Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier: zgubbVfOpWfvC4RGNZZkjlRNOgL3/plZ1FWJnOQiZIM=
Subject key identifier: 3B:B3:77:80:EB:F5:EE:78:A0:FB:9E:63:A4:C0:80:76:91:90:68:E2
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial: 019CAD22DEFFE629CE964679EB86B684CE88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number: 1375
Signing time: Mon 02 Mar 2026 06:01:09 +0000
Manifest this update: Mon 02 Mar 2026 06:01:09 +0000
Manifest next update: Tue 03 Mar 2026 06:01:09 +0000
Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: YZXZNWxS82mds0n/KbkjShcTnrRKJDBCbPgBc/vKYWg=)
2: Sg5TLd0LRzU1Kyw2aXOACqsG4yA.roa (hash: 4vlEE5O6rdTk7GzU24AHkksV5knXEZvyv5QSu+1PBWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:de:ff:e6:29:ce:96:46:79:eb:86:b6:84:ce:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Validity
Not Before: Mar 2 06:01:09 2026 GMT
Not After : Mar 3 06:01:09 2026 GMT
Subject: CN=3bb37780ebf5ee78a0fb9e63a4c08076919068e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:30:1f:d4:8f:e5:c4:15:82:9a:ec:fa:a4:e6:
70:25:8c:56:90:2a:65:76:ff:ca:a5:49:3b:ae:1c:
10:b1:85:bc:ac:e4:ba:67:a6:a4:41:69:b3:3c:59:
1d:80:4c:29:e3:68:00:6f:bc:66:66:f5:98:28:83:
db:ed:38:7f:19:0f:4b:52:92:b3:b9:46:d7:7a:df:
8d:2a:f4:78:63:72:a2:fc:6e:6a:60:8d:bc:43:ab:
d1:ac:9d:42:21:a4:8f:a8:f3:57:6f:13:e4:0e:b7:
95:52:25:fc:c8:e3:ab:5d:74:2a:69:9c:18:7e:ae:
ed:10:31:f5:90:bc:11:2c:d7:a4:35:88:24:65:16:
43:03:e4:8c:8e:be:51:33:7d:17:6c:15:b3:70:45:
70:52:60:d8:ec:f0:3f:17:0c:d3:71:f3:4f:5a:4a:
09:17:00:80:28:37:6d:de:25:f1:5f:b3:7e:98:0d:
16:a9:c4:ba:75:48:59:f0:6c:ba:fc:bc:06:f5:70:
c7:9f:6a:9e:81:7d:1c:f0:28:2c:3b:0d:70:eb:e4:
36:8a:d3:1e:56:37:79:14:67:46:64:a9:e4:7f:5f:
61:4c:a6:a9:ad:e2:5c:b1:ed:f7:2c:c1:e9:27:81:
93:ed:28:17:97:7c:97:77:61:90:12:b6:08:fc:7f:
77:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B3:77:80:EB:F5:EE:78:A0:FB:9E:63:A4:C0:80:76:91:90:68:E2
X509v3 Authority Key Identifier:
keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2f:15:96:94:e0:0b:8d:b8:0b:2f:7e:05:bf:05:f6:59:5f:
10:b0:17:48:af:86:4e:6e:d3:3a:c9:ad:ea:b6:c6:a5:33:14:
58:08:31:88:88:b8:64:3e:c4:e8:2e:b6:6b:50:41:80:68:65:
c8:d4:ca:1a:ac:f8:bd:6a:9e:28:68:8b:fb:e7:83:88:6e:cf:
cf:e0:06:62:6d:0e:6b:24:e2:2e:76:31:30:4a:a9:71:d7:cd:
d4:0a:af:bc:c7:5f:4d:70:b4:96:15:7a:aa:67:40:5f:a0:c9:
6f:f9:d0:6b:d0:80:77:70:c7:4e:6e:68:a8:cf:c3:c5:8f:6e:
5e:4f:7a:d9:51:cf:7e:87:34:42:5d:e3:1e:bb:da:cc:a5:09:
d2:6b:93:31:e8:d0:e8:2e:eb:7b:f8:5c:3b:8f:23:95:3a:bc:
21:3b:87:4e:49:22:a7:52:ca:65:1d:7a:c8:8f:7d:98:01:e9:
8c:25:ee:2f:69:6f:49:47:64:94:e4:56:81:da:0e:67:4e:ea:
37:4d:6d:9f:d7:02:07:59:b7:99:89:0f:80:33:e2:34:34:0b:
a4:c5:6e:1d:05:60:a0:cf:0c:29:e5:5b:94:d0:71:13:ad:33:
20:b8:69:3f:cf:56:f4:36:e6:fb:f8:36:32:e3:ef:c9:31:27:
00:0a:62:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:27:45 2026 by rpki-client