Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
File: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json)
Hash identifier: XwOZY9wZv3vVjUujZiEpjiAqWxsXnrAu8Z68gmLsAzg=
Subject key identifier: 7B:89:E1:BD:2F:8C:AA:E5:80:13:E6:2B:0C:42:D1:8D:91:43:DE:E9
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Certificate issuer: /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial: 019D9BBE77F8DB498B25271617FDC45A7A75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 14:00:44 +0000
Manifest this update: Fri 17 Apr 2026 14:00:44 +0000
Manifest next update: Sat 18 Apr 2026 14:00:44 +0000
Files and hashes: 1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: M9lO1fkns4PxzlQ1e7zOPCwViRsfZTTAI8RHURC+TaI=)
2: Rgo2xEGDtwl1Aqv6lnZ3W9C4Qvk.roa (hash: odpOex+bLP44T2CZB4hEU633jHaa81Iak+Z1Bzzr7eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:77:f8:db:49:8b:25:27:16:17:fd:c4:5a:7a:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Validity
Not Before: Apr 17 14:00:44 2026 GMT
Not After : Apr 18 14:00:44 2026 GMT
Subject: CN=7b89e1bd2f8caae58013e62b0c42d18d9143dee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:de:70:e0:9b:fb:4b:61:cb:e0:88:25:5e:
81:c9:4e:14:74:46:79:9c:45:ec:51:a0:60:ba:6b:
10:d3:bb:f1:ce:d3:7b:d3:4d:50:92:11:ff:30:46:
9b:01:41:95:e2:e4:ec:4e:fd:df:59:7d:e6:b5:fd:
26:6e:b2:b0:e1:c3:e5:57:b1:8c:1f:d8:89:03:4c:
ea:a6:1d:96:d4:c7:07:c2:b6:70:c9:1b:51:12:40:
b5:6c:08:e5:9a:19:79:f4:30:00:b1:59:82:a4:d0:
7d:15:48:31:fe:8c:62:5f:b2:1c:65:1d:80:8b:3b:
8f:f9:1e:0c:16:53:a7:0d:7c:47:71:af:44:93:16:
84:05:7f:78:b3:09:15:8c:76:eb:b4:e7:12:af:e1:
de:2a:30:24:bc:db:d9:65:26:c9:46:da:1a:92:1e:
52:0a:85:f9:70:05:70:9e:41:50:52:76:dc:22:f6:
e8:92:8d:ea:84:75:8b:3d:70:81:42:39:69:5c:8d:
41:9b:9b:26:46:9d:53:54:71:47:a6:63:b1:24:2b:
75:3b:89:61:5e:65:93:a1:c1:49:7c:4a:af:d0:9c:
5e:b7:6d:9d:24:3f:79:67:75:07:b4:65:e0:30:d4:
e2:37:10:58:8d:c8:ac:bc:01:6e:bc:ea:87:68:c2:
1e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:89:E1:BD:2F:8C:AA:E5:80:13:E6:2B:0C:42:D1:8D:91:43:DE:E9
X509v3 Authority Key Identifier:
keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:38:1d:f0:38:28:e8:fd:fc:44:f3:53:04:ac:56:ce:f2:06:
55:62:1a:ea:a1:fe:c1:2c:c9:86:0b:4f:f0:8b:f7:7d:b7:bb:
df:f0:47:d1:da:a2:fb:e7:57:72:7c:41:49:0a:3d:c9:0c:2c:
ed:5a:a0:36:28:2c:7a:98:5e:82:a9:2d:9b:65:7c:8c:40:a1:
f5:e4:5a:5c:c8:d8:1a:f6:65:b7:d0:b5:05:24:2d:2a:9b:c7:
4f:c9:53:2c:e7:fd:28:50:58:d6:83:f9:ac:61:a2:99:10:22:
01:b5:67:d2:f1:12:8e:bd:ba:7c:a2:36:4f:a4:db:38:fb:30:
40:36:d9:34:eb:86:b4:d3:e5:8b:cd:31:3a:4c:c6:aa:95:22:
85:0f:74:4f:81:b0:28:bc:d6:43:ba:6d:ec:71:b3:ea:86:93:
b0:0d:3e:ca:b6:11:7e:83:03:66:47:20:e3:5e:10:61:82:5c:
ba:1c:3c:51:19:b9:8e:2e:ce:4a:f6:d8:10:ab:08:6f:43:93:
94:63:d0:b2:da:cf:be:e7:74:cb:9a:20:11:56:86:8e:51:c4:
69:79:b7:3b:4f:ae:dc:9a:d7:0b:7e:1c:42:3e:3c:19:70:db:
34:c8:06:5d:85:e8:4e:11:46:ed:f4:65:1b:2a:ba:ba:51:c5:
5d:28:c0:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:33:38 2026 by rpki-client