Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: WjLTzXry+LX2wGOCzubJf0js0OzblZk9g2KH8gDgneI=
Subject key identifier: 79:86:1C:E5:27:5A:FC:CE:38:2A:45:F3:1C:48:38:0F:22:F4:C6:F1
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 019E2F975E84B988EA1A090D5F49BDA24198
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 1044
Signing time: Sat 16 May 2026 07:01:49 +0000
Manifest this update: Sat 16 May 2026 07:01:49 +0000
Manifest next update: Sun 17 May 2026 07:01:49 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: sDBeFJ1ZmtLGywQYNOYX2guuSYJ2U2eUvWgIeNnUv3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 07:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2f:97:5e:84:b9:88:ea:1a:09:0d:5f:49:bd:a2:41:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: May 16 07:01:49 2026 GMT
Not After : May 17 07:01:49 2026 GMT
Subject: CN=79861ce5275afcce382a45f31c48380f22f4c6f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:fd:3b:6e:48:c2:d9:dc:1b:66:65:a8:6a:d0:
f1:85:8e:26:82:2c:9c:f0:59:eb:22:8f:04:8a:b5:
24:00:cc:af:f2:3e:e5:02:61:92:20:fa:2d:81:59:
41:4b:7d:a7:db:8b:25:fb:7a:97:b0:d8:13:39:70:
22:70:ad:ad:79:fb:f9:a6:1e:96:54:48:99:a4:ba:
00:5b:40:53:9c:ca:07:d2:da:4f:11:57:55:f4:9d:
c9:77:fd:d3:50:03:2f:b0:43:c5:e7:6c:3d:44:72:
5f:ab:e9:75:2d:aa:4a:3a:48:d8:c4:74:3f:12:b0:
85:fc:88:c1:95:69:f0:90:78:20:fc:25:7a:a3:4e:
22:5c:18:8c:aa:ac:bc:a3:68:4a:81:59:fd:47:86:
2e:d5:b2:40:42:a9:b8:c9:03:33:35:2e:bb:de:71:
57:57:33:a4:b5:dc:1a:10:24:f2:a1:38:cb:3f:6b:
3e:98:5a:92:ca:10:5f:95:b4:b8:cc:fb:5a:f0:4d:
ff:58:6f:ec:ca:58:4c:c1:61:f5:d7:00:66:cc:12:
2d:57:cc:84:e0:15:a5:37:85:4b:9a:85:70:05:be:
a0:45:2a:91:b6:d6:bd:19:f2:73:a8:d3:33:a6:d4:
72:24:c3:74:c2:14:0b:24:14:55:6d:5c:09:ed:8d:
19:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:86:1C:E5:27:5A:FC:CE:38:2A:45:F3:1C:48:38:0F:22:F4:C6:F1
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:ee:38:a0:fd:d5:a5:9d:f9:87:a1:a1:81:a7:75:78:1a:75:
bb:da:4b:e6:7a:25:29:86:f2:8e:1e:11:4f:c3:ad:ed:e4:7d:
01:89:e7:8e:93:d7:36:19:4c:46:af:d9:14:c4:fe:62:8e:62:
bd:b1:a0:6c:98:77:01:7a:81:fa:e8:a7:3e:7d:c1:c1:dc:17:
38:4e:71:2c:f6:0e:5d:31:61:04:61:3b:0e:9c:e5:56:71:70:
9f:36:f1:aa:a4:12:dc:c0:2c:cc:df:d3:86:85:fe:ee:6f:75:
83:53:ee:c9:b9:f1:41:62:19:66:a3:b4:c7:77:31:29:cb:26:
81:ec:f4:b3:0b:12:0d:87:31:65:f5:85:71:1a:77:8a:59:92:
f9:60:ef:aa:60:6f:81:c3:12:a8:a1:85:dd:bb:b0:80:f2:f3:
8e:91:2b:24:aa:2f:7b:86:35:5b:8f:31:75:9b:68:99:a0:69:
2a:c2:ad:b3:b8:d5:21:87:45:4c:f1:c1:7a:73:2a:0e:39:cc:
3a:4a:83:ee:d2:d8:86:7f:73:cf:4c:fa:84:7f:20:29:19:b0:
ef:a2:84:f8:4a:30:20:6f:98:ce:c5:b5:21:0e:a1:14:bc:48:
f6:01:f8:00:f3:73:d1:a6:8b:18:fe:e4:18:9a:0d:93:ea:87:
75:11:60:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 16:25:30 2026 by rpki-client