Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
File: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft (raw, json)
Hash identifier: 7rxVdskZDcY2QOKWPQxGFobfQdHm7f6uH1qEqwCqIa4=
Subject key identifier: EA:A0:F5:92:A8:03:77:A8:A5:A0:FE:A4:70:EA:97:9D:BF:F2:E4:D7
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial: 019CAA592011B642E986070ED56B1662B66A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
Manifest number: 09F8
Signing time: Sun 01 Mar 2026 17:01:33 +0000
Manifest this update: Sun 01 Mar 2026 17:01:33 +0000
Manifest next update: Mon 02 Mar 2026 17:01:33 +0000
Files and hashes: 1: 1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl (hash: h+HvFNHKZJcGOZKI+31sDHr6TtTKdQDVbeLSFQK4AHw=)
2: BDsUG_qKwMK-zw5cb5re_OOs500.roa (hash: MK43bq66jUMUM5Ahm8KsScwtAMlZLSz7Ozov3YQzRIE=)
3: tB4j1pvJwB8N2xtUjgH-EaS2pKM.roa (hash: lQm30cKDdInn0Sofx9UuVyNM+EwoftWy+uBDomRAiDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:20:11:b6:42:e9:86:07:0e:d5:6b:16:62:b6:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Validity
Not Before: Mar 1 17:01:33 2026 GMT
Not After : Mar 2 17:01:33 2026 GMT
Subject: CN=eaa0f592a80377a8a5a0fea470ea979dbff2e4d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:b6:fb:17:25:33:d0:f2:06:65:d8:08:59:
2b:3a:1b:4c:7e:b7:15:cc:dd:fc:c5:2c:eb:06:e4:
0c:36:7f:b4:51:62:5f:dc:5a:5e:89:fe:a8:fa:bd:
dd:a0:72:0f:57:3c:4a:3d:05:59:dc:f7:6c:ea:fc:
b0:98:a4:8d:4c:31:6b:47:ba:4e:cf:9c:c3:cc:18:
05:7c:bb:5b:19:64:91:bc:73:d0:30:b6:a3:7e:2f:
e2:f3:d3:24:69:91:68:2f:41:06:f7:3e:3b:9e:95:
45:d5:48:99:8b:c9:e6:c3:d3:12:23:12:b7:37:d9:
c4:30:b9:61:c2:d0:02:1a:56:54:7e:7e:5f:ce:b1:
e0:fe:65:3c:37:2e:e4:88:f2:45:83:5f:eb:b9:7d:
14:9e:c3:bb:10:2e:b2:ba:be:c1:51:0b:f5:1d:32:
66:a0:77:f6:fb:03:4b:38:01:c9:d6:14:10:ea:8f:
a8:ec:13:8c:3e:f4:cb:27:a1:78:9d:27:3a:b3:f0:
39:5f:d5:16:93:32:47:67:87:0e:0a:12:f9:29:81:
cb:5a:ad:64:4f:81:e3:0a:c9:be:9b:11:63:2a:59:
a2:66:42:28:0a:1b:42:e6:4c:b2:13:3b:4f:1d:e8:
57:40:8e:4c:8f:cb:c3:a4:62:1b:94:5d:35:0b:a5:
cb:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A0:F5:92:A8:03:77:A8:A5:A0:FE:A4:70:EA:97:9D:BF:F2:E4:D7
X509v3 Authority Key Identifier:
keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:a7:a8:94:b6:30:bd:d8:3a:36:f6:5f:e6:d6:71:37:75:2b:
2b:a9:06:66:17:82:53:fa:78:99:45:86:2e:73:82:73:f7:bf:
d6:bc:41:b9:e1:93:82:ce:2f:46:9d:a8:d2:cb:41:95:43:f6:
65:bd:7c:6b:94:64:22:3e:ed:7c:51:bb:29:ca:1e:bd:f9:80:
60:8c:a5:1e:1b:71:e8:a1:59:9e:30:05:9a:98:3f:1d:a0:ee:
02:ce:ce:35:df:bf:c0:c3:8e:57:24:c1:11:01:03:33:1f:02:
05:54:87:23:53:13:2f:bb:40:10:60:38:3b:a0:2a:9f:68:7c:
ab:a9:6b:5f:23:83:03:be:db:4d:13:c8:20:85:ce:5c:28:00:
ac:65:9b:c8:79:a8:d0:4d:59:41:ab:87:7f:1a:12:0d:4a:16:
3c:ee:d0:09:8f:06:fe:dd:04:90:8e:ab:4f:0a:14:da:5f:24:
df:dd:00:34:1a:df:dd:ed:c7:50:da:a7:03:fc:3a:e6:3f:dd:
65:f0:32:11:a6:10:ce:2d:74:e4:81:30:c7:ca:7c:e1:42:7b:
23:e1:a4:79:10:ce:24:30:e1:f9:e3:66:18:db:4d:a1:b1:d3:
4e:57:ca:66:28:9c:b6:3c:cd:1c:7d:06:55:af:9d:e9:b4:26:
68:54:c8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:50 2026 by rpki-client