Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier: N1xOBCFMGUXW6kJGQ2gfjtrt2ABAkuyFSxKVhlyoGTA=
Subject key identifier: 7F:6C:64:90:C3:1C:24:A0:4A:08:72:D0:AB:40:EB:40:05:0F:6A:FA
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 019D984FEFFFA2773DE0366C50E21354ADC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number: 04C1
Signing time: Thu 16 Apr 2026 22:01:08 +0000
Manifest this update: Thu 16 Apr 2026 22:01:08 +0000
Manifest next update: Fri 17 Apr 2026 22:01:08 +0000
Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: k7sPHPQGc1D9ZjZwpFk9b6Hvs7t9YIu0CxIvAis3vKQ=)
2: I_i8axcztRmQYBKxo7LufShIxc0.roa (hash: 2/unXqyBT639RbP4a6kb5aLTC3tSiKOPrQbrbpRMwdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:ef:ff:a2:77:3d:e0:36:6c:50:e2:13:54:ad:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Apr 16 22:01:08 2026 GMT
Not After : Apr 17 22:01:08 2026 GMT
Subject: CN=7f6c6490c31c24a04a0872d0ab40eb40050f6afa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b9:71:5d:d7:b9:d2:e7:bc:54:df:c8:5e:35:
b2:12:90:3d:ca:53:fb:79:b6:c6:3f:f0:9a:c7:e1:
5b:5a:ad:76:b7:74:60:8d:a8:b7:ab:65:45:46:f1:
a6:9f:32:97:c2:ca:5d:b5:fd:ea:50:83:64:33:8f:
4a:cf:02:44:35:c3:f0:5e:a4:be:04:09:67:64:26:
d7:cc:b6:9d:41:f2:5a:d9:66:f7:1b:4f:70:c2:07:
31:a5:5f:e1:c9:d3:4a:c8:d3:cb:e7:a7:99:df:a6:
80:32:00:05:bd:54:f2:46:27:73:05:07:75:c0:fa:
d1:c4:7e:ff:a2:5b:7c:77:42:21:aa:a3:a6:d8:38:
43:14:34:87:75:38:d0:22:71:9e:d6:78:e8:98:3d:
2d:83:74:94:12:1a:e1:44:66:b5:84:0a:69:dc:3e:
63:51:8a:7f:c1:b8:6d:80:0b:a6:2a:be:c9:c3:d9:
50:e1:a1:89:25:8e:30:d2:3f:ef:eb:c2:76:0d:db:
c8:5e:0a:ef:c7:de:09:e2:f1:9f:9d:1d:22:6f:77:
e9:1b:49:e9:91:d9:13:84:92:9d:e9:d0:48:8e:b3:
11:c0:3d:23:e4:d2:c5:0b:4b:26:24:ea:df:8f:6a:
ac:e8:ee:de:7a:d2:6f:48:28:ee:08:49:a2:c7:09:
2b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6C:64:90:C3:1C:24:A0:4A:08:72:D0:AB:40:EB:40:05:0F:6A:FA
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:41:dd:51:c5:56:33:3a:d6:d8:e1:47:9f:ce:f9:63:44:06:
6e:d7:26:fc:cc:e7:47:1e:24:7b:6f:19:47:db:f6:87:59:23:
ca:69:5a:60:b2:bf:15:b1:53:77:9a:64:52:cb:0b:f3:5e:ae:
e9:ac:e6:2d:d7:f1:24:69:f3:80:b8:91:1c:62:93:66:a2:1b:
da:05:56:93:f3:32:6c:74:62:5c:ec:6c:b8:84:80:aa:3e:6c:
0d:5b:6c:6a:26:97:6b:45:e7:e3:cb:32:86:62:eb:97:d3:93:
b8:b1:f5:f8:2b:da:05:61:42:4a:63:5e:fb:a0:ca:95:59:bf:
ef:71:c7:6f:64:b7:65:18:f3:63:bb:4b:d1:ff:c4:02:f1:95:
e5:86:74:40:17:6e:04:3f:b4:a3:8d:eb:a4:6f:45:23:b9:c5:
6c:5f:ce:77:ce:58:ba:a9:8c:6c:99:1c:53:36:8d:66:9f:0d:
c6:32:24:ba:0c:10:10:ab:29:ea:c3:ca:18:07:2d:1f:7f:b5:
78:50:4f:95:43:09:59:1f:81:ed:74:0f:08:10:55:b8:c1:88:
3e:1c:60:cc:a5:58:af:9d:0b:24:5f:21:06:21:47:df:e2:72:
0b:98:3f:dd:dd:62:6e:fc:30:cc:01:64:23:e4:d9:db:57:fe:
b4:22:5f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:33 2026 by rpki-client