Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
File: 1-0q-E5QqvkIPINwUn9xX30BFwUM.mft (raw, json)
Hash identifier: /A8NStWfkP0Ntx4xRvL6xuaTrC5NB/oibi15fHaQqkA=
Subject key identifier: 53:02:F7:CF:09:5B:E7:87:24:0B:2D:C8:29:8B:E5:D8:AE:DE:79:27
Authority key identifier: FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
Certificate issuer: /CN=fb4abe13942abe420f20dc149fdc57df4045c143
Certificate serial: 019D99D03D91C23E2F2E726036E9CDB2B952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
Manifest number: 0CD1
Signing time: Fri 17 Apr 2026 05:00:54 +0000
Manifest this update: Fri 17 Apr 2026 05:00:54 +0000
Manifest next update: Sat 18 Apr 2026 05:00:54 +0000
Files and hashes: 1: 1-0q-E5QqvkIPINwUn9xX30BFwUM.crl (hash: Gs9yxzOfm6TMv2ulVZPvOQkWpESdYPqtxN7hcGCnc5Y=)
2: 93B0q9sUDm_tucnqwBBNRLq_pWU.roa (hash: 4wuwNz85hZ86Sjb+JuYPSBd2gyBY0cEe83Z/wQGs38A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:3d:91:c2:3e:2f:2e:72:60:36:e9:cd:b2:b9:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb4abe13942abe420f20dc149fdc57df4045c143
Validity
Not Before: Apr 17 05:00:54 2026 GMT
Not After : Apr 18 05:00:54 2026 GMT
Subject: CN=5302f7cf095be787240b2dc8298be5d8aede7927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:e1:90:a9:65:7c:19:28:c7:d4:f0:15:23:
dd:83:74:01:8e:9f:be:a5:b5:29:cd:de:34:24:c1:
b2:67:43:d4:55:d2:98:82:b5:a7:a7:52:92:8f:ee:
02:05:82:ee:13:b7:1a:ff:70:2e:d8:25:51:1d:7d:
46:19:0e:5f:e7:4f:3c:cb:b8:e3:a3:03:5e:b4:94:
89:25:6b:8f:8d:71:99:ab:30:da:2c:f2:d9:6d:f5:
6e:1e:3e:9b:17:89:fc:45:fc:3b:01:1b:40:ef:6a:
05:b8:0c:23:ee:aa:66:9b:49:d2:5a:88:17:61:cc:
9e:da:f1:20:57:46:c2:39:1a:b0:2a:9f:4c:5e:ce:
00:c6:12:6d:3d:70:e8:c0:fd:db:8f:07:45:8f:d4:
17:f0:4f:00:91:8c:95:5b:c1:10:32:26:e3:15:0c:
88:93:11:92:a8:0c:56:91:2e:62:40:39:96:ae:a8:
ad:c7:82:65:95:68:9d:87:f4:44:e1:37:64:a8:e7:
2b:ad:89:d6:1e:dd:9c:ce:eb:32:49:23:92:3e:67:
7b:5a:f1:56:a1:56:ce:7f:0d:34:d6:05:72:e3:55:
69:22:0f:95:2f:7f:9b:af:38:07:bd:c6:35:3e:3b:
bf:bf:3e:ab:b8:bb:6c:61:51:fc:05:3d:bf:91:e8:
db:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:02:F7:CF:09:5B:E7:87:24:0B:2D:C8:29:8B:E5:D8:AE:DE:79:27
X509v3 Authority Key Identifier:
keyid:FB:4A:BE:13:94:2A:BE:42:0F:20:DC:14:9F:DC:57:DF:40:45:C1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-0q-E5QqvkIPINwUn9xX30BFwUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/dee68d-aacd-4673-ba42-9911e510a8a9/1/1-0q-E5QqvkIPINwUn9xX30BFwUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:6f:5c:5a:71:d6:f3:02:8e:f4:f0:b3:d3:f5:67:c6:95:0b:
d1:fc:2f:a3:74:eb:64:75:73:be:e7:6e:59:e1:c3:ce:1c:9d:
a1:99:3f:d6:69:df:a9:f0:06:ba:94:80:91:86:50:a9:f3:42:
83:e5:bf:3c:23:74:71:6f:da:b8:f2:67:bb:19:7d:98:c1:06:
be:91:9b:d7:92:88:18:e0:ca:43:de:51:d1:ec:e4:67:e8:45:
04:49:ae:3f:b1:1e:f2:72:1d:4f:df:62:77:f8:16:e2:09:37:
54:e9:4f:41:1e:56:f8:ca:11:a3:61:c0:ac:e5:13:01:57:48:
17:16:fd:60:a9:03:c6:09:07:da:4e:c3:4d:8d:47:3f:d6:17:
e4:2c:57:d5:fa:34:f5:1e:0f:ec:b1:c0:93:11:25:f5:f3:65:
5c:5d:6b:3f:19:ed:a7:d2:67:10:4e:eb:83:5b:58:50:e8:30:
ad:e1:a6:55:d2:97:4a:26:c4:4e:85:34:c7:ea:08:ff:73:49:
a1:44:90:98:96:77:2b:ff:c4:9f:72:ad:bd:db:7a:44:6f:9d:
f6:38:a5:59:57:ca:fe:61:b3:fe:42:36:9d:0b:25:a8:6c:2c:
16:d4:a5:b5:6c:c0:07:f8:4b:76:36:44:f9:f9:a6:ed:37:e9:
f1:80:8c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:16 2026 by rpki-client