Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
File: 1-qTuqG-fPm54gbS42hmh0nJehxA.mft (raw, json)
Hash identifier: SrGGz+Wiph771T2Rf1oTmIgSrUmg9WHaXg0bC1l6BmA=
Subject key identifier: 5E:5B:62:3E:39:CF:3A:13:F6:FF:39:2B:B9:F2:7B:67:E1:72:EC:A9
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial: 019CADC83E2EAB881DB74C8A7019A3134F1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
Manifest number: 1847
Signing time: Mon 02 Mar 2026 09:01:47 +0000
Manifest this update: Mon 02 Mar 2026 09:01:47 +0000
Manifest next update: Tue 03 Mar 2026 09:01:47 +0000
Files and hashes: 1: 1-qTuqG-fPm54gbS42hmh0nJehxA.crl (hash: ccRaY0A38LYZEDb8WZk3E78TiF20dE+nUsbsgq72LyU=)
2: DeMSqglNgnRimF4pLlzh1FBEhnA.roa (hash: 4oE04OONKgwG5O+fZ1H47RApbnAL6oA0WTInP838z0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:3e:2e:ab:88:1d:b7:4c:8a:70:19:a3:13:4f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Validity
Not Before: Mar 2 09:01:47 2026 GMT
Not After : Mar 3 09:01:47 2026 GMT
Subject: CN=5e5b623e39cf3a13f6ff392bb9f27b67e172eca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a6:c7:09:18:29:18:e7:d3:03:96:d3:2a:76:
52:a3:b7:8e:b0:ff:af:37:f8:30:d4:07:cd:27:94:
0f:37:3b:17:83:5a:ab:fe:d7:19:64:ac:d2:77:b9:
9d:0c:d5:b5:f5:cd:b7:12:04:49:0e:61:22:28:d6:
70:75:68:be:97:07:75:cd:ce:7f:08:d3:c7:c8:50:
ea:f6:84:77:10:94:f4:4f:f6:69:be:ee:9c:18:0d:
13:7e:35:71:2d:a2:99:ec:5d:4b:00:60:7d:7c:60:
cb:65:66:60:ef:3a:49:2e:bc:b1:29:9b:66:94:8b:
35:0d:6a:22:6a:68:58:f8:8f:9a:1f:ef:64:80:98:
97:48:51:fe:49:1e:fe:a4:93:7f:3b:b5:36:79:f4:
37:4c:6f:cc:3a:9c:e7:d1:1d:3e:55:dd:41:44:be:
8c:7c:da:31:d6:5f:87:72:41:81:a8:d8:dc:d9:f3:
a0:0a:7e:0e:e0:9a:bc:0e:f8:c6:59:54:53:db:e0:
31:fa:08:46:e1:1f:54:dc:76:a4:c3:d9:5f:9c:c0:
91:5e:27:b9:b6:b9:7f:fe:c7:a1:23:29:04:8a:3c:
f2:c0:d3:a4:78:c1:29:e7:ea:5a:8a:c7:2a:48:83:
0d:9f:6b:d4:45:46:fe:6f:ff:4c:23:65:4e:9a:d2:
61:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:5B:62:3E:39:CF:3A:13:F6:FF:39:2B:B9:F2:7B:67:E1:72:EC:A9
X509v3 Authority Key Identifier:
keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:df:4a:be:01:bc:a1:65:f1:7b:ba:ac:ce:59:7a:24:c0:c2:
bc:63:15:ad:eb:e0:98:1b:96:d0:8f:bd:bf:b9:c5:d5:c2:57:
aa:9b:36:27:22:2a:ca:86:b6:22:07:83:b0:4a:fc:90:0c:75:
a8:94:0e:e5:e6:48:53:5e:4a:4d:64:29:93:79:df:d4:8e:a6:
0d:21:06:a6:16:0b:02:d8:83:47:3a:72:79:75:d8:c0:a2:61:
ad:be:da:4b:17:33:36:bf:f8:e8:34:8b:ec:ff:4c:62:01:25:
4b:f4:6f:8b:b1:00:62:75:83:72:7f:82:cc:8a:24:2e:1e:49:
ae:55:24:a8:b0:2f:4c:fc:90:ef:20:4f:a2:bd:5e:15:a0:9c:
13:3d:eb:cd:71:32:05:07:2f:2b:00:c8:66:ac:f2:8f:8b:40:
bb:40:07:9f:d6:48:3a:7f:59:f1:13:a0:dd:dd:2d:d8:2a:d4:
8b:d2:19:d4:54:4c:c5:99:db:f2:da:a7:0c:0d:a3:c7:bb:5b:
f8:a3:cf:de:95:1f:61:ee:48:eb:3a:f2:48:82:cc:b9:35:23:
1f:84:c0:35:bd:03:50:29:89:7d:05:83:5b:38:df:ef:42:c5:
2e:ff:fc:65:39:17:01:a2:65:c2:6f:68:1c:06:a6:84:56:64:
4d:63:d7:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:02:45 2026 by rpki-client