d:46:f5:13:44:1a:28:
94:8a:26:65:a9:cb:a6:70:0e:d9:d7:63:23:f5:2c:
67:80:75:03:84:94:29:ab:56:0d:cd:86:5f:60:15:
ec:8d:b6:dd:63:bc:c6:24:ad:43:57:07:bc:77:1e:
48:a2:14:2e:68:0f:89:06:02:96:7c:38:ff:d5:ea:
c0:d1:33:51:6d:36:9c:e4:7c:d5:03:91:5f:e9:55:
01:a2:55:3f:03:7a:5b:9a:1f:04:8c:62:ef:cb:34:
1b:c9:cd:b1:15:1d:28:0e:b4:fc:72:48:72:82:6d:
ab:e0:58:80:a1:df:a1:de:d1:38:68:9e:85:cd:7d:
fb:ae:14:40:49:14:79:56:6d:4a:55:46:eb:98:1b:
89:6f:52:46:f5:fa:2c:e7:53:30:82:5d:f4:b8:3b:
18:52:d2:bc:11:5a:34:fa:06:04:5c:75:c7:2e:68:
75:6a:04:dc:1d:ce:14:21:9d:67:00:4d:d5:23:a5:
a0:da:34:c3:fb:30:7b:b8:c5:a8:4b:a0:ba:27:0a:
ac:35:12:e4:34:00:fb:5f:a8:f0:00:eb:7a:47:d9:
1e:06:41:48:09:62:6e:c0:1c:eb:c1:62:0c:4f:44:
e6:ad:b4:d5:fb:0d:f8:14:46:d2:91:20:e4:5a:3e:
dc:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:52:E1:2E:07:9A:EF:C8:1F:3A:A9:EC:4D:52:35:5A:72:3B:33:E9
X509v3 Authority Key Identifier:
keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:b3:e0:4a:86:b5:50:41:d9:5a:41:d5:77:ec:27:d0:26:38:
ef:d6:32:72:93:e5:ce:fd:5e:e6:38:32:6b:2f:d8:50:84:53:
0a:37:4e:d4:56:81:c8:1c:2f:82:ab:a7:c8:a5:a2:da:68:9a:
2b:4c:0c:01:9b:3e:9a:88:da:51:df:4e:40:50:28:d3:51:13:
96:b2:6f:0c:f3:91:4e:49:a7:70:02:42:48:5b:00:af:f2:32:
45:93:06:af:82:41:a8:0f:df:4b:8b:d8:16:1d:19:0f:34:f5:
f7:e8:ca:d6:f9:cf:d1:2e:90:c1:82:ae:af:50:42:01:8e:fd:
09:96:1a:0b:4a:90:04:43:3c:77:5e:c1:0f:64:74:0a:a1:20:
0f:ef:b5:ea:8b:87:dd:77:80:22:29:36:72:d7:8b:99:78:6d:
5a:07:d4:a9:2f:2b:88:8d:c1:28:b5:56:48:3a:1a:e9:ef:87:
1b:80:4e:07:c5:98:1e:34:68:56:41:19:c8:a4:e7:36:f2:72:
ba:78:01:48:14:ff:c8:ae:d8:10:8a:ca:4b:7c:a0:35:a2:75:
2e:33:11:e9:3d:78:0b:f1:21:96:d7:81:b3:02:83:fd:26:b1:
f9:a5:10:ea:ea:d0:31:df:73:eb:56:d9:c6:30:31:d1:12:79:
0a:e8:fb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:14 2026 by rpki-client