Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
File: FQmDQfJrtURkBQe9iAqZp-eiNdA.mft (raw, json)
Hash identifier: 1zWq/0oEqOocx6OS73V17jrAjEruifk1N8lPkxFtlT0=
Subject key identifier: BA:0A:92:07:23:47:C1:73:DC:C0:2A:91:1C:6E:D1:BB:EC:10:92:68
Authority key identifier: 15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
Certificate issuer: /CN=15098341f26bb544640507bd880a99a7e7a235d0
Certificate serial: 01A17627E31E6AA36393D9D8F62B6ECD4675
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
Manifest number: 1A50
Signing time: Mon 26 Oct 2026 03:01:27 +0000
Manifest this update: Mon 26 Oct 2026 03:01:27 +0000
Manifest next update: Tue 27 Oct 2026 03:01:27 +0000
Files and hashes: 1: FQmDQfJrtURkBQe9iAqZp-eiNdA.crl (hash: XL+8k7TzJ9QC97SkSgCTMxTyu7YXUwzNn0r7j9c1Ggs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 03:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:76:27:e3:1e:6a:a3:63:93:d9:d8:f6:2b:6e:cd:46:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15098341f26bb544640507bd880a99a7e7a235d0
Validity
Not Before: Oct 26 03:01:27 2026 GMT
Not After : Oct 27 03:01:27 2026 GMT
Subject: CN=ba0a92072347c173dcc02a911c6ed1bbec109268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9e:f1:ec:0b:57:e6:e8:ae:35:43:9d:a9:3d:
c0:41:d8:9f:e7:53:16:4b:02:c3:0f:bf:aa:32:d3:
76:d7:d3:75:63:38:0a:8b:7c:f5:0e:65:50:db:49:
86:61:81:a9:91:90:1e:30:1b:14:22:27:f4:b1:5d:
80:83:df:2f:63:34:e8:f5:b8:1a:03:ab:24:b8:48:
f5:0b:44:6a:87:d3:c0:c5:6d:91:a6:75:52:fe:21:
0b:e8:47:53:68:a7:b9:42:37:c4:11:35:d1:ad:07:
66:0c:47:27:4d:ce:c3:ed:2b:e5:c4:31:36:75:58:
37:9c:c6:f8:22:13:4e:9b:08:08:cf:c7:47:45:3b:
f9:7e:8d:0a:50:32:8e:aa:8a:2d:7a:40:5e:4a:fe:
4a:8e:58:2d:6a:4b:5b:83:c3:5a:6c:e7:2d:e9:a6:
5a:c1:cc:63:f6:5e:ed:24:71:3c:c2:d7:38:8d:4b:
ba:2e:33:5e:ae:33:72:2d:bd:89:76:4f:25:cf:d1:
24:b3:5c:eb:3e:b5:14:d6:d0:40:6b:9f:30:6b:20:
04:1f:0a:36:f1:71:37:64:0a:04:8d:fc:c9:9b:d3:
94:51:fa:79:70:05:35:21:4b:b3:a7:3e:84:a4:a1:
4a:fe:84:65:c2:75:a7:84:18:4b:cc:f6:7c:89:c0:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:0A:92:07:23:47:C1:73:DC:C0:2A:91:1C:6E:D1:BB:EC:10:92:68
X509v3 Authority Key Identifier:
keyid:15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:6e:f6:3a:6a:87:43:bd:d5:36:7e:70:5c:a6:72:a7:6a:89:
5b:4d:7f:18:1c:7e:90:22:8f:a1:e0:c4:dc:9f:59:1b:4c:98:
6d:45:de:8a:5e:6b:0a:21:99:1f:91:4b:2f:94:dd:25:24:48:
b0:fe:1d:2c:8c:28:b6:cc:c8:20:d0:16:fe:bf:90:38:0e:00:
72:81:bd:d5:60:fe:4e:56:e9:b7:47:ef:b9:6f:37:83:f6:11:
e8:88:22:ea:3f:9d:20:c8:93:96:5a:30:45:25:ff:ce:b2:a5:
91:b1:c2:69:61:2d:51:21:ea:93:14:38:c5:f0:18:9a:3e:33:
02:61:e3:f1:dc:e9:41:fb:f1:06:fc:c5:58:50:0b:01:5e:48:
3c:0d:17:2a:28:e6:53:8c:57:75:e3:c9:9e:ee:c4:8b:fd:40:
0d:b9:13:f8:48:92:10:6b:bb:12:6d:7f:9d:1c:26:a0:82:a6:
e7:c5:82:01:4d:33:a9:33:d5:91:c5:3d:de:42:fe:98:3f:56:
d4:2b:e0:97:93:21:84:01:a4:41:e8:d5:ac:00:be:0b:4b:77:
5c:b7:bc:e8:99:14:f7:97:8c:d1:9e:c7:80:8f:0e:7e:41:d2:
7a:05:2d:5b:33:7f:6f:01:de:88:b1:24:ba:1c:e8:1e:2d:71:
a4:d6:3c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 14:22:45 2026 by rpki-client