Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier: pQRbteq/Tn3S8HyWwdiKAyc+oOdhnTfg7m3iDE5D2nE=
Subject key identifier: 34:D4:30:95:82:AB:AF:3E:13:22:97:94:1C:4B:87:B9:71:FC:B9:91
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial: 019CABD91152996F74AC1563227134A8CD51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 00:00:55 +0000
Manifest this update: Mon 02 Mar 2026 00:00:55 +0000
Manifest next update: Tue 03 Mar 2026 00:00:55 +0000
Files and hashes: 1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: juUX1dtdmfTJ1YQ1HGLT1kl3oFstgK/rNb8OmTgo0Xw=)
2: 3vC4pYqybSvnyiv9AWSFuid8GOw.roa (hash: v8QGywV5eLuGaT2Uqfo+veGfvP9FzA92hTs+zKxoZtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:11:52:99:6f:74:ac:15:63:22:71:34:a8:cd:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
Validity
Not Before: Mar 2 00:00:55 2026 GMT
Not After : Mar 3 00:00:55 2026 GMT
Subject: CN=34d4309582abaf3e132297941c4b87b971fcb991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:af:5d:0e:d8:31:4e:b7:4b:19:51:b4:62:
95:ea:3e:5e:fa:b2:5e:a9:dc:cf:a7:b3:e5:ae:ab:
ba:99:3e:5b:a0:ac:45:f2:2d:7c:7e:4b:69:e5:0a:
4e:e8:f4:81:0b:94:f6:a0:7c:42:96:d7:cb:f6:37:
da:15:05:d0:b5:31:82:63:03:6b:13:1c:e8:9c:ab:
d9:46:dc:63:a3:2b:fb:09:7b:a5:20:4f:c9:76:e7:
10:0c:84:f3:c7:9b:f7:8a:1c:77:e0:63:cb:89:1e:
c8:52:81:60:64:64:89:2c:c1:e8:87:00:2a:2d:2a:
95:65:e8:14:b3:b9:1b:87:78:0c:7a:9c:65:13:44:
bb:32:45:80:e7:a9:79:dc:21:80:6e:61:85:cb:c4:
b0:08:e4:f0:53:67:cc:ab:fc:a1:d9:32:0a:33:5c:
fb:ce:3d:98:bd:dc:9e:11:bb:ba:21:98:9b:46:2a:
84:44:6b:cd:4b:8e:1b:17:32:44:8f:4a:3d:9e:51:
2d:a3:1a:30:1f:92:b4:5f:67:64:52:ab:17:5e:b6:
8a:8e:e1:bb:d9:17:92:ee:60:54:80:c0:3e:bc:8e:
29:a7:36:f0:9e:61:43:70:41:25:ce:24:7d:ef:16:
7e:52:19:79:04:aa:bb:65:e2:53:e4:8a:97:e4:8d:
9d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:D4:30:95:82:AB:AF:3E:13:22:97:94:1C:4B:87:B9:71:FC:B9:91
X509v3 Authority Key Identifier:
keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:a3:8c:e5:71:98:14:08:ac:ca:81:f3:db:f2:90:93:f6:9a:
61:fa:5f:65:6a:1c:95:74:7a:79:e3:4a:23:81:cb:27:66:c0:
38:9b:61:0d:71:6f:dc:e8:11:69:e5:b4:cd:49:55:06:fb:1a:
f4:ab:c6:f1:41:9f:c0:9a:d6:0d:23:89:b2:ab:cb:74:65:d1:
86:15:0f:5f:a9:58:17:cb:d8:d1:28:5d:d4:fc:e0:2b:23:f3:
50:82:cd:d9:3b:4e:a0:c1:a1:a3:56:b1:5b:df:4f:7e:d3:2a:
c4:50:36:4c:f8:5a:9d:b9:b6:f8:4a:6d:f4:2c:44:47:58:b2:
f8:62:29:74:3b:52:d0:93:d6:eb:ad:29:1a:df:b3:d5:05:85:
97:d2:d2:51:fb:f7:db:15:a4:b7:05:80:cf:1d:63:44:e0:0e:
c1:cc:eb:d1:29:bf:cf:5f:23:47:b5:6a:31:d6:8c:1f:6d:7d:
15:ef:00:53:31:f8:0a:b2:fe:03:fc:3d:7d:92:de:22:42:f6:
4a:6b:02:0e:d0:37:55:3d:95:95:ff:7c:9e:4b:82:0b:3d:20:
d9:82:9c:ca:b1:f3:a3:61:a5:86:d5:81:f1:bc:09:f1:4c:9b:
f0:8c:db:f4:5f:b1:a5:05:a4:f6:ac:89:4e:cd:e2:5d:a2:5a:
af:ed:10:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:55:57 2026 by rpki-client