Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
File: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft (raw, json)
Hash identifier: SVyJT7qMD0h2Tiv+rpwwIOoKc441ak4+9tLetYKPcZ8=
Subject key identifier: 5B:6D:81:54:B1:67:06:19:F5:90:F6:CA:CD:7B:5A:7F:AF:9F:26:DB
Authority key identifier: 7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
Certificate issuer: /CN=7eaf5714c5056cbe269d12fa3099378a95728424
Certificate serial: 019CAAC6921B5B257612991B3D2E5E272397
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
Manifest number: 159B
Signing time: Sun 01 Mar 2026 19:01:06 +0000
Manifest this update: Sun 01 Mar 2026 19:01:06 +0000
Manifest next update: Mon 02 Mar 2026 19:01:06 +0000
Files and hashes: 1: fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl (hash: ZPqlh1kXEZ8jPWiqWxnWeGwwj8GLiteIPX761p+rGm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:92:1b:5b:25:76:12:99:1b:3d:2e:5e:27:23:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eaf5714c5056cbe269d12fa3099378a95728424
Validity
Not Before: Mar 1 19:01:06 2026 GMT
Not After : Mar 2 19:01:06 2026 GMT
Subject: CN=5b6d8154b1670619f590f6cacd7b5a7faf9f26db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:12:1b:bd:fe:92:68:ea:c6:a4:7c:8e:12:c5:
8c:eb:71:46:67:c8:de:7c:d5:2f:4b:a7:d1:c9:f6:
c2:6f:d7:52:09:c7:08:03:84:ae:f7:68:d8:72:db:
31:f3:a9:38:ae:8f:79:28:c6:98:1c:85:5a:a3:46:
17:5d:ea:cb:63:2a:74:50:31:b7:05:c1:84:8e:bf:
b1:ca:00:ad:aa:26:92:36:40:e7:05:2a:66:91:7a:
56:ea:45:eb:08:5c:89:95:21:0a:a4:df:92:12:d0:
86:78:4c:4b:f1:e1:b8:2b:89:ad:21:15:33:e6:c4:
29:85:84:1a:5d:e3:9c:ab:21:7c:cf:f1:88:dd:6c:
2b:bf:df:13:4f:df:bf:cd:4f:b2:04:2c:cf:e1:d9:
b6:8b:a1:2c:62:51:a8:2c:e2:6a:3b:91:83:1e:75:
43:9c:9a:de:58:27:88:8b:d5:8a:98:35:1b:63:19:
6c:ff:69:53:83:77:a8:0d:4d:d6:de:7c:a1:fa:24:
d7:a2:4f:04:ae:dc:f7:5e:0b:20:86:7b:98:95:ca:
f2:79:fe:50:aa:a4:d7:ba:26:50:17:ae:43:83:37:
28:bc:90:68:3c:e2:e6:b0:41:3c:7b:22:e3:91:60:
b2:8c:36:c2:58:c6:a9:49:25:5b:0b:90:c6:75:1c:
d2:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6D:81:54:B1:67:06:19:F5:90:F6:CA:CD:7B:5A:7F:AF:9F:26:DB
X509v3 Authority Key Identifier:
keyid:7E:AF:57:14:C5:05:6C:BE:26:9D:12:FA:30:99:37:8A:95:72:84:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e87aa8-6e5a-4c4c-bcc9-f20d4e86803b/1/fq9XFMUFbL4mnRL6MJk3ipVyhCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b1:9b:40:82:cc:d8:f1:21:c1:31:a8:61:6f:4e:57:dd:6d:
12:50:9a:75:6b:26:65:8f:da:96:3f:0f:a3:d4:fb:31:81:d7:
27:46:9e:6e:9a:99:00:49:20:0c:59:0c:34:16:4c:94:8a:08:
3c:c5:db:1a:11:eb:d7:4c:f8:e1:91:83:2e:e5:fd:c4:0d:a3:
29:26:d1:9a:4a:bd:79:75:2f:d5:f8:a7:18:7c:b9:58:63:3d:
1f:02:cb:4b:35:25:e1:80:c5:0d:3c:f2:73:b7:59:bd:bf:62:
76:6f:bb:a9:c3:2b:2f:df:11:38:16:46:81:a3:ab:4c:d3:1a:
66:62:45:6c:0a:fa:09:a8:4e:d9:b1:67:b3:93:18:f3:2f:b4:
e7:e9:82:0b:1a:a9:1d:48:70:22:89:d2:f5:75:71:47:50:72:
0f:89:87:75:75:5e:aa:53:4e:74:a4:e8:2b:ae:17:46:78:a0:
e8:1b:df:9b:66:52:91:20:76:8d:9a:cf:ec:30:ea:f7:d7:92:
e1:ec:84:84:d5:ca:36:de:a8:c4:7b:8c:02:19:b5:17:12:3c:
0e:a5:ec:67:22:00:58:84:7e:ef:6f:dd:58:b8:93:49:79:3c:
7e:f9:46:63:f5:b3:a1:b8:fa:d8:9a:1d:0f:e7:82:37:75:83:
39:d5:34:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:52 2026 by rpki-client