Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier: us5/qHSE/aRsGE9QwH2JSofDGx/8umCbUdnJSguKycI=
Subject key identifier: B7:C4:F1:D6:7E:8A:04:19:20:7D:7E:98:FA:40:4D:C8:F5:C6:2A:4B
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial: 01A0C66AACACECADE54A7BE8E9B170E09144
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number: 1A65
Signing time: Tue 22 Sep 2026 00:01:14 +0000
Manifest this update: Tue 22 Sep 2026 00:01:14 +0000
Manifest next update: Wed 23 Sep 2026 00:01:14 +0000
Files and hashes: 1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: KR6fRfYDd0jpBeU03I6vA2EWQudgVxZZsnNNE5+85GY=)
2: 3vC4pYqybSvnyiv9AWSFuid8GOw.roa (hash: v8QGywV5eLuGaT2Uqfo+veGfvP9FzA92hTs+zKxoZtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:6a:ac:ac:ec:ad:e5:4a:7b:e8:e9:b1:70:e0:91:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
Validity
Not Before: Sep 22 00:01:14 2026 GMT
Not After : Sep 23 00:01:14 2026 GMT
Subject: CN=b7c4f1d67e8a0419207d7e98fa404dc8f5c62a4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cc:e3:db:21:d3:aa:56:54:d7:02:d8:dd:9d:
09:d6:02:5e:4d:cb:e1:c4:a4:6c:52:ae:1b:d3:07:
e6:5c:19:e5:c9:22:09:d2:da:d7:fa:05:16:76:39:
0e:65:f8:ef:fc:89:6f:c0:b3:77:22:b1:11:8f:84:
04:f6:d2:b1:0d:36:2e:c3:29:0e:03:f0:86:70:e7:
38:02:c4:7c:85:45:16:74:d8:b8:63:5d:91:67:07:
7e:14:55:b8:e5:38:19:7c:29:a8:74:3c:72:2e:36:
cb:3b:7f:0a:84:45:5c:ce:44:3a:55:7a:0d:79:c4:
a9:c4:02:28:3d:e0:9e:4c:cc:ca:ad:02:1b:de:ce:
fa:a9:a0:5a:5b:04:74:98:cc:0e:56:ed:4c:c1:af:
c7:74:9a:6e:61:bf:94:7f:70:52:56:f2:38:d5:47:
9c:18:95:c3:fd:ad:a5:bf:20:9c:45:a7:6e:1c:28:
8d:27:3a:ef:92:a9:6f:11:03:31:c2:f3:b2:5f:88:
37:ec:9a:39:2f:3a:c5:b2:ad:94:49:fc:a2:62:df:
ec:b7:66:39:5f:19:b5:cc:0a:46:e2:ae:5e:29:4b:
66:63:f2:d2:98:8d:f1:ff:28:db:5a:b5:e9:ca:d2:
46:46:bf:0d:15:09:1d:29:e1:72:df:ff:f3:e3:7f:
62:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C4:F1:D6:7E:8A:04:19:20:7D:7E:98:FA:40:4D:C8:F5:C6:2A:4B
X509v3 Authority Key Identifier:
keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:c3:1d:96:77:66:bb:35:8e:e9:ed:4e:f5:a6:e7:0e:f0:d7:
c1:bc:d4:be:89:60:ce:ec:9b:ca:b7:f8:28:ef:c4:b4:33:ed:
67:1a:46:5a:54:83:22:48:27:76:a1:e6:22:cd:93:b7:e1:f2:
30:b7:1b:37:27:b4:fc:e5:91:a4:10:dd:3e:17:62:cc:e7:7c:
3f:56:64:87:2a:e7:f7:34:b3:27:38:45:e4:7b:09:19:a6:eb:
a0:64:7d:69:1d:08:25:58:c7:d1:07:9a:8b:0d:75:7f:b6:3c:
a9:c1:7d:64:60:b6:12:d6:1d:64:39:a5:68:fb:2d:9a:32:1c:
a0:a9:1d:c6:c7:20:53:02:29:44:95:6b:9a:93:16:b5:df:69:
6a:12:49:6f:6c:be:9b:e8:b6:59:00:fa:a9:78:fb:08:bb:34:
c2:12:e7:f5:12:cc:8a:e8:2d:de:f6:8c:8a:4c:67:21:20:d9:
9d:f6:d7:25:f0:58:eb:74:06:98:1c:5b:e7:e5:f2:e6:7d:dd:
73:80:07:bf:c1:d3:bf:cb:b2:e6:39:36:2d:1d:d6:e7:c2:3b:
89:74:6b:82:b5:d0:33:74:33:54:a6:32:23:94:a4:c8:ee:95:
e4:b1:b8:b6:dd:45:41:25:63:46:01:d3:fe:1c:b8:6b:9d:11:
a4:75:ab:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:04:21 2026 by rpki-client