
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier: zmvWd1FVamiCF9FQkWpUZhaB9IsaYV0QuwrA/lMXagE=
Subject key identifier: AB:61:C3:D8:F6:E0:30:06:B4:58:8C:5F:01:70:CB:42:6D:59:1B:A4
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial: 019E314E76D1036EE1E1BC2B549289C8298F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number: 143E
Signing time: Sat 16 May 2026 15:01:26 +0000
Manifest this update: Sat 16 May 2026 15:01:26 +0000
Manifest next update: Sun 17 May 2026 15:01:26 +0000
Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: 9GXg64F1vIGjDKQsllrvhh9GFn3Vd5mU+MndD1+Rn6o=)
2: Sg5TLd0LRzU1Kyw2aXOACqsG4yA.roa (hash: 4vlEE5O6rdTk7GzU24AHkksV5knXEZvyv5QSu+1PBWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:31:4e:76:d1:03:6e:e1:e1:bc:2b:54:92:89:c8:29:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Validity
Not Before: May 16 15:01:26 2026 GMT
Not After : May 17 15:01:26 2026 GMT
Subject: CN=ab61c3d8f6e03006b4588c5f0170cb426d591ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:36:f7:6f:9a:8c:70:34:77:82:e7:0e:08:
57:9c:e0:49:e9:5e:e2:e0:27:78:f8:32:73:5f:72:
47:e1:68:d6:32:07:cf:8b:5d:a2:6e:c5:5d:12:1d:
79:d0:94:3c:ad:5a:b2:1d:aa:c3:ce:de:f6:ec:28:
cd:02:0b:4c:1f:df:d9:1d:11:32:bb:76:0c:ac:45:
44:d4:fb:fb:82:7c:b6:6a:28:fe:3e:e0:57:58:fd:
c8:9a:c0:01:0b:91:46:f3:98:16:19:b8:48:30:3a:
fe:d4:05:3f:ad:c1:cd:39:cc:8b:f5:a2:d6:57:a6:
a4:68:1f:05:95:79:a5:92:29:02:83:60:6d:8e:f0:
99:0c:cb:49:b2:0c:a8:c8:d6:e8:61:3a:98:03:d9:
8e:2a:76:3b:cd:6a:2c:0e:cd:96:dd:24:2f:4c:39:
a5:eb:52:4f:ad:a5:55:f2:46:99:aa:77:b0:5f:e6:
3b:83:5f:d8:6d:86:b6:94:7e:b3:2f:e0:8c:0f:a8:
1a:4d:79:e4:61:09:09:4f:22:57:ee:a4:b4:91:5b:
c2:24:47:0a:1d:be:68:00:29:16:45:fc:46:11:55:
d2:08:15:80:a4:e1:ec:33:08:1e:d5:c5:99:bf:02:
25:2b:07:57:46:8d:da:b2:01:0f:1c:3f:d2:aa:85:
0b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:61:C3:D8:F6:E0:30:06:B4:58:8C:5F:01:70:CB:42:6D:59:1B:A4
X509v3 Authority Key Identifier:
keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5c:b2:c6:4c:2b:7f:f2:32:ad:05:2c:bf:02:95:06:1c:75:
96:35:bd:0d:ed:1d:1a:03:bc:97:ed:59:35:0f:85:82:0e:4e:
a3:42:8e:76:e9:ad:80:54:2f:64:11:f8:fd:1b:c4:9d:14:ef:
0c:c8:9f:0a:47:ba:11:3e:b0:8a:ba:5f:f7:79:69:6f:d2:20:
4d:fd:fa:06:1b:ff:c0:de:3d:6b:d1:e0:1d:35:4a:2b:a3:95:
d4:0e:c4:41:da:b5:bd:40:cc:3a:e7:fc:91:36:97:ef:7a:3c:
5f:e4:5e:4d:35:53:42:5a:79:f4:22:d1:7b:13:ce:ea:a0:04:
15:9a:fa:66:31:bb:d7:b8:b3:d3:0f:fd:8c:37:48:99:c7:d8:
97:99:48:32:03:b3:85:e9:1b:aa:f3:ea:c7:25:2d:56:e0:34:
7f:a6:50:6e:c6:6f:9a:a6:f3:32:81:d0:70:3b:b9:df:73:ae:
72:2a:39:b4:94:f1:f9:6b:43:dc:bd:4c:a9:66:b3:4b:ff:41:
d0:6b:c8:d3:06:db:fa:ae:25:fd:07:c9:62:39:93:fd:6b:8d:
8c:dc:06:ce:e0:80:4e:5f:19:b6:fe:cb:cd:42:79:21:22:3f:
a8:fa:6e:65:e6:99:0d:d5:39:75:a6:ac:f9:79:1c:24:06:2f:
6b:5b:14:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 17:13:49 2026 by rpki-client