Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier: ky2aYky6OgdTnm1upxXKaOIO67QXmpfroSj4gZXvLgE=
Subject key identifier: B0:D5:0C:8B:B8:9B:DE:24:CC:48:AF:B3:B9:CE:79:62:05:5D:BF:E8
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial: 01A0C9A2029DF0899F75CD4AABB112B4241C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number: 1596
Signing time: Tue 22 Sep 2026 15:00:32 +0000
Manifest this update: Tue 22 Sep 2026 15:00:32 +0000
Manifest next update: Wed 23 Sep 2026 15:00:32 +0000
Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: FqgVlzNlVxchI/jTse1cN412LGJsZbgdw8YmZJCvoGo=)
2: Sg5TLd0LRzU1Kyw2aXOACqsG4yA.roa (hash: 4vlEE5O6rdTk7GzU24AHkksV5knXEZvyv5QSu+1PBWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:02:9d:f0:89:9f:75:cd:4a:ab:b1:12:b4:24:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Validity
Not Before: Sep 22 15:00:32 2026 GMT
Not After : Sep 23 15:00:32 2026 GMT
Subject: CN=b0d50c8bb89bde24cc48afb3b9ce7962055dbfe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:28:a9:b4:b6:67:8d:78:67:b9:d1:80:8d:1c:
2b:96:8b:bb:a1:49:ec:f8:7e:de:ba:1d:f7:f0:9c:
cf:0c:26:cf:94:86:de:a9:18:af:cc:60:0c:45:83:
2d:34:5c:d2:fb:90:34:30:6f:7e:b3:09:df:67:b7:
de:8b:e5:c3:c8:ec:16:50:1c:d1:98:c5:77:d9:0e:
ca:74:f6:58:38:4c:f8:ab:96:57:c9:82