Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
File: 1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json)
Hash identifier: XdW3x2xeGOaKZF3B1ahmk9SjMvWFxpPfXs7m7TPbLBE=
Subject key identifier: 46:35:C3:00:67:C3:76:1B:88:DC:F3:55:F5:14:60:C5:5B:0E:79:B7
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial: 019D9B515FD189DCC115DDA37F8EAE035B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 12:01:34 +0000
Manifest this update: Fri 17 Apr 2026 12:01:34 +0000
Manifest next update: Sat 18 Apr 2026 12:01:34 +0000
Files and hashes: 1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: EfWgbQDz24QjBybSAL8bxi/SwdlLQQ/zcBc7bf4xWXc=)
2: DeMSqglNgnRimF4pLlzh1FBEhnA.roa (hash: 4oE04OONKgwG5O+fZ1H47RApbnAL6oA0WTInP838z0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:5f:d1:89:dc:c1:15:dd:a3:7f:8e:ae:03:5b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Validity
Not Before: Apr 17 12:01:34 2026 GMT
Not After : Apr 18 12:01:34 2026 GMT
Subject: CN=4635c30067c3761b88dcf355f51460c55b0e79b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:23:01:be:91:96:69:15:b2:f5:2c:11:56:46:
8d:f4:d9:e4:dc:fb:10:4b:48:f0:59:eb:65:ff:aa:
3d:cf:c7:4a:23:6b:f0:1a:2a:d0:ee:2c:e5:5e:3d:
ba:15:2a:de:fe:5c:c5:bc:da:c0:8f:97:1c:61:01:
26:e4:1a:01:62:14:6c:60:cf:b2:4d:07:a1:f2:f9:
96:94:41:de:a9:e6:9b:a1:ad:ee:73:c2:2e:a2:37:
d1:e6:ef:06:62:86:ed:44:a8:67:df:af:1b:dc:39:
d3:36:45:45:a5:14:e6:24:e9:05:79:e7:a1:7f:4c:
fa:d1:d5:c1:4a:a6:ae:94:23:33:85:bd:e5:2f:a8:
33:0b:8a:a6:ca:0b:9e:6c:51:10:4f:77:2b:7a:f6:
aa:4f:46:e3:81:cd:23:7d:9e:dd:cb:72:49:0f:02:
b1:64:ae:c5:cd:a1:e7:63:88:1d:09:88:16:72:dc:
1c:6b:89:ac:c7:04:58:2e:06:44:6c:9f:19:bb:d5:
b7:61:4e:0c:ec:a2:07:37:9b:d8:0c:4b:ec:15:e8:
fe:c1:51:04:ff:dd:57:05:84:78:01:28:e6:8b:9d:
ac:8f:24:e1:01:95:6c:fe:67:8f:e0:fc:cc:e3:52:
37:5e:f5:fc:28:d2:71:36:9a:e0:7f:26:ed:f5:bd:
00:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:35:C3:00:67:C3:76:1B:88:DC:F3:55:F5:14:60:C5:5B:0E:79:B7
X509v3 Authority Key Identifier:
keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:c0:7d:4c:78:20:27:7f:3a:08:85:d2:0f:99:2d:2b:ea:6b:
9b:d7:21:91:b2:e3:b3:ba:78:5b:1a:50:d5:98:46:87:e2:93:
9d:9e:30:05:5c:19:39:f4:d9:48:02:fd:6d:a3:ac:e0:ac:13:
ed:97:a2:d4:51:e4:40:18:4c:f1:d5:4f:bb:80:9d:94:c4:ec:
6a:93:4f:0c:af:c1:76:62:10:34:51:26:58:d8:2a:e8:aa:79:
77:42:7a:67:cd:74:06:23:50:f8:1f:8e:18:09:32:ba:1a:dc:
cd:a7:9c:01:10:f0:5a:21:0a:ef:e8:a9:98:9d:98:70:d4:4f:
61:09:d1:69:01:b0:38:bc:dd:4c:40:07:30:e0:26:37:69:db:
d7:03:2c:0f:09:7c:1c:d6:b4:59:5b:5e:c8:a7:bb:d7:96:0f:
cc:15:fa:a2:a0:7c:c9:5d:17:bd:82:a1:db:94:72:e5:eb:25:
eb:64:8d:f8:34:d9:17:30:21:49:f6:cb:64:7c:48:05:69:8f:
af:86:de:6e:d1:e9:c2:8c:56:9c:18:aa:8e:f4:38:4a:e3:24:
fd:2f:e6:c1:58:20:bf:f9:00:82:c4:e9:df:6f:48:d3:82:07:
1e:31:30:8a:10:16:35:fe:22:03:a7:67:04:5d:22:ee:28:8d:
57:f1:ba:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:13 2026 by rpki-client