Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: rEdNkjxDiXOsId9LmCMvHa30vrPu+3cN9FcrfLXIq4M=
Subject key identifier: 03:DF:05:11:B0:E4:76:F9:DA:3E:AA:61:23:AD:5C:9D:42:65:AC:B5
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 019D38661C58A90A8242E8BC7FCA05A5A86D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 0FC4
Signing time: Sun 29 Mar 2026 07:01:49 +0000
Manifest this update: Sun 29 Mar 2026 07:01:49 +0000
Manifest next update: Mon 30 Mar 2026 07:01:49 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: TNC6x7AWiwVawI8kpAk+20dvZ/6Qdh93N0C2KhSNT5w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:1c:58:a9:0a:82:42:e8:bc:7f:ca:05:a5:a8:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: Mar 29 07:01:49 2026 GMT
Not After : Mar 30 07:01:49 2026 GMT
Subject: CN=03df0511b0e476f9da3eaa6123ad5c9d4265acb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:e4:f9:29:7c:79:25:d1:12:7d:5a:28:25:
79:66:67:73:0a:a2:b0:2d:c7:0e:27:c3:56:bc:33:
1f:23:fc:12:5c:f6:c5:39:26:b0:52:52:64:bb:63:
da:81:4f:e2:08:50:67:f7:b5:16:8e:20:e5:98:27:
0d:05:00:ad:72:37:d5:75:51:ed:de:7c:66:66:bc:
ca:a8:ba:ba:a4:d0:57:18:5d:3f:9e:32:0d:c3:72:
08:ce:d7:ad:31:22:bb:73:74:ee:0b:ce:19:54:6f:
19:0a:95:05:4c:32:c0:40:cf:e0:74:85:b9:11:76:
07:d0:a3:8b:be:35:d7:89:56:0a:23:ea:4e:1c:ce:
95:24:16:85:46:03:cc:d5:4c:fe:ad:c9:36:b7:15:
ce:46:d6:f8:db:4a:97:bf:dd:a1:68:5e:38:04:6e:
13:c6:2c:d2:21:bb:60:83:c5:1e:9c:e1:31:c0:d5:
93:f7:64:55:a2:01:a7:fc:c8:4b:3f:9c:32:1c:28:
97:51:03:c2:28:34:3e:cc:f4:88:06:40:f8:cd:42:
d0:5a:db:42:7f:9e:1b:19:26:f4:57:ec:41:a6:ec:
cd:fb:0a:2a:32:46:bd:57:10:91:e9:7f:5f:a1:88:
6f:28:9b:91:be:3a:66:fb:99:0e:35:51:16:35:c3:
ca:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DF:05:11:B0:E4:76:F9:DA:3E:AA:61:23:AD:5C:9D:42:65:AC:B5
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a5:9d:22:a6:0b:a4:9a:80:9c:41:a8:5f:38:24:92:d2:f0:
6f:28:af:dd:ea:4f:9f:cf:f8:48:67:ca:e1:f6:cc:1c:a5:66:
75:6e:be:47:43:45:ec:bf:bd:04:e4:22:de:da:2e:7c:12:62:
00:12:f8:80:b5:7a:c5:50:64:34:c5:d5:4b:7d:14:50:e6:55:
5b:71:a9:c3:ea:24:61:7b:b9:a9:0d:bd:a3:bb:56:d2:30:90:
f8:91:e6:54:b4:18:12:85:ee:81:ed:80:29:1a:e5:96:22:17:
a4:1b:a3:5f:7e:42:04:48:5d:b0:8e:63:3b:70:91:95:26:65:
bc:9b:2a:f1:e5:5a:a5:c1:7a:15:98:c1:ef:0b:3d:48:d0:be:
80:75:96:ec:5d:c2:2e:80:8f:ef:07:b3:d7:bd:9d:c0:37:80:
84:74:90:08:15:d7:bd:0d:1f:c7:8d:c2:11:65:7d:71:36:3f:
e9:8a:79:44:55:e4:c2:48:3f:d6:2d:14:6e:ac:40:09:03:ef:
c1:e5:02:c4:cf:0a:bb:3b:25:ee:00:22:b1:7e:fa:09:c0:85:
94:68:31:8d:43:93:a6:67:cf:a8:2e:84:81:58:c6:8d:7f:55:
5b:2a:c0:49:c5:10:b5:81:e4:c5:52:42:e1:73:35:85:5e:60:
cc:30:45:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:23 2026 by rpki-client