Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File: 1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier: AizeY3wmsPeeSRLN9+DHI9RASuflAR+SARLY70ZPS4I=
Subject key identifier: 26:30:7C:9B:BC:6E:27:13:FA:C1:97:AE:33:95:E7:B1:08:BB:E4:2C
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial: 019D37527096B940EB8F6864A29AA848AB24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number: 0C9E
Signing time: Sun 29 Mar 2026 02:00:42 +0000
Manifest this update: Sun 29 Mar 2026 02:00:42 +0000
Manifest next update: Mon 30 Mar 2026 02:00:42 +0000
Files and hashes: 1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: 4jEyQ5AYA0i4o7bL1/tdrk3HGiplCb1d2m4bWXVZV5E=)
2: 93B0q9sUDm_tucnqwBBNRLq_pWU.roa (hash: 4wuwNz85hZ86Sjb+JuYPSBd2gyBY0cEe83Z/wQGs38A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:70:96:b9:40:eb:8f:68:64:a2:9a:a8:48:ab:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
Validity
Not Before: Mar 29 02:00:42 2026 GMT
Not After : Mar 30 02:00:42 2026 GMT
Subject: CN=26307c9bbc6e2713fac197ae3395e7b108bbe42c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f3:f9:79:c4:6f:b5:95:5e:02:d3:10:e1:6b:
57:b8:70:1f:d2:e1:2d:8b:12:ed:6f:5f:af:92:53:
d6:10:91:55:2f:98:f5:37:cb:2b:6d:e6:7a:f1:bb:
5d:fb:fb:36:f5:de:78:94:72:d2:30:c7:58:ff:ba:
7f:49:05:20:c0:68:1f:4a:24:8f:32:0f:6f:12:dd:
8b:30:d5:4f:dc:88:08:ab:4c:d6:7c:92:57:83:f9:
d0:f0:74:9b:e8:b1:e6:e3:ef:9a:79:a1:eb:d1:3c:
9f:7f:a1:74:b5:33:19:1e:66:7e:55:d2:fb:a4:a5:
85:0c:17:d0:0c:58:81:50:bd:02:45:b3:8d:bb:2b:
79:65:a8:f3:8b:c4:57:ab:31:00:40:06:62:94:0e:
3e:e4:a5:00:b0:f8:a3:0e:54:64:72:d0:07:50:a3:
07:d9:96:43:e0:dc:9b:87:b3:c6:ae:6f:32:42:a7:
ee:87:5f:7c:86:37:e6:a8:9b:99:2b:4e:b7:14:a0:
7e:1d:9f:0a:3f:11:5d:82:1a:ff:9f:ce:64:0d:01:
5c:16:cf:ef:2e:6d:34:71:ea:b4:5b:e6:30:1e:d4:
67:59:17:80:22:7a:53:a8:bc:54:08:98:61:96:0c:
66:b5:46:45:ee:21:b9:c1:7c:12:59:79:de:23:4f:
e7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:30:7C:9B:BC:6E:27:13:FA:C1:97:AE:33:95:E7:B1:08:BB:E4:2C
X509v3 Authority Key Identifier:
keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f0:61:b3:e4:78:0e:c0:24:0d:9c:fa:3c:9c:fc:d2:9f:10:
87:71:da:a9:6f:6c:40:2b:88:1f:b9:37:08:fe:51:56:83:da:
a9:ca:0a:36:70:53:7b:02:d9:82:b1:6a:16:11:a8:eb:06:71:
0a:99:ee:15:af:23:d5:b9:87:99:0b:e5:9f:9b:74:8c:eb:4f:
ed:48:d9:55:96:47:76:ba:80:1a:fd:fc:03:87:99:bc:8e:75:
38:0d:0b:0b:5a:17:f1:ee:77:73:5d:8f:b5:71:38:a2:a1:fb:
db:29:38:b8:7e:47:ad:16:0e:02:7d:99:c8:3e:14:c7:a9:0b:
9f:6c:ac:f2:44:e3:f7:d6:11:b9:57:13:fe:1b:0f:3d:f2:c1:
16:52:c0:b1:ee:da:b3:ad:60:32:d4:6b:84:33:85:80:80:63:
0b:2f:2b:c7:4d:d9:dd:4d:5c:ef:34:ce:a7:87:ea:1f:57:69:
27:bb:76:f4:35:54:ef:1c:0f:18:c2:87:e9:14:56:43:ed:ab:
78:f6:7b:0f:a0:d0:c0:80:41:26:72:80:d5:f5:91:13:47:ca:
11:e1:de:2d:19:4e:14:b0:2f:e6:31:3f:9e:8b:78:6f:f2:6f:
37:95:90:40:21:64:45:5c:8a:64:7f:87:87:b6:06:a2:e4:32:
f0:16:e3:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:44:41 2026 by rpki-client