Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
File: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json)
Hash identifier: /mOQJJ6JZyOPKvoJ4Ft7VQ+x24Ky+K04oJ5GPwEiWpA=
Subject key identifier: DF:A3:B9:36:CE:5A:79:DF:4D:06:E9:AD:35:BC:A0:B1:D3:B8:BF:70
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial: 019FAABF050262C1AA7E0F8A49CBDEDD2AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
Manifest number: 0B88
Signing time: Tue 28 Jul 2026 22:01:12 +0000
Manifest this update: Tue 28 Jul 2026 22:01:12 +0000
Manifest next update: Wed 29 Jul 2026 22:01:12 +0000
Files and hashes: 1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: ovzBOb9de7wXvyVmjG0iIsQV9BjLmkCuF40t+Nw8gRg=)
2: 8SzZYJ9UpnTulHyeUHPHVjPySiY.roa (hash: gpJwGPvf4OsehSE6/EMx/5p/RJPcEJmWMZnsFxVxJ80=)
3: rsroaei2TqcIFnLEgGYzqyrWcFk.roa (hash: 5AMA9aMta9Csy7KyS+5XAc3h7QHkQnnyf2Wg73Az1uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:bf:05:02:62:c1:aa:7e:0f:8a:49:cb:de:dd:2a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Validity
Not Before: Jul 28 22:01:12 2026 GMT
Not After : Jul 29 22:01:12 2026 GMT
Subject: CN=dfa3b936ce5a79df4d06e9ad35bca0b1d3b8bf70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:54:ec:c2:bf:8c:56:dc:0f:cd:7c:50:9a:fd:
37:95:bf:ed:c1:53:48:0f:d5:2c:05:9c:73:3c:ff:
cf:d7:a4:64:5e:ca:5d:28:74:20:45:9d:99:ac:48:
df:90:c4:44:22:9b:33:cf:50:c9:a8:0f:b5:ff:2f:
e7:33:be:45:70:93:77:2e:57:4f:6d:d0:c0:80:e7:
71:8a:ab:01:d5:38:b1:af:f7:1a:0c:e6:f3:c8:be:
62:ff:71:3c:08:6f:6f:57:e8:4d:59:07:36:44:80:
07:68:46:4c:29:a8:1a:82:33:10:28:69:3f:c7:8f:
a2:98:57:9a:56:b3:df:dc:c6:15:8a:69:5c:d7:b2:
ad:bf:9e:3c:39:62:d3:52:3e:25:64:eb:7b:17:41:
aa:ba:62:1e:0d:65:22:35:ca:1e:22:83:22:07:c7:
23:a6:6b:97:a9:cc:7c:52:f5:d0:4f:fe:12:8b:d2:
7b:e2:e6:32:95:23:86:9a:6a:be:a3:6a:7b:f2:43:
e3:f6:fb:23:ad:1e:49:5e:1b:c2:5e:2e:b6:3c:8b:
4a:bc:ce:ad:20:a8:4b:8b:f1:7e:a0:a6:df:6f:33:
95:a4:a9:22:14:31:26:58:e2:ae:00:d0:49:c2:48:
81:fd:32:7c:e6:5b:8f:32:74:6d:de:2c:0c:f0:24:
a2:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A3:B9:36:CE:5A:79:DF:4D:06:E9:AD:35:BC:A0:B1:D3:B8:BF:70
X509v3 Authority Key Identifier:
keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:38:9e:ed:16:bb:d8:80:81:b9:07:92:3b:db:13:83:f4:e4:
bc:f9:2d:37:c5:14:68:17:46:82:c9:51:07:d7:6b:ea:6e:99:
f3:da:22:ca:28:54:87:7f:96:d1:24:26:09:99:e5:55:0d:b6:
d3:7e:00:d1:45:bd:1c:2d:1b:18:1c:27:6d:59:02:2c:09:40:
1d:d7:1e:97:1a:aa:4c:76:7e:39:9b:97:54:0e:83:48:54:f1:
c5:35:54:ca:eb:aa:a3:c3:75:78:6d:69:e1:06:94:a3:7c:40:
4b:22:52:32:e7:78:6b:07:61:de:e7:98:78:89:ea:cf:05:f7:
92:b1:42:3b:a1:aa:5d:54:14:29:5b:8b:06:23:e2:f5:6e:7e:
06:4f:60:87:81:35:50:d9:aa:81:73:39:e3:df:d4:ff:47:97:
d3:19:d9:e8:a8:05:97:db:4c:24:cb:90:da:ff:0e:bf:63:84:
fe:8e:e7:c7:d9:7d:b9:39:72:dc:3b:60:ce:41:06:ed:f0:3f:
dc:9d:85:53:bc:f4:dd:03:2e:7a:9b:2a:5a:86:eb:8e:c0:04:
3f:02:35:03:6f:40:db:db:02:b3:70:e2:9f:e0:92:65:d4:ff:
3f:0a:4f:4f:13:8f:43:96:4b:17:fd:4e:c4:0c:35:54:00:ea:
04:ef:8e:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:55:57 2026 by rpki-client