Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
File: Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft (raw, json)
Hash identifier: R84MFrOcu7S6NqB07H6L6PWPqvBvBhQGAB6+O8EGmks=
Subject key identifier: 90:1C:16:55:A5:A4:E8:57:9F:71:8D:18:83:9B:56:EC:57:8A:C4:BA
Authority key identifier: 16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
Certificate issuer: /CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Certificate serial: 019CAA21C3C60460DB7218583E147BB3B50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
Manifest number: 17D3
Signing time: Sun 01 Mar 2026 16:01:05 +0000
Manifest this update: Sun 01 Mar 2026 16:01:05 +0000
Manifest next update: Mon 02 Mar 2026 16:01:05 +0000
Files and hashes: 1: Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl (hash: BD1qchOcxU4OOWRwPnE/9IUjeUsutFRZyAWh4yUX0EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:c3:c6:04:60:db:72:18:58:3e:14:7b:b3:b5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Validity
Not Before: Mar 1 16:01:05 2026 GMT
Not After : Mar 2 16:01:05 2026 GMT
Subject: CN=901c1655a5a4e8579f718d18839b56ec578ac4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ae:9e:9d:53:cb:4f:37:36:d5:f5:10:c4:d9:
c4:70:96:8f:85:bb:b9:52:2e:96:bc:a9:9f:c4:26:
1b:25:4b:7e:20:c6:66:36:3c:5f:0d:a8:93:fe:56:
1a:ad:ba:8f:4f:94:32:e9:c9:27:9c:b8:36:72:e9:
ef:b4:a0:69:93:a5:64:27:0a:77:61:50:29:bd:0b:
72:cf:f9:53:11:ea:73:1c:eb:42:4d:5b:ee:a9:b4:
23:a0:6f:c1:cc:d9:63:12:53:40:4b:c3:d4:55:9e:
41:12:9a:71:a4:17:8f:1a:98:e3:46:d9:17:9c:68:
3d:0a:d1:57:81:99:32:c0:9e:34:b8:b1:fc:e6:13:
e3:30:a1:5e:d9:07:f4:8a:f8:bc:4b:dc:45:d1:30:
fc:55:78:10:39:15:05:d8:78:a6:ff:de:1b:5b:35:
14:43:f9:a2:ec:00:14:b8:45:c5:34:c4:9d:31:ce:
70:08:11:f0:59:04:a1:c8:25:fa:8c:dd:22:2d:53:
35:27:73:4b:ac:2f:7c:58:de:90:ca:a4:96:90:c4:
e3:20:6a:83:7f:2a:f4:85:fc:9c:42:aa:f2:89:8f:
41:13:9a:7c:4f:be:1b:57:f9:87:85:89:26:58:c1:
2d:d5:fa:98:d4:65:e6:c6:6c:71:5d:55:35:fa:b9:
ca:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:1C:16:55:A5:A4:E8:57:9F:71:8D:18:83:9B:56:EC:57:8A:C4:BA
X509v3 Authority Key Identifier:
keyid:16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:d5:cb:b3:d5:41:29:33:af:23:0d:97:2c:d9:05:63:f7:ed:
f8:20:ff:c7:a5:2d:c9:21:68:3b:9b:d7:60:a9:02:5d:eb:44:
f9:66:1a:d5:aa:59:1f:c7:68:58:d4:77:d5:fa:0e:29:ad:ae:
04:b0:11:f4:48:69:53:15:e1:55:da:a4:93:3f:02:ff:c2:4b:
d7:ce:ba:a8:fa:1c:cb:5f:f3:6c:c0:cc:38:f7:64:ce:9b:b9:
68:4f:0a:77:32:6a:73:bd:02:49:35:2a:e2:eb:44:04:99:06:
fd:50:4e:34:f7:93:d6:74:2d:06:52:fa:eb:d0:da:a9:5a:af:
1a:6f:20:e8:4d:b7:24:c5:70:68:d2:05:e6:aa:26:57:6f:90:
16:79:97:71:8a:d9:2c:b9:b7:4f:19:fb:2e:75:ab:9b:13:e4:
8c:5e:c2:5c:76:7a:a3:78:42:a1:cf:52:cf:28:62:dc:fb:e2:
14:df:71:a7:8d:9f:cd:76:05:a2:ef:47:3f:62:83:09:03:ef:
86:15:b8:62:02:58:11:ba:42:c1:1a:fc:25:15:5f:62:c1:71:
e2:01:bf:b2:81:02:4e:87:3c:c3:17:3c:a7:8b:da:50:bc:53:
b4:9b:8b:46:ce:63:ec:fb:e9:44:64:15:9f:2d:2c:b6:1f:cb:
5e:9f:28:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:39:45 2026 by rpki-client