Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
File: FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft (raw, json)
Hash identifier: JbgEsbkgWNviTqHzcbMC+pvDy2TZlpj/or1wRDai3HI=
Subject key identifier: CA:9A:AF:55:41:7D:5E:07:8B:04:61:19:4E:9A:A2:5C:62:B0:A7:A5
Authority key identifier: 15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
Certificate issuer: /CN=15013024552942ceaf68c67e0128dff4b9ef749c
Certificate serial: 019CAAFD1037B5770BC79FE44B05AAF4D1F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
Manifest number: 0B15
Signing time: Sun 01 Mar 2026 20:00:36 +0000
Manifest this update: Sun 01 Mar 2026 20:00:36 +0000
Manifest next update: Mon 02 Mar 2026 20:00:36 +0000
Files and hashes: 1: FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl (hash: tBGKr8qQA0JkbwILleGzSfpkP8Xd6PyGGfRzi+tsjH4=)
2: dK5xl69D2qaQ1GI8cpwqmA8ljfo.roa (hash: TibVb3pro9xYgz32FM9o4Gl6dJankSy+fx99rC3V6b8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 20:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:10:37:b5:77:0b:c7:9f:e4:4b:05:aa:f4:d1:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15013024552942ceaf68c67e0128dff4b9ef749c
Validity
Not Before: Mar 1 20:00:36 2026 GMT
Not After : Mar 2 20:00:36 2026 GMT
Subject: CN=ca9aaf55417d5e078b0461194e9aa25c62b0a7a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:11:9c:f9:0e:5c:59:39:96:0d:2b:f4:3c:50:
02:96:6d:bb:0d:1b:7d:d6:f6:4f:68:c8:3b:62:ca:
62:06:01:ff:11:2b:cd:37:db:4d:cd:f0:70:0d:a7:
41:c1:2e:fa:13:79:37:1e:f0:6f:30:b6:22:1c:dc:
14:6f:5b:b6:03:d1:61:8f:9f:b8:5b:8a:82:25:48:
ff:15:e9:6a:29:a0:36:12:8d:a5:4e:8d:2a:02:cc:
7a:1a:80:22:b8:eb:2a:75:4e:0a:55:af:89:f0:b3:
92:bf:76:db:6b:54:3a:24:80:3d:ed:85:51:11:47:
c0:6f:7f:8c:f7:67:d8:26:43:ac:ac:48:ed:20:3b:
31:18:6a:f8:43:8a:28:73:ba:b8:f3:90:c3:62:d6:
13:4e:68:3a:b6:70:4c:57:4e:2e:7e:44:0b:88:89:
c6:24:69:f0:79:ea:7a:61:2b:66:e0:8a:03:c6:f8:
52:5d:c7:e7:45:eb:dc:38:25:da:fd:d1:58:51:9b:
0f:53:40:9f:08:79:aa:26:44:9a:33:6d:ef:9e:ac:
3d:64:6b:b3:3e:c5:1d:85:f5:31:b2:16:0a:e7:1b:
99:af:fb:06:3e:00:fd:02:90:d1:00:3f:cf:bd:a9:
db:db:00:3c:40:d9:f0:6d:ab:57:46:d0:e6:b1:f3:
4d:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9A:AF:55:41:7D:5E:07:8B:04:61:19:4E:9A:A2:5C:62:B0:A7:A5
X509v3 Authority Key Identifier:
keyid:15:01:30:24:55:29:42:CE:AF:68:C6:7E:01:28:DF:F4:B9:EF:74:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/65852b-fa7e-4ad7-b3eb-70fc4b08f00b/1/FQEwJFUpQs6vaMZ-ASjf9LnvdJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:02:1f:b0:1f:8f:a7:6f:ea:66:52:df:39:b4:b4:b7:a1:49:
82:4f:d2:8e:19:7b:35:54:9f:f2:4f:71:c9:e5:bf:db:57:29:
ba:3f:2d:83:b3:cf:98:0a:04:c2:12:b0:73:e4:1f:ac:38:fa:
ec:f1:ba:54:ea:88:18:61:5c:fa:3e:23:25:ce:88:34:f6:9f:
fa:85:a9:8a:d9:19:65:b8:50:41:93:2a:b4:31:a8:f6:91:74:
f9:23:f1:e2:5e:11:7d:35:7b:e5:12:17:f9:bd:99:18:f5:a8:
e2:d9:c0:0c:01:ad:cf:a1:7f:e2:c5:32:e0:31:ba:e3:55:13:
17:01:64:92:6b:bd:6c:0e:56:d8:eb:3a:97:13:87:0c:91:70:
e1:df:3d:9a:4a:c4:0d:74:af:39:d0:42:71:85:0a:3f:39:a6:
04:86:60:a3:6d:fa:15:d0:8d:2f:11:f2:9a:4c:df:81:2d:0f:
0d:1b:0a:97:e2:b2:74:d2:e9:b3:fb:8a:9a:1e:07:a4:00:ad:
ae:47:e0:88:a9:f3:f6:09:56:65:6f:71:47:de:ae:e8:c5:18:
f3:c3:fb:0f:fd:13:88:1b:bb:3b:a3:64:3f:1d:39:79:20:4a:
5b:9b:ea:6a:b7:e6:f8:be:e1:f7:8a:f7:c0:49:8e:d4:87:bc:
ed:20:5f:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:11 2026 by rpki-client