Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier: d3pqEizylGsxp8uxQqeA34h0jM8Yv9qQhpzOqA7Ibrw=
Subject key identifier: BD:BD:F8:4C:64:37:64:E2:7E:D0:C2:9B:5F:3B:A1:70:17:0C:BC:E0
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 019D37BFF69B20AA9DB9D315EA6B788C341C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number: 048F
Signing time: Sun 29 Mar 2026 04:00:20 +0000
Manifest this update: Sun 29 Mar 2026 04:00:20 +0000
Manifest next update: Mon 30 Mar 2026 04:00:20 +0000
Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: LCdJ7i9SDh+Vt8O/+VHCbXJutWXKxuVZNgPon80gXgY=)
2: I_i8axcztRmQYBKxo7LufShIxc0.roa (hash: 2/unXqyBT639RbP4a6kb5aLTC3tSiKOPrQbrbpRMwdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:f6:9b:20:aa:9d:b9:d3:15:ea:6b:78:8c:34:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Mar 29 04:00:20 2026 GMT
Not After : Mar 30 04:00:20 2026 GMT
Subject: CN=bdbdf84c643764e27ed0c29b5f3ba170170cbce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:5d:48:b3:8e:b8:9d:88:7a:c8:e1:0f:cf:
94:d4:86:43:24:76:4a:c4:f7:20:44:91:8f:10:1f:
78:95:45:58:46:d3:73:1f:7b:0a:fb:e1:d1:4c:fd:
dd:16:24:b9:27:89:fa:fb:39:9d:58:0f:81:14:0a:
7b:db:d4:5b:60:c7:cd:08:ce:a6:1e:7d:31:aa:51:
c8:71:87:87:ce:15:b8:e1:37:7f:32:23:8a:07:be:
b9:2e:04:5c:68:f0:ac:d5:86:38:76:e2:7b:7e:ee:
c8:32:f8:63:ca:f1:e5:eb:ef:eb:d3:59:a4:6c:b5:
35:9c:93:de:33:39:10:ad:a0:62:05:a7:82:cc:40:
76:1a:3e:b6:2d:7c:04:e6:07:3d:d7:cb:f6:7e:b8:
fd:59:ad:80:af:1d:c3:4b:b0:a7:b3:9b:d2:aa:60:
33:41:ea:25:72:a6:b3:79:a1:cf:79:f8:60:12:c4:
f5:4a:34:ad:c8:27:4d:0f:37:d7:78:91:b8:9a:6f:
be:8a:df:66:d2:e8:6e:ac:68:d1:ed:52:3d:b1:0e:
4a:91:8c:65:10:d6:5d:94:2a:f5:2c:78:9c:da:ec:
58:35:03:58:7d:e3:c3:f3:96:8d:b3:2c:0e:c1:5d:
f5:23:73:a6:95:7d:c4:dd:a1:d2:d5:99:cb:ab:da:
a2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BD:F8:4C:64:37:64:E2:7E:D0:C2:9B:5F:3B:A1:70:17:0C:BC:E0
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:be:bc:39:58:f8:69:5e:7e:8a:ca:6f:5e:b3:7d:b2:8f:b5:
84:39:03:80:33:55:1a:9c:da:e6:56:56:41:7c:90:fa:bd:71:
1c:62:2b:55:9a:c4:8f:b4:33:98:ae:e2:97:e1:f4:f2:59:73:
73:59:fc:24:cf:15:cd:c9:74:2b:e9:60:22:40:19:8c:91:b9:
07:50:97:87:05:cd:af:f1:c2:e0:aa:1b:7d:32:af:ea:8f:8a:
0c:80:c4:9a:c9:12:b0:2e:f6:36:79:f5:d2:cd:c5:a0:95:d2:
d4:81:03:f9:b4:ed:8c:c8:05:1f:f3:26:3d:ee:3c:f2:eb:45:
bb:f7:e6:08:aa:55:53:76:09:e0:b2:8f:d9:45:98:57:69:87:
83:b8:5d:7d:67:94:ad:e1:e8:5d:67:36:04:21:98:8f:33:1d:
b2:ed:89:d6:52:94:7d:66:2a:a1:89:4f:31:a9:0b:04:d4:6d:
8b:22:5f:11:e4:10:b2:87:9e:fb:29:b4:2a:99:17:71:16:40:
3a:83:08:35:fc:f5:a3:96:34:51:fb:b1:70:75:5a:0f:35:75:
98:b4:8a:d5:58:22:65:a1:fc:6e:95:18:86:40:2d:2b:06:0b:
a7:5d:bf:4e:1a:a7:1a:ab:0c:d0:ce:8a:86:a1:86:56:a6:27:
cc:87:cc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:08:08 2026 by rpki-client