Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
File: pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft (raw, json)
Hash identifier: 4anJHpQk1hqir0aUVsV6VhHAeF/mJ4iBs4BZodDGd4A=
Subject key identifier: B0:EF:0D:9E:C1:45:3F:5F:D3:2B:0C:16:CB:B7:67:89:58:9B:D2:6C
Authority key identifier: A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66
Certificate issuer: /CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866
Certificate serial: 019D9B507833FB06D08A534B6B83C9032F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
Manifest number: 0C8F
Signing time: Fri 17 Apr 2026 12:00:35 +0000
Manifest this update: Fri 17 Apr 2026 12:00:35 +0000
Manifest next update: Sat 18 Apr 2026 12:00:35 +0000
Files and hashes: 1: i8Jkc4pxTLURfEXCzuvgdJ4d5UM.roa (hash: 3Aa3KlSn62IyX7PygJ6vdIXQzOFJ0C/FH3ms8tRbuZk=)
2: pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl (hash: TLTbJhr3E2qnFkjOZKs7qXnvkXjmYsSwPHsU0zydLRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:78:33:fb:06:d0:8a:53:4b:6b:83:c9:03:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866
Validity
Not Before: Apr 17 12:00:35 2026 GMT
Not After : Apr 18 12:00:35 2026 GMT
Subject: CN=b0ef0d9ec1453f5fd32b0c16cbb76789589bd26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:31:1d:6c:bb:79:25:ef:a2:9a:d4:ca:40:89:
1e:cc:0b:c3:e7:98:1a:e4:55:01:af:d9:21:8a:79:
d4:7a:b7:61:04:9b:60:0f:8b:1a:d3:e8:fc:96:73:
7d:a7:55:03:5c:91:90:7a:00:86:d7:dc:06:d5:80:
fb:9c:28:ca:da:98:a8:cf:6f:d2:74:9b:83:b3:e3:
28:3a:b4:5b:65:66:62:ec:bc:0c:b0:6c:22:17:d6:
4a:e5:9b:38:51:08:e0:7b:16:b0:b4:d1:ae:66:31:
ae:0c:ae:ac:57:d2:6c:dc:50:76:b7:3f:4e:e0:e7:
bb:b1:72:7c:ec:61:7d:b1:50:28:53:76:5a:1e:23:
54:0c:1b:50:c8:1a:37:31:d1:50:1e:cf:18:e4:55:
5f:0d:05:7a:7d:8d:1a:92:f6:44:19:de:ef:72:6d:
c7:3c:d2:2d:35:7b:54:1c:bc:2b:92:8d:17:84:22:
a6:d2:45:9d:94:2d:14:71:af:37:73:93:af:12:48:
07:15:f0:fc:5a:a4:6c:7a:18:30:71:05:ba:77:61:
1b:ce:8f:84:b7:a9:03:ab:05:b1:47:d6:11:54:0f:
33:0d:f9:d5:5a:39:ce:79:dd:b0:d3:cb:1f:e3:f2:
23:af:26:64:a0:a8:4f:e7:af:38:5c:7c:84:61:14:
21:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:EF:0D:9E:C1:45:3F:5F:D3:2B:0C:16:CB:B7:67:89:58:9B:D2:6C
X509v3 Authority Key Identifier:
keyid:A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:35:41:f9:f7:a5:cb:78:ba:38:7e:d9:df:40:23:60:bb:a3:
a7:cd:07:99:e8:f5:5c:40:77:77:1c:d5:cf:bc:dc:2e:e5:34:
bc:4d:15:19:c3:b9:25:b7:7b:22:08:af:f6:5b:9f:b3:45:00:
4e:15:d9:9e:3c:3f:eb:25:a1:4a:6c:0a:1b:ed:65:f7:fc:5c:
d1:72:7d:c5:6b:4c:d4:a6:da:25:c5:7f:7d:3e:f2:f1:54:96:
fc:c1:45:b3:46:5a:ba:70:4f:52:10:25:f0:b0:95:0a:b5:49:
c1:ee:a6:8e:7e:98:36:80:69:3a:aa:2c:e8:4b:32:de:d2:c9:
14:0e:11:6d:3f:aa:ea:24:53:66:ca:c6:66:49:82:2a:3d:54:
3f:3c:37:91:98:db:19:f4:17:92:4d:ae:e8:e9:19:f1:0d:0e:
52:03:ad:6b:09:a9:89:78:c5:40:c1:d5:00:c6:08:0f:41:94:
de:ce:c5:3a:09:e0:58:6b:b8:d1:82:9b:6a:82:7b:ef:ab:c8:
52:dc:44:88:f1:66:90:7d:90:5a:9e:ee:1c:b6:8f:4b:ee:e9:
d0:69:6e:cf:85:0a:0b:89:cd:bc:f3:cb:0d:b1:23:be:8b:a8:
1b:dd:23:40:51:4e:62:8f:d6:81:4d:1f:6a:7c:3d:82:6a:99:
bb:cc:bd:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:22:27 2026 by rpki-client