Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
File: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json)
Hash identifier: OxFmJXGQ6GKL2SD8j35I1dTd/YQ5YcHkyQrx6udh4vM=
Subject key identifier: F3:AB:FB:DF:00:5F:52:4A:8B:F8:3B:92:71:32:77:AD:D9:A0:1F:EF
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial: 01A0C66A93AAC7BBB5217EF8C2AB21FBED22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
Manifest number: 0C1B
Signing time: Tue 22 Sep 2026 00:01:08 +0000
Manifest this update: Tue 22 Sep 2026 00:01:08 +0000
Manifest next update: Wed 23 Sep 2026 00:01:08 +0000
Files and hashes: 1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: g6AGpRSuvBQIY2rp+O2FtoFSEKBD/vliBjCAsYgZuj0=)
2: QjGOkpGhnIHTjcyUOw5HqV889uo.roa (hash: 3L8C74glFccswyHlfz0jSKhqaPXmi+TBnYkBkUnonkw=)
3: rsroaei2TqcIFnLEgGYzqyrWcFk.roa (hash: 5AMA9aMta9Csy7KyS+5XAc3h7QHkQnnyf2Wg73Az1uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:93:aa:c7:bb:b5:21:7e:f8:c2:ab:21:fb:ed:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Validity
Not Before: Sep 22 00:01:08 2026 GMT
Not After : Sep 23 00:01:08 2026 GMT
Subject: CN=f3abfbdf005f524a8bf83b92713277add9a01fef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:12:02:7d:68:0d:9f:0a:92:d3:76:8a:7b:1a:
d4:cd:e5:49:fc:48:f3:40:50:bc:f7:3f:05:02:8c:
7e:d9:45:f8:ef:88:54:ed:00:c0:d7:70:41:60:b4:
35:d5:b6:f7:00:c3:91:2e:86:12:60:9f:e8:6c:83:
05:33:32:44:c4:82:99:01:21:29:88:19:22:0f:68:
31:a4:a4:c9:d5:48:45:6d:e7:f4:09:29:e0:ac:37:
a1:56:60:b3:6e:81:21:1c:10:47:5a:c2:78:a8:8b:
65:f6:4a:19:00:4e:4b:07:93:80:84:79:52:49:16:
4c:c4:37:a8:7a:cd:cd:b4:5b:a3:62:ea:c9:49:a4:
b0:a0:21:50:5e:a1:43:7d:fa:fb:bf:8e:e7:61:b1:
a4:51:38:00:80:c3:3a:e7:0c:04:4a:5f:74:4f:fe:
34:02:51:b3:0f:fb:db:f7:94:26:77:49:69:93:e8:
02:98:9d:96:ef:87:60:58:12:f8:fe:e1:3b:2c:8b:
6d:1d:51:a2:14:81:bd:9e:22:35:dc:94:b1:26:18:
70:8a:2d:75:d1:da:c1:b0:29:ff:03:16:f5:a8:18:
c5:fa:7b:cc:a7:e5:20:27:17:80:ca:86:f4:1d:31:
6c:e9:51:49:4b:72:ed:56:79:d9:1e:46:81:43:a0:
72:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AB:FB:DF:00:5F:52:4A:8B:F8:3B:92:71:32:77:AD:D9:A0:1F:EF
X509v3 Authority Key Identifier:
keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:18:f8:b9:10:92:44:3e:ea:1a:b5:d6:82:60:db:a6:8d:83:
18:09:95:d0:4b:09:c2:4b:d0:04:b2:aa:39:f1:24:5f:e3:ae:
96:0c:c6:f9:44:31:6e:4b:a7:e6:50:64:63:6b:bc:fb:c1:3c:
9d:cf:b0:70:b4:f5:f9:e9:62:ab:1c:ee:78:d4:7b:cb:59:a2:
90:4b:09:63:70:20:b9:f8:94:de:7e:b8:80:ad:6c:61:c3:61:
46:11:86:c6:f6:fb:46:a6:6c:15:23:6f:01:0a:ae:08:43:07:
b7:a8:c3:44:f9:29:f6:5a:28:1c:7e:ea:2c:ae:f9:d1:76:86:
ff:be:e7:42:ac:0a:09:66:e8:17:69:2c:98:7a:95:90:19:df:
88:94:c5:90:b8:a0:0a:60:8a:14:f0:19:ee:d1:1c:1e:c9:1e:
99:90:68:f0:96:46:18:32:d4:fd:8c:c2:6f:c6:bc:76:10:c1:
df:b9:cd:cb:62:2a:2e:2e:07:8e:94:54:ce:77:5f:d0:f5:6e:
30:ab:7d:99:6b:f5:ea:56:b3:71:71:c0:48:78:5d:3d:2a:2d:
52:56:21:42:5e:a5:54:73:3b:04:9e:d1:74:ac:81:2f:cb:18:
64:28:1c:d6:21:a9:09:5a:7e:a0:1b:f9:ec:73:8e:25:b2:9c:
ca:53:22:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 10:29:34 2026 by rpki-client