Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
File: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json)
Hash identifier: of821vCMs482gp/RPGVFDgapHLjSeRcXGBR0AhqF7Jg=
Subject key identifier: E1:AC:B4:91:1D:1C:56:A4:43:77:31:CB:25:3E:FA:E8:9A:65:ED:AB
Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Certificate issuer: /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Certificate serial: 019FA974CEA29004AA30877B03255CA97D94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
Manifest number: 058F
Signing time: Tue 28 Jul 2026 16:00:32 +0000
Manifest this update: Tue 28 Jul 2026 16:00:32 +0000
Manifest next update: Wed 29 Jul 2026 16:00:32 +0000
Files and hashes: 1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: k1uD1c6+pY+kZojC1bx/n9kwGnGlDTpJ372OUIqpyHw=)
2: OytMoAZMK8wtoSzZvtAHJ9Md1Mo.roa (hash: H/07CVFn18uiXemUf+RsWUhgJ/GpamvFqfgXdnjOQDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:ce:a2:90:04:aa:30:87:7b:03:25:5c:a9:7d:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Validity
Not Before: Jul 28 16:00:32 2026 GMT
Not After : Jul 29 16:00:32 2026 GMT
Subject: CN=e1acb4911d1c56a4437731cb253efae89a65edab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:8e:90:67:61:90:81:48:d9:35:30:ff:27:de:
b3:94:23:4c:a5:f9:af:11:fe:04:e9:ec:e2:d3:c8:
23:01:b7:ea:73:a8:0f:ce:8e:7c:e6:5e:33:c6:0a:
08:e2:c9:a4:69:fc:88:77:9e:19:5a:fb:f2:bd:dc:
5b:12:36:94:75:c9:69:56:c8:db:e5:63:9b:de:2b:
6e:7c:9b:a5:48:65:5a:b9:f0:1c:0a:ba:d4:49:0c:
8c:a8:c6:af:1f:bd:b8:83:ff:1b:29:88:5c:ff:d3:
92:c4:e9:4d:77:30:95:e0:ff:71:55:91:20:ac:67:
4d:f5:92:4b:2c:0f:d6:fb:ab:4f:f7:b3:33:82:76:
2c:7b:cd:db:62:49:cc:6d:d1:37:4c:73:04:67:52:
f8:64:7b:c3:ca:36:70:bd:d8:25:67:3f:55:2d:5e:
6a:c1:e2:61:c4:84:77:42:50:3e:7e:e9:c8:1a:cd:
27:f7:06:21:2c:24:86:cf:72:53:2a:23:88:9f:95:
6f:2c:74:ae:2f:34:3f:e7:9a:bd:9f:7c:0f:de:d8:
d9:69:e0:a7:28:d0:d2:bf:84:d4:71:42:23:3a:7c:
49:c4:90:7e:fd:84:a0:42:ca:61:b9:c2:6d:97:1a:
db:b1:f4:45:da:43:5a:28:be:36:05:a4:9e:db:33:
bb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AC:B4:91:1D:1C:56:A4:43:77:31:CB:25:3E:FA:E8:9A:65:ED:AB
X509v3 Authority Key Identifier:
keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8b:66:cc:99:91:a5:d6:48:8b:89:72:fd:06:61:1f:be:d8:
59:f9:09:40:c3:c8:fb:de:af:7a:8d:d4:ac:69:a7:d6:28:2e:
cb:fe:b7:2b:d6:9b:7f:17:17:3e:98:64:03:a4:18:90:85:31:
d4:f2:cd:66:61:08:ea:2b:04:88:94:5d:60:f4:ee:d2:b5:4b:
ae:fe:e8:40:c9:60:0a:4a:cc:a8:0e:07:a2:9c:79:28:9a:5a:
8d:7d:f0:4c:9e:e6:43:68:ae:14:89:aa:bb:a5:f2:97:2b:1e:
8d:9d:4f:23:1b:ba:b0:b0:fa:a5:aa:29:29:49:2e:e9:eb:d6:
af:ef:22:06:5e:bd:b0:33:a7:27:9f:e2:51:40:4d:48:9b:fd:
71:8f:8e:c7:26:60:58:fe:e5:5c:30:17:04:5a:34:a1:40:aa:
63:00:18:47:7c:2e:64:2f:f8:3b:43:63:9c:5b:5b:13:52:eb:
5a:3b:7a:b7:73:e1:29:77:9e:8a:8e:74:fb:c6:ca:77:60:17:
5a:46:2a:34:11:3a:eb:89:57:36:70:4b:84:3f:46:6a:87:af:
22:3f:33:2b:20:f1:4b:56:9c:75:c7:f7:5e:d1:0f:99:10:63:
90:89:fe:7f:ec:49:db:e7:a4:7c:34:b4:40:80:f0:de:20:31:
6f:29:63:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:33:37 2026 by rpki-client