Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier: EYZyuQr6Eh2vjiXVc64b6ma5odCCaa7+fGIDTaH4itY=
Subject key identifier: FF:1D:53:85:B9:83:A0:AA:E2:90:D3:49:A1:EB:EA:D7:5A:77:D3:43
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial: 019D9AABDEE9175584372FB48F010DAA6279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number: 1664
Signing time: Fri 17 Apr 2026 09:00:48 +0000
Manifest this update: Fri 17 Apr 2026 09:00:48 +0000
Manifest next update: Sat 18 Apr 2026 09:00:48 +0000
Files and hashes: 1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: 34XrV9sCDC3SjONnv1Y8aKdZMvulEfeXyNHWbDkaDN8=)
2: DIEeHXr-sg72w8tBgzQ5nqnQ7go.roa (hash: EtH8YkhhVk7GVyIh/CoOOspQ4bbxWgxf9R15/OkaX/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:de:e9:17:55:84:37:2f:b4:8f:01:0d:aa:62:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Validity
Not Before: Apr 17 09:00:48 2026 GMT
Not After : Apr 18 09:00:48 2026 GMT
Subject: CN=ff1d5385b983a0aae290d349a1ebead75a77d343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:44:36:b4:f3:ae:70:20:9b:e6:23:07:dc:93:
83:77:57:da:32:6c:9e:30:b9:9b:60:a7:21:ce:c2:
28:7a:8a:6d:da:08:25:45:7f:f8:10:87:75:8f:44:
0d:ba:8e:cc:40:35:7f:3f:2e:ce:63:1d:95:8a:98:
fb:89:ee:68:eb:48:ca:98:1f:30:c4:89:68:88:9e:
72:ec:19:28:24:bb:8f:37:a8:08:56:9a:70:fc:d1:
e2:aa:0b:fb:00:b2:cb:c5:93:83:53:2c:1d:39:5b:
2b:5a:da:84:fb:c8:91:60:15:a0:0e:a3:68:f1:ac:
a8:1d:ba:a9:d5:5f:c9:2c:24:21:8f:b1:5d:64:d6:
05:10:b9:1b:71:88:76:d4:cf:be:2d:e5:62:3d:5f:
97:90:49:86:9d:7d:81:b2:74:0c:45:f5:8c:5c:40:
73:d9:36:0e:cd:df:2e:71:97:6d:44:b9:e7:7e:80:
b1:54:26:f9:4b:7b:1c:14:b0:bc:e2:bd:61:03:e6:
8c:7a:17:c9:c4:6d:c7:4d:3f:73:8f:bb:ef:22:5c:
4c:2d:89:94:ca:1a:f1:1c:f3:28:32:9f:00:03:16:
4b:da:23:a3:ce:d7:b6:16:17:a3:a7:1d:57:b3:c8:
e3:d4:16:29:ce:ec:73:5a:a0:28:cc:27:34:fe:2f:
74:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:1D:53:85:B9:83:A0:AA:E2:90:D3:49:A1:EB:EA:D7:5A:77:D3:43
X509v3 Authority Key Identifier:
keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f0:4f:1d:1f:17:f8:de:f4:82:4c:ed:0f:27:b6:03:ce:5a:
e5:25:08:91:99:a7:f3:47:8c:6e:1b:38:ca:39:94:13:84:13:
d3:d6:bb:d8:a9:23:65:09:69:f6:1f:21:da:b1:6d:7b:c6:a2:
0a:53:11:97:c1:f8:6c:2d:a3:ae:75:07:73:88:fc:e8:41:a0:
67:13:1f:e6:79:31:05:c5:ba:76:cf:89:bf:2b:71:dc:84:f6:
80:a5:2d:a7:47:1a:a6:da:35:0b:ac:fd:2c:cd:7f:c8:bc:da:
0f:9d:1e:f1:6e:a6:54:39:2e:e1:ff:94:9b:72:d5:52:10:1f:
1a:1b:40:20:85:80:1e:cb:4b:6b:b9:dc:79:d0:14:85:25:9c:
b3:87:28:5a:0e:a9:53:5e:23:ec:9a:03:84:87:ab:f1:8d:02:
52:77:96:94:53:f1:f5:5a:9c:5d:1d:e2:ca:a2:d7:f0:03:6e:
17:f9:80:e6:9d:e8:ca:bb:44:0e:0d:bd:d7:94:fd:88:49:be:
f5:b1:66:86:60:8d:08:d1:1e:28:da:da:57:30:41:3e:8f:46:
ab:d2:f2:fa:91:9e:69:95:01:75:fe:f3:53:10:92:a2:76:46:
b0:ab:91:fd:6a:38:5f:c1:55:4c:67:d1:db:31:7a:54:a3:5b:
39:7a:e5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:27 2026 by rpki-client