Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
File: FqwWDambNJSla1R8aKjiwJGGkbU.mft (raw, json)
Hash identifier: toHSDkpY8IjpddAKd09fMyyL5fZ6yEmJP/LQFusmkl4=
Subject key identifier: 57:72:23:88:D0:92:62:9D:56:D5:AA:E8:39:53:DD:8C:B8:C5:1E:21
Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Certificate issuer: /CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Certificate serial: 019CAB349B2D885A4100E8A2DFC774FC40DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
Manifest number: 13BF
Signing time: Sun 01 Mar 2026 21:01:17 +0000
Manifest this update: Sun 01 Mar 2026 21:01:17 +0000
Manifest next update: Mon 02 Mar 2026 21:01:17 +0000
Files and hashes: 1: FqwWDambNJSla1R8aKjiwJGGkbU.crl (hash: lZwqH0GuGphYW+QRclFfm7OurDzG0CaF574n0lFJmQ8=)
2: wUaSEcujq46XjAGKMjmbe-PCA2c.roa (hash: iDnvgXNOGCFHMgs34cLFhiiuAQok9TTuwz4AWmow75Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:9b:2d:88:5a:41:00:e8:a2:df:c7:74:fc:40:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Validity
Not Before: Mar 1 21:01:17 2026 GMT
Not After : Mar 2 21:01:17 2026 GMT
Subject: CN=57722388d092629d56d5aae83953dd8cb8c51e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d8:41:96:7a:9b:88:ca:c1:a6:6f:2d:49:2b:
cd:75:21:09:02:f1:43:f3:32:44:f4:d8:bc:0b:43:
40:d2:18:45:97:c2:44:2f:e1:7f:a9:f9:b8:9f:dd:
c0:2a:bd:0c:8b:f3:87:9b:06:75:d5:99:d1:ef:57:
97:72:1c:72:bd:42:8f:b7:93:87:51:b9:59:0b:3f:
de:7f:66:7b:91:a6:42:29:ce:20:d4:55:f6:dc:3c:
81:0a:ee:b3:de:ea:19:42:09:64:eb:4c:e8:46:4b:
a2:77:20:de:e2:72:b0:12:40:48:a6:64:58:ea:8d:
48:96:6e:cb:fa:1e:47:fb:03:00:94:ab:0f:c3:cf:
3c:1c:88:ff:02:be:c1:19:40:7d:5e:22:f0:37:e3:
5a:9b:b9:0b:7a:11:96:b0:97:00:43:bf:68:99:4e:
83:75:d0:99:4f:ff:f2:5d:ad:56:16:d4:59:ad:cd:
cf:47:87:76:13:a9:08:a5:1c:5c:d3:6a:f6:71:30:
a1:fd:1e:ee:c5:45:35:e7:fe:ce:44:b4:94:10:09:
74:0b:63:be:a3:d0:9d:e9:03:93:56:b1:f1:29:11:
f9:4b:2e:01:e0:cc:a1:89:5d:2a:ed:13:fe:eb:59:
10:11:2e:64:b0:c4:58:a5:53:ae:52:b6:47:97:e0:
43:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:72:23:88:D0:92:62:9D:56:D5:AA:E8:39:53:DD:8C:B8:C5:1E:21
X509v3 Authority Key Identifier:
keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:62:12:d5:7d:98:7d:de:e6:9c:d1:22:d9:57:a4:93:d6:16:
97:0f:3e:2d:6a:6a:20:48:09:09:ea:97:c1:1a:e5:52:b7:07:
4b:54:27:4c:63:84:00:8a:01:c4:9b:36:0a:64:3c:c8:42:f0:
ef:80:91:aa:72:24:ec:e8:f9:05:80:93:08:ba:74:d6:29:09:
ea:89:dc:c1:92:0c:40:8c:5e:f4:c8:89:3f:5b:4d:ee:56:61:
0c:68:5f:8d:b8:d8:dc:e6:25:46:8e:d5:1a:04:b4:f7:a4:a4:
cf:5b:c2:8e:5f:8d:b8:e0:14:ce:ae:19:a2:31:0c:4d:9b:44:
51:b5:46:2f:82:0b:ad:e2:72:24:8e:6a:7c:d0:bd:0b:61:af:
fd:07:d6:76:b4:ea:0c:0a:c6:c5:47:0c:23:3d:58:58:22:21:
ab:82:00:b9:e2:3c:ec:d4:75:bd:88:5b:dc:88:20:77:42:e6:
69:c1:e7:16:b4:20:db:f7:d7:69:96:1c:54:94:c8:e7:59:3a:
e4:08:52:b7:f9:23:57:77:d1:01:c6:cd:f1:ef:5d:63:18:f8:
41:a3:6a:f6:af:d4:a0:8b:12:8b:44:1d:7c:13:d5:b3:03:6b:
5c:ee:d7:ba:51:fa:d0:8f:47:9f:bd:9d:a0:1c:37:93:0a:ba:
8e:8d:f0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:19:08 2026 by rpki-client