Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
File: FqwWDambNJSla1R8aKjiwJGGkbU.mft (raw, json)
Hash identifier: zgq568QULyNFj9V2q/LRJb5Nj0VTODCHwg2pdG0vQpE=
Subject key identifier: FA:9E:EA:D5:C9:5B:00:84:6C:E1:6D:58:E1:F0:42:33:DF:FC:D1:AA
Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Certificate issuer: /CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Certificate serial: 019D98BD71255D5CBF718AFFD1C8A63433A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
Manifest number: 143A
Signing time: Fri 17 Apr 2026 00:00:45 +0000
Manifest this update: Fri 17 Apr 2026 00:00:45 +0000
Manifest next update: Sat 18 Apr 2026 00:00:45 +0000
Files and hashes: 1: FqwWDambNJSla1R8aKjiwJGGkbU.crl (hash: /7Hs3RrM2WNEH/w1vcON9858pCFRMmO82EiAGoqewfM=)
2: wUaSEcujq46XjAGKMjmbe-PCA2c.roa (hash: iDnvgXNOGCFHMgs34cLFhiiuAQok9TTuwz4AWmow75Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:71:25:5d:5c:bf:71:8a:ff:d1:c8:a6:34:33:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Validity
Not Before: Apr 17 00:00:45 2026 GMT
Not After : Apr 18 00:00:45 2026 GMT
Subject: CN=fa9eead5c95b00846ce16d58e1f04233dffcd1aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:6c:b8:ef:c4:59:e8:b9:41:fa:39:65:a2:ea:
1e:1d:07:f4:e7:75:70:bf:e9:db:49:64:31:fe:22:
af:19:91:8f:6b:56:1c:33:2a:17:63:89:41:dc:1b:
2f:cd:e3:c3:60:a8:29:8a:c3:7f:1a:83:64:c8:03:
90:82:17:c1:7d:7d:12:61:11:b2:d4:e8:06:bd:88:
b0:88:66:ea:57:e2:e6:45:19:30:b6:25:6e:97:73:
66:da:61:1a:e4:59:72:94:43:fe:5b:c4:1f:61:b7:
38:31:24:f7:f1:d4:1b:32:82:24:e6:60:7c:19:59:
a2:e4:f3:d8:95:98:4a:0e:2b:1d:26:49:fb:a8:f1:
4e:0d:2b:a4:e6:a1:ea:00:76:b1:fe:3b:f8:0e:14:
c6:40:89:6a:48:29:97:94:be:df:c4:eb:f9:5b:9b:
c8:ad:e1:1e:33:db:85:87:7d:4c:eb:3f:87:59:dd:
07:09:0a:51:67:b1:50:6b:27:af:1d:11:6c:15:41:
3b:78:c4:60:b8:ea:af:19:ea:bc:00:4e:73:f7:b6:
f9:3c:b8:24:e8:5e:3a:1f:b8:57:9a:03:c7:a1:96:
14:d9:c4:3a:ff:b3:a6:91:d6:3b:20:65:46:cb:fb:
54:03:c1:64:db:4e:47:a8:8e:95:fe:73:ea:8b:cb:
eb:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9E:EA:D5:C9:5B:00:84:6C:E1:6D:58:E1:F0:42:33:DF:FC:D1:AA
X509v3 Authority Key Identifier:
keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:74:6c:49:5d:92:b9:07:13:4d:36:98:9f:5c:9f:ef:29:f3:
51:4a:90:25:7c:a9:c3:f5:a7:09:e3:f4:75:4a:fd:0d:d5:e9:
6b:1a:ed:c2:5a:eb:47:27:85:09:08:7c:34:56:a9:72:8b:8a:
