Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
File: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft (raw, json)
Hash identifier: 707qARnLlDxklLWNTf2X9rLmmo3JxL7vBfRhVXv/kWQ=
Subject key identifier: 49:AE:47:46:6E:2F:C8:38:46:6A:E6:37:95:8A:C0:0A:68:25:0D:E2
Authority key identifier: F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
Certificate issuer: /CN=f90588ca22897c69a102949a682f9f1a35835bab
Certificate serial: 01A040F34C98E2B890B27D396581DA24FF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
Manifest number: 01B2
Signing time: Thu 27 Aug 2026 02:01:21 +0000
Manifest this update: Thu 27 Aug 2026 02:01:21 +0000
Manifest next update: Fri 28 Aug 2026 02:01:21 +0000
Files and hashes: 1: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl (hash: wjffJBuqQdb9stoi1G0wRwtuzY95xd2m4WLDbCQC2gE=)
2: M0gW80SQeN8-sWeK4V4IiUTNncs.roa (hash: 5lMZVBWnzilRk6pbxwjn0M4dlZP9bPyruzS+ojF0eMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:40:f3:4c:98:e2:b8:90:b2:7d:39:65:81:da:24:ff:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90588ca22897c69a102949a682f9f1a35835bab
Validity
Not Before: Aug 27 02:01:21 2026 GMT
Not After : Aug 28 02:01:21 2026 GMT
Subject: CN=49ae47466e2fc838466ae637958ac00a68250de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:9e:78:db:42:a3:a2:24:ba:8c:46:d0:a7:7f:
8c:57:aa:ca:03:a1:01:89:e3:1c:ba:ea:bf:1f:cd:
73:92:25:57:f8:61:9b:24:b1:b9:d5:bc:7b:81:49:
67:ea:10:c9:10:41:21:80:0f:a6:0c:c9:ef:00:ed:
eb:db:17:5b:71:b7:27:d3:ee:98:91:c6:d7:d8:49:
4e:15:20:97:32:c0:3c:a5:e4:ba:f0:f4:b1:89:a4:
22:d9:d2:d3:f3:02:a5:64:58:d9:9e:f7:63:5e:0e:
24:fd:53:24:39:55:bd:f2:81:ff:7d:f3:bf:64:83:
a5:2f:c1:25:97:d3:76:17:55:a2:09:bb:3e:f4:b6:
56:9e:49:39:57:fd:47:d2:aa:8a:7a:08:99:13:c5:
e3:06:9d:b2:69:9c:cf:44:d2:5a:03:d9:ec:4e:8f:
32:17:76:31:70:12:39:24:54:71:da:9f:57:0e:b1:
ef:9f:6a:ed:f3:89:88:9e:36:b6:50:be:41:d5:15:
9e:2d:f2:2e:51:66:2e:f7:c3:9e:72:98:e7:fb:05:
08:02:64:62:d4:65:99:48:04:22:99:fa:a3:23:20:
02:db:58:46:3b:3e:7c:dd:b2:e0:e4:07:d0:d7:e4:
b6:4f:ee:a0:86:09:d8:2a:ba:ac:c0:96:56:46:76:
c5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:AE:47:46:6E:2F:C8:38:46:6A:E6:37:95:8A:C0:0A:68:25:0D:E2
X509v3 Authority Key Identifier:
keyid:F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:fb:9c:6e:8e:7e:b0:b2:15:b3:1a:96:4f:59:4b:9c:a4:c8:
c6:fa:bb:2e:66:f3:47:38:5e:94:df:34:30:06:4d:5e:c5:3c:
bc:9d:a5:a9:a6:70:82:31:6f:47:67:9e:d6:ce:45:95:81:f2:
4b:a5:14:78:e9:bc:a9:d2:43:da:93:f0:4b:1a:f9:33:3d:fa:
f0:35:9b:80:1d:6f:ba:ed:a4:1c:c2:cd:d1:30:3c:52:44:45:
8b:89:ef:81:55:7a:f4:b5:75:f4:c4:a1:ab:d5:2b:81:d4:4f:
78:0e:01:dc:86:97:04:82:33:11:9d:97:99:ed:1a:76:6c:c3:
d4:89:ab:b7:64:ad:47:7b:3e:33:2f:f9:d0:2e:10:3b:98:fd:
af:3b:88:a3:bd:df:7b:e0:20:27:e3:8e:11:9b:c0:cc:61:75:
1f:f7:7d:f5:14:0e:a6:30:c9:1b:b1:6d:38:ae:4f:74:d1:7f:
19:32:fe:64:91:98:b0:37:6c:71:47:49:55:88:8d:ac:ae:45:
70:a0:f8:0f:15:d8:93:6d:03:60:54:b6:27:82:04:59:f4:9a:
83:84:50:bf:a5:5c:c8:7c:ed:a2:9f:17:5a:25:d4:28:d3:16:
54:f0:d0:42:0a:2a:88:e3:60:d5:f7:07:d0:18:80:af:71:82:
c9:bf:a3:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 08:45:56 2026 by rpki-client