
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier: LOLa+fkEM5esACsh/wQTIGW1C0y8CDWK2FqLDzWpeGo=
Subject key identifier: C4:52:E4:DF:16:0B:3A:23:43:3F:86:C0:C1:E6:E1:E5:AD:F8:C2:9B
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial: 01A000CA0E8A28CC5EB2A0A4126136E4CA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number: 152E
Signing time: Fri 14 Aug 2026 15:00:36 +0000
Manifest this update: Fri 14 Aug 2026 15:00:36 +0000
Manifest next update: Sat 15 Aug 2026 15:00:36 +0000
Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: 4VkzoQaNT9EfASOLTcQ7WwjTnC0oZPybZEe7d11VDk8=)
2: Sg5TLd0LRzU1Kyw2aXOACqsG4yA.roa (hash: 4vlEE5O6rdTk7GzU24AHkksV5knXEZvyv5QSu+1PBWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:00:ca:0e:8a:28:cc:5e:b2:a0:a4:12:61:36:e4:ca:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Validity
Not Before: Aug 14 15:00:36 2026 GMT
Not After : Aug 15 15:00:36 2026 GMT
Subject: CN=c452e4df160b3a23433f86c0c1e6e1e5adf8c29b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5c:73:2f:9d:67:7c:ab:54:f7:8e:18:2f:e3:
cb:7d:f2:a4:11:21:12:a9:b7:03:d9:49:3a:4a:b2:
94:33:54:16:f3:1d:c8:78:da:60:c8:db:bd:11:ae:
c0:71:e3:7b:fc:f7:9e:82:b9:1a:e4:04:21:ac:c5:
58:b9:26:d7:1f:9b:47:44:c3:8c:09:c7:a3:27:14:
6d:0b:fc:51:12:8a:63:6a:20:7b:4f:59:76:12:8e:
18:b4:d8:c5:be:95:64:15:e1:65:ff:93:6b:b6:e9:
92:36:d0:8e:0c:02:4d:6b:d0:0a:4a:00:70:a2:22:
8a:df:62:d7:fb:65:11:4d:31:1c:85:85:48:a5:29:
20:dc:11:67:7d:bc:e8:d1:bd:a7:93:c3:b0:a6:2f:
4e:7c:98:3e:5d:88:06:b6:b1:42:bc:9d:14:54:7d:
bb:c0:6c:5e:11:4c:49:20:be:a6:5f:ea:d5:39:93:
70:da:1c:5b:15:e3:29:b2:a5:3b:8b:24:8b:f4:a7:
57:5b:43:c4:51:27:14:7a:1b:ff:0f:17:73:68:84:
09:c7:aa:74:58:38:6a:db:c7:fa:af:41:3e:73:16:
20:20:38:4a:2f:11:11:7a:db:9e:23:da:23:04:ae:
af:60:73:7a:2b:6f:84:3c:44:4d:52:e0:98:eb:26:
1b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:52:E4:DF:16:0B:3A:23:43:3F:86:C0:C1:E6:E1:E5:AD:F8:C2:9B
X509v3 Authority Key Identifier:
keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:a8:3e:f8:80:fc:22:70:86:fb:13:11:9a:71:71:10:25:0c:
84:31:cf:8d:cd:9b:91:70:34:fa:31:14:d9:ba:f5:fd:3b:cd:
f5:43:ff:3b:d7:a4:90:40:d6:8f:40:95:b7:56:a1:25:c0:dd:
60:09:9a:b8:10:5d:5c:26:c6:3c:e7:39:0a:44:6c:28:23:55:
f0:1c:97:5f:31:18:98:89:f1:d3:4a:be:ed:4b:f0:d4:09:f9:
eb:0e:27:2b:78:eb:f9:0b:fa:5c:6a:54:1a:6e:c5:b0:d6:df:
84:d4:3b:b3:51:cc:1f:8b:f7:42:83:c7:81:19:71:c1:f1:d9:
2a:cb:33:84:d9:93:37:c0:f5:2c:f1:18:6d:b0:34:ec:1e:48:
df:7e:41:f2:c2:79:0b:ff:1b:f0:20:a7:64:dc:93:eb:c8:3e:
d5:5d:de:99:ef:83:89:d1:46:75:13:f6:c8:0b:45:50:0a:0e:
e3:82:54:e6:40:19:4a:b7:7a:49:96:9a:45:f6:95:c6:5a:04:
38:1b:19:02:3c:68:4f:d4:2e:d3:6c:62:53:c6:76:94:90:ec:
03:3b:8d:b2:73:1a:2a:20:06:ba:22:8a:b7:98:36:01:98:03:
06:25:5d:4e:1e:7b:5d:d0:86:88:9c:b1:ec:97:b0:4c:84:16:
f3:c0:46:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:12:35 2026 by rpki-client