Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
File: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json)
Hash identifier: RgNABuz4XHp5RQf5F6lvb8CaszYXaasT7YayBuidXTY=
Subject key identifier: 23:EA:F9:BA:FD:2F:AC:BD:CD:0B:14:4B:85:A0:C0:A9:9A:85:4D:FC
Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Certificate issuer: /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Certificate serial: 019CAAC64B0F4E468750150093C8A23F18E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
Manifest number: 0402
Signing time: Sun 01 Mar 2026 19:00:47 +0000
Manifest this update: Sun 01 Mar 2026 19:00:47 +0000
Manifest next update: Mon 02 Mar 2026 19:00:47 +0000
Files and hashes: 1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: 9bxfUddo1HXGRBxyWvifaNaQC+MWvoRrBYkw4r1OKHk=)
2: OytMoAZMK8wtoSzZvtAHJ9Md1Mo.roa (hash: H/07CVFn18uiXemUf+RsWUhgJ/GpamvFqfgXdnjOQDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4b:0f:4e:46:87:50:15:00:93:c8:a2:3f:18:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Validity
Not Before: Mar 1 19:00:47 2026 GMT
Not After : Mar 2 19:00:47 2026 GMT
Subject: CN=23eaf9bafd2facbdcd0b144b85a0c0a99a854dfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e5:ea:02:52:0e:eb:c1:58:b7:b3:2f:40:91:
4a:72:dc:0a:ed:1e:25:7e:df:05:54:9e:c3:72:23:
11:41:36:f0:3c:a2:b7:5e:f9:d5:76:97:08:1e:51:
c0:b7:48:df:29:9e:4a:70:ef:4e:90:44:36:6f:4f:
ee:f3:d2:ee:ed:d0:ca:66:e0:ae:a4:a6:14:8a:ce:
82:4c:ff:9e:de:4d:bb:ff:12:30:b5:db:f3:a4:c3:
90:ab:ea:32:b3:f7:74:75:6c:83:b7:a6:5a:68:2b:
4a:b0:e7:4a:0b:ce:65:d3:45:8d:30:df:6c:68:94:
c4:47:6c:6d:54:b1:a8:84:68:8c:cd:c5:83:92:6b:
41:cb:d2:76:57:34:3c:da:2b:7c:d3:75:d4:d0:46:
ec:03:f8:5e:f2:27:a4:d2:f1:f5:ae:19:0b:d4:c5:
99:5f:58:00:62:6f:bb:cb:57:b1:e2:42:46:12:40:
8f:85:26:56:a5:26:89:ca:a0:6e:1a:38:e6:b1:17:
bf:07:8d:c3:df:b7:1e:ee:4c:99:43:33:70:bd:0d:
96:7c:e7:4b:00:2e:7e:e4:f9:27:cf:c1:66:be:8f:
3d:f3:e1:b1:48:7a:a1:7c:67:a2:13:e5:8d:e0:a6:
60:cc:7d:b9:11:34:da:55:a2:99:0d:c4:92:b2:1e:
c2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:EA:F9:BA:FD:2F:AC:BD:CD:0B:14:4B:85:A0:C0:A9:9A:85:4D:FC
X509v3 Authority Key Identifier:
keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:e7:d3:b6:3f:b9:24:3c:e6:aa:08:5a:97:09:a2:04:2a:6f:
4f:8d:47:58:cc:38:98:6c:4e:3d:1b:e8:79:1b:f8:f3:8a:67:
52:5b:65:ae:4a:b1:da:c3:5d:cd:e6:14:b9:7a:2e:7b:e9:06:
30:e2:6c:89:b2:d1:43:4c:1f:48:74:f4:d3:69:25:96:1a:17:
94:ba:34:d5:0e:91:80:a0:e6:99:4f:c3:32:90:7e:2a:a2:66:
b2:b6:5d:9c:0f:5d:48:56:37:91:2e:09:8a:f3:67:51:e8:2c:
79:49:e3:27:0d:95:2d:5b:a0:50:a5:47:16:3e:67:29:21:52:
11:1a:ee:26:8b:41:31:75:59:64:45:8b:32:d2:e8:ba:e9:82:
30:4f:b6:39:17:2b:86:35:d6:a9:09:35:19:66:2d:09:15:da:
73:89:8b:b6:d2:a7:1e:47:4c:b1:c7:96:8c:13:06:5f:b6:50:
d5:be:8e:2c:5d:ec:a0:dd:62:d5:8d:5e:e4:27:0b:1b:64:83:
46:1a:f2:f3:5d:07:99:5a:78:5a:3a:bf:11:8e:70:61:0f:af:
22:b6:f0:3a:35:04:09:b5:05:82:68:f6:85:9a:44:79:16:a6:
00:7a:ea:30:05:7e:0e:81:11:c9:1c:51:67:4c:08:61:48:05:
17:11:2f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:04 2026 by rpki-client