3f:0c:42:c0:7c:72:82:ea:1f:96:f4:3b:83:16:5e:06:16:9d:
8e:43:06:39:58:8f:95:a0:81:0f:83:f3:f7:8c:21:a0:5e:c0:
f3:8c:67:38:bd:ec:37:7d:e4:a8:45:bb:d1:94:e6:a9:c7:ee:
5d:63:a8:5b:17:b4:c2:bc:37:52:3f:0d:3e:79:31:56:83:96:
8d:71:84:00:28:08:71:da:e4:98:f9:26:c6:c8:72:6e:31:19:
94:a8:0c:f0:3d:3c:75:03:df:fe:1d:41:51:1e:d2:16:24:5a:
46:a8:ef:1b:91:70:23:ca:b3:9d:35:dd:62:da:10:57:10:d1:
18:26:4a:f6:2a:39:27:1a:f8:a4:60:86:d1:fd:94:81:93:4e:
69:f5:ac:04:f6:21:05:38:b2:5b:f2:13:b7:1e:3e:68:44:0b:
01:52:18:fc:0e:ed:70:ca:69:ca:cd:4a:99:ed:9d:a4:4b:a7:
4f:2e:83:72:1a:d3:d9:43:01:16:d2:dd:1a:e1:55:5c:fd:76:
51:f6:18:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvXElXVy/cYr/0cimNDOhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2YWMxNjBkYTk5YjM0OTRhNTZiNTQ3YzY4YThlMmMwOTE4
NjkxYjUwHhcNMjYwNDE3MDAwMDQ1WhcNMjYwNDE4MDAwMDQ1WjAzMTEwLwYDVQQD
EyhmYTllZWFkNWM5NWIwMDg0NmNlMTZkNThlMWYwNDIzM2RmZmNkMWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmy478RZ6LlB+jllouoeHQf053Vw
v+nbSWQx/iKvGZGPa1YcMyoXY4lB3BsvzePDYKgpisN/GoNkyAOQghfBfX0SYRGy
1OgGvYiwiGbqV+LmRRkwtiVul3Nm2mEa5FlylEP+W8QfYbc4MST38dQbMoIk5mB8
GVmi5PPYlZhKDisdJkn7qPFODSuk5qHqAHax/jv4DhTGQIlqSCmXlL7fxOv5W5vI
reEeM9uFh31M6z+HWd0HCQpRZ7FQayevHRFsFUE7eMRguOqvGeq8AE5z97b5PLgk
6F46H7hXmgPHoZYU2cQ6/7OmkdY7IGVGy/tUA8Fk205HqI6V/nPqi8vrFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqe6tXJWwCEbOFtWOHwQjPf/NGqMB8GA1UdIwQY
MBaAFBasFg2pmzSUpWtUfGio4sCRhpG1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRnF3V0RhbWJOSlNsYTFSOGFLaml3SkdHa2JVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wZjQ5NzMtNjBiZi00Mzg2LTk3YTYt
MWU2OTEyNjg5ZGQ4LzEvRnF3V0RhbWJOSlNsYTFSOGFLaml3SkdHa2JVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8wZjQ5NzMtNjBiZi00Mzg2LTk3YTYtMWU2OTEyNjg5ZGQ4
LzEvRnF3V0RhbWJOSlNsYTFSOGFLaml3SkdHa2JVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAinRsSV2S
uQcTTTaYn1yf7ynzUUqQJXypw/WnCeP0dUr9DdXpaxrtwlrrRyeFCQh8NFapcouK
PwxCwHxyguoflvQ7gxZeBhadjkMGOViPlaCBD4Pz94whoF7A84xnOL3sN33kqEW7
0ZTmqcfuXWOoWxe0wrw3Uj8NPnkxVoOWjXGEACgIcdrkmPkmxshybjEZlKgM8D08
dQPf/h1BUR7SFiRaRqjvG5FwI8qznTXdYtoQVxDRGCZK9io5Jxr4pGCG0f2UgZNO
afWsBPYhBTiyW/ITtx4+aEQLAVIY/A7tcMppys1Kme2dpEunTy6DchrT2UMBFtLd
GuFVXP12UfYYDA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:04:28 2026 by rpki-client