Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier: 8LIT+QwkgLP+1dhhLOO1hmiiMvLOpbmteF3nlUDDJyM=
Subject key identifier: 16:D9:3D:89:96:49:4B:9A:FB:B1:C2:92:94:1A:CA:6E:DB:BA:D5:A1
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial: 019FA89A1873FE3FAC2EFCEC57E59B9F322A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number: 19D1
Signing time: Tue 28 Jul 2026 12:01:38 +0000
Manifest this update: Tue 28 Jul 2026 12:01:38 +0000
Manifest next update: Wed 29 Jul 2026 12:01:38 +0000
Files and hashes: 1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: Aq11GATrAF1RjO7tFzOSqFo0aRmlg5iTNrZaHh//0rE=)
2: 3vC4pYqybSvnyiv9AWSFuid8GOw.roa (hash: v8QGywV5eLuGaT2Uqfo+veGfvP9FzA92hTs+zKxoZtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:18:73:fe:3f:ac:2e:fc:ec:57:e5:9b:9f:32:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
Validity
Not Before: Jul 28 12:01:38 2026 GMT
Not After : Jul 29 12:01:38 2026 GMT
Subject: CN=16d93d8996494b9afbb1c292941aca6edbbad5a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5e:92:29:b6:89:73:b9:0e:5d:cf:38:ee:d1:
b2:7e:bc:fb:be:15:e7:34:72:73:da:2f:7a:f7:05:
30:8b:8a:f8:13:9a:e8:5d:0b:b4:df:2b:5f:02:58:
ea:bf:79:0a:b1:9a:92:42:21:84:5a:be:19:b5:6b:
cb:9a:82:5d:2e:32:ce:32:fc:cd:f3:f6:9f:9f:cb:
3d:61:73:a7:92:e4:38:de:e6:01:f4:d2:15:8f:4d:
9a:15:45:a7:61:ad:6a:84:9c:01:e6:14:a0:36:90:
be:35:c4:cf:69:3d:5b:88:0d:d2:2c:8c:09:35:cd:
1d:44:58:fa:76:e2:2f:2d:e0:c3:c6:8e:af:2e:07:
93:36:68:f8:6c:4a:da:c1:42:0d:c6:7a:a4:b0:17:
5a:86:0f:4b:dc:27:ff:62:fd:ab:2e:23:8a:fa:bf:
d2:24:9a:00:75:6a:a4:f2:2c:1a:a4:77:dc:ab:ea:
fa:11:69:1d:7f:58:cc:52:71:17:f0:3e:82:2e:72:
ef:d4:4a:02:5d:ec:6a:4b:18:e8:c8:18:a2:8c:39:
22:21:50:c5:23:7b:71:eb:25:13:fc:83:e6:e5:05:
32:0f:47:98:17:c7:f1:7a:bd:ae:b9:bf:5c:e4:f9:
17:b7:b9:9d:ba:0b:b9:5d:2e:39:c1:fd:69:7b:67:
64:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D9:3D:89:96:49:4B:9A:FB:B1:C2:92:94:1A:CA:6E:DB:BA:D5:A1
X509v3 Authority Key Identifier:
keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:06:db:3b:41:7a:66:48:d0:4b:41:e7:4c:1d:ca:fb:58:8d:
12:ca:2a:6c:33:1d:27:b4:bc:c4:50:0d:03:ff:ff:0b:a0:04:
3d:3d:88:70:59:49:ab:c4:c6:5c:37:10:44:61:0b:fc:48:9d:
11:2b:03:07:b9:b4:b2:04:3b:23:06:91:da:09:34:87:e9:40:
c3:db:28:9a:3e:b9:77:ae:3d:68:cf:41:3f:93:b2:f3:0a:97:
6a:db:93:72:91:e7:48:95:71:b8:3b:ee:c5:9c:60:21:52:eb:
86:c4:25:b9:89:13:87:89:bd:6a:48:72:2c:04:8a:8e:93:a1:
61:8d:d7:34:2d:d0:c6:7a:d4:9e:17:0b:50:77:d9:6f:72:40:
11:e1:96:dc:4d:2d:5b:c4:03:f3:70:fb:67:24:2e:2d:a1:91:
25:52:ed:b1:93:9c:07:60:81:10:0c:7c:93:3e:42:f5:18:1a:
1f:db:93:54:2b:c9:04:68:05:16:9a:5f:1a:00:20:52:dc:f1:
91:0e:d7:48:91:59:49:78:40:df:76:7a:ad:fe:cf:06:10:4c:
48:6a:df:24:da:d5:81:d7:95:d8:9a:c1:57:57:fb:3f:cd:e3:
59:43:45:06:ea:40:a4:84:48:58:63:80:b5:e2:e4:be:9a:44:
31:11:db:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 18:33:00 2026 by rpki-client