Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier: xUBKRdm5AWmeLt2JWJaYmLuxMU/UegwsNhO1ZpMt0kE=
Subject key identifier: 11:ED:CC:2E:E3:2A:C4:B5:1D:55:B7:06:C6:35:EA:7C:17:8A:F4:70
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial: 01A1415E51AE7B654CB0C81A7641CDF59A90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number: 15D4
Signing time: Thu 15 Oct 2026 21:01:02 +0000
Manifest this update: Thu 15 Oct 2026 21:01:02 +0000
Manifest next update: Fri 16 Oct 2026 21:01:02 +0000
Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: 0xo5skUjzR85+d3EHOMIc/KTjjtjXS/WnDj8kXRRXig=)
2: Sg5TLd0LRzU1Kyw2aXOACqsG4yA.roa (hash: 4vlEE5O6rdTk7GzU24AHkksV5knXEZvyv5QSu+1PBWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:41:5e:51:ae:7b:65:4c:b0:c8:1a:76:41:cd:f5:9a:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Validity
Not Before: Oct 15 21:01:02 2026 GMT
Not After : Oct 16 21:01:02 2026 GMT
Subject: CN=11edcc2ee32ac4b51d55b706c635ea7c178af470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:66:e8:e6:8f:fc:70:cb:26:7d:ac:e6:ff:
f5:81:28:33:17:33:6a:7a:f1:dd:28:06:b9:6c:14:
29:3a:bc:49:92:32:78:55:31:3b:76:67:15:c5:a6:
09:7d:4a:af:88:46:97:2c:2f:dc:6a:e5:20:11:d7:
ba:52:18:46:3b:cb:83:34:22:fe:6a:65:d3:5e:3d:
45:aa:93:d0:04:fa:c5:d9:1a:ff:ee:00:5d:b3:1b:
27:f1:ff:23:50:27:36:82:de:ac:d1:28:14:16:2e:
4b:e7:e9:a7:f2:b9:33:3c:cd:dc:bf:df:37:f3:65:
5d:42:ce:ed:a4:7c:27:16:af:00:8f:8b:78:b8:01:
49:53:d3:f8:df:d8:96:4e:1c:26:1d:90:ba:71:7d:
e8:0f:3a:9c:23:6e:23:d5:d4:f6:15:d0:7e:5e:22:
b4:91:e8:bb:69:98:fa:ad:62:18:ba:9e:56:df:29:
87:e3:c1:35:d8:43:ee:32:d2:48:c8:9d:b2:94:36:
c0:0b:a7:6f:8c:76:dc:15:43:6d:1c:d8:dd:a0:a0:
8c:42:f5:73:fb:bd:d8:5f:e7:c2:93:96:23:93:5d:
e6:ef:b9:c7:f4:24:42:4b:a7:c6:6c:a7:0e:43:bd:
7c:48:e9:57:d1:d1:1f:54:f3:c6:d0:fd:c9:2d:b5:
78:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:ED:CC:2E:E3:2A:C4:B5:1D:55:B7:06:C6:35:EA:7C:17:8A:F4:70
X509v3 Authority Key Identifier:
keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d5:ce:f5:30:74:69:b3:36:dc:48:de:76:62:15:3f:33:1f:
1a:9b:b5:ea:46:0c:a1:8e:a5:3e:d0:bf:7b:29:34:8a:b0:0a:
75:bc:97:64:1d:2d:9c:30:35:66:d6:f5:8d:92:56:c8:cf:a2:
c4:33:fe:e3:a5:53:dd:77:72:c2:17:93:d1:15:bf:a7:06:97:
4b:76:75:a9:87:8a:3f:f5:55:ca:54:93:fb:9c:36:0c:7f:12:
69:fc:2e:68:1d:b0:7d:77:3e:e7:35:77:65:6d:0b:d2:4d:fb:
4a:c6:10:fd:b1:5d:b8:1c:fd:4b:d2:4d:14:66:9f:d3:c2:d7:
5b:c2:69:6b:d3:2d:c3:ac:37:69:dc:26:5d:47:b4:da:9e:c3:
f4:cc:7f:a5:fb:79:c9:b9:6b:cf:0a:5c:ed:e0:30:16:90:f6:
30:9c:c2:1a:a7:5e:ef:9f:15:5e:2e:5f:98:40:fe:66:ce:42:
ce:4c:b7:56:39:73:75:6b:fc:63:c5:dd:bf:b2:9a:9e:5b:b7:
67:ca:5b:7f:a9:02:6c:04:7e:39:4a:4d:72:4d:26:a6:5d:1b:
0d:95:aa:03:00:78:f7:b5:8d:f6:e6:56:d3:c7:2a:6c:9f:78:
e9:9a:6d:65:bc:03:7b:a9:36:e4:02:54:52:96:de:dd:d6:d5:
01:5a:88:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 04:09:49 2026 by rpki-client