Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier: I2lBNh3yCytdDtriv24kBUNDfRtImpdfJ2p800RRRxY=
Subject key identifier: 05:90:73:2F:8B:93:52:48:E3:CA:C0:B7:6E:9D:AD:A7:A6:67:89:A8
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 019E30E091483C61990EF035AAB31275B89C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number: 0510
Signing time: Sat 16 May 2026 13:01:24 +0000
Manifest this update: Sat 16 May 2026 13:01:24 +0000
Manifest next update: Sun 17 May 2026 13:01:24 +0000
Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: z96VGyh61cJ2nbqjehNO1cCPaRAfMgh+neIxpcDuTA4=)
2: I_i8axcztRmQYBKxo7LufShIxc0.roa (hash: 2/unXqyBT639RbP4a6kb5aLTC3tSiKOPrQbrbpRMwdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:e0:91:48:3c:61:99:0e:f0:35:aa:b3:12:75:b8:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: May 16 13:01:24 2026 GMT
Not After : May 17 13:01:24 2026 GMT
Subject: CN=0590732f8b935248e3cac0b76e9dada7a66789a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e7:8f:84:8f:e1:64:66:0b:03:ea:f9:70:48:
17:b6:27:1e:37:8c:6d:c1:47:4a:48:3c:9f:13:82:
75:dd:03:6e:14:2e:01:12:ed:6f:c2:79:80:39:5b:
38:84:9a:49:a4:d9:87:48:be:53:79:24:c5:a4:7f:
a2:68:f8:e3:81:c5:4b:ef:b6:2c:33:60:26:56:5a:
ee:ad:17:63:86:53:cd:d9:23:92:df:7d:96:f6:ff:
9f:81:28:74:81:94:8a:32:3b:43:4b:a4:39:77:bf:
72:99:05:5a:24:26:1c:96:84:42:d0:4d:01:4f:19:
a0:05:0a:b1:b4:c8:2b:cb:d4:eb:af:21:86:b3:c6:
3b:e7:9e:e6:a1:70:d7:06:ca:76:04:da:d2:c1:4b:
81:e2:cd:d0:25:d1:27:c7:a8:01:ac:38:54:a7:0c:
b9:48:6f:86:81:47:60:f3:d4:bb:b5:40:5c:d0:0b:
15:8e:c1:6f:d5:c5:66:4a:99:7b:aa:4f:8f:4b:11:
30:04:3d:43:47:c1:a8:72:b2:bd:2b:90:ed:94:08:
5f:6f:d7:af:ba:65:35:c3:88:85:c9:f2:67:51:64:
f9:54:97:ae:18:10:bf:83:c0:3a:38:2d:9b:fd:32:
75:51:01:bc:46:38:af:bb:c5:e5:0d:cd:12:be:92:
1f:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:90:73:2F:8B:93:52:48:E3:CA:C0:B7:6E:9D:AD:A7:A6:67:89:A8
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:a1:82:c0:f8:f6:28:82:9d:cc:e6:e1:9a:33:43:78:1e:e9:
26:e0:f5:5d:7b:39:97:be:4a:de:65:cb:b4:0d:8e:ed:fd:3b:
7e:e6:77:54:43:08:1b:17:8f:0e:6f:3c:8e:f6:9b:98:23:1d:
8a:e1:4e:16:b6:76:09:ed:56:a1:03:b1:d7:b4:38:e3:ef:73:
fd:56:4f:18:a4:6c:93:76:22:50:ec:d1:35:80:e4:2a:f4:17:
b1:65:0b:9d:59:f4:de:5c:b5:6b:c4:33:34:7e:c4:51:2a:b9:
7e:55:c6:af:3a:6b:63:77:f2:eb:18:4a:13:00:54:ae:ae:41:
c1:45:75:53:63:c1:14:b6:da:94:58:b7:2b:cd:3e:23:1f:f9:
bd:c4:ae:30:31:e5:40:a5:d4:19:63:58:39:88:5f:56:71:7b:
ad:e7:53:83:4c:ac:f3:4b:69:9c:ec:95:c4:c9:98:62:26:0f:
77:7f:ea:22:af:3c:d1:48:0a:f2:54:b2:84:01:2c:7a:aa:65:
ed:80:a2:36:5c:e5:85:05:cc:a6:5d:30:6d:c8:34:5e:2d:44:
36:32:8f:40:b9:2d:9f:11:4a:e9:ac:f6:a0:d7:e3:68:d9:d6:
27:30:b7:b1:9e:f9:98:27:b6:a0:b6:67:ae:34:90:23:51:6d:
cd:4b:ee:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:30:34 2026 by rpki-client