Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier: 9+/rwOPtEsC7upjwR9mjZjSCGkfG027LYy1MINwNv5I=
Subject key identifier: 33:82:4C:E7:F9:0A:C0:4E:62:9F:D0:13:8C:52:AD:4C:68:CA:BE:F1
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial: 019EBEED6551C5072FDE119E26B070B0B32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number: 1958
Signing time: Sat 13 Jun 2026 03:01:29 +0000
Manifest this update: Sat 13 Jun 2026 03:01:29 +0000
Manifest next update: Sun 14 Jun 2026 03:01:29 +0000
Files and hashes: 1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: 1LuXbS6MaB8vyDNK+zacNjyFBxhSSoNp2RL0d327j6Y=)
2: 3vC4pYqybSvnyiv9AWSFuid8GOw.roa (hash: v8QGywV5eLuGaT2Uqfo+veGfvP9FzA92hTs+zKxoZtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:ed:65:51:c5:07:2f:de:11:9e:26:b0:70:b0:b3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
Validity
Not Before: Jun 13 03:01:29 2026 GMT
Not After : Jun 14 03:01:29 2026 GMT
Subject: CN=33824ce7f90ac04e629fd0138c52ad4c68cabef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ca:db:e7:fd:d1:5f:f0:42:f3:19:09:4e:77:
6f:c4:14:1d:7a:7f:52:50:d3:53:4b:ab:3d:ec:2f:
6e:1b:f9:a9:01:d5:ac:bb:f0:88:5a:03:d7:11:03:
16:8b:85:59:97:c9:1c:22:bb:f6:55:e9:0c:83:6e:
fe:08:d6:f9:04:aa:03:1a:66:6f:d6:55:6b:89:80:
1a:22:40:e6:64:25:72:14:ef:ab:44:f5:1a:80:a2:
b5:86:e7:c5:dd:da:ca:fb:d2:1d:34:27:5c:09:e8:
fa:5a:d0:51:e6:1d:9a:a3:75:ea:1b:2f:75:79:2a:
0f:83:d8:00:7a:e0:f6:18:b9:d1:55:d2:9d:58:f6:
0e:3f:b2:ef:1f:a2:42:8a:c4:5e:09:dc:c7:18:4a:
2d:2d:d0:28:92:48:ef:4d:5a:25:46:7f:3b:ad:d9:
6b:d0:c2:b1:3d:b9:18:72:b8:f4:f8:6b:8a:b8:7b:
09:a8:9a:d3:38:a3:7a:6b:df:e0:c1:9d:56:07:74:
5d:c7:85:b2:a5:88:37:86:e6:02:65:94:21:f2:ab:
45:57:98:85:31:2d:83:3f:f5:45:6d:f4:ce:88:49:
fd:3a:f3:f7:d8:80:3e:65:25:5f:77:c6:c1:01:94:
b9:87:ca:c6:0f:94:0f:6e:a6:0b:b1:18:df:41:bc:
b1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:82:4C:E7:F9:0A:C0:4E:62:9F:D0:13:8C:52:AD:4C:68:CA:BE:F1
X509v3 Authority Key Identifier:
keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:f0:0c:b7:25:86:79:ce:46:e9:d3:b9:9b:10:ac:34:2b:c5:
f5:51:88:b9:dc:39:90:d8:43:20:6b:e4:79:1f:3b:a5:7c:67:
54:87:9d:28:be:d1:d0:d8:30:fe:43:8f:ef:6c:0b:96:fc:42:
34:dc:88:4c:29:68:9d:ca:b9:df:fe:23:55:33:aa:ee:91:43:
30:8b:e2:f7:c1:0a:79:d7:e0:bb:2b:d7:86:b0:57:97:ff:17:
f0:ff:ca:01:33:af:dc:68:09:69:35:14:95:77:ca:ad:ea:e8:
e4:fd:b3:34:b4:e4:10:23:a5:d0:cb:87:f8:6e:e6:8c:c7:fe:
cd:1f:94:d9:68:f9:0b:07:7e:5b:f8:4d:30:c9:6f:58:c5:2b:
43:77:60:7d:37:f8:f9:2d:8d:e7:a6:51:1f:01:36:8b:8d:70:
3e:cb:dc:70:92:a5:c9:c5:7f:48:2e:1a:ab:ac:24:c3:37:5b:
94:28:c7:b3:e9:7f:b0:28:e3:20:61:ea:2f:5c:b7:8f:a1:0c:
a7:2e:87:f0:5b:af:e5:b1:7c:33:ed:cd:ad:54:b7:03:f2:37:
7e:03:bf:ce:48:ae:23:d3:8f:42:19:de:69:5f:a4:21:f8:cf:
8f:3f:ac:c2:d8:53:4a:08:98:8f:87:44:0c:fd:88:44:6b:ee:
2d:d0:4f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:21:23 2026 by rpki-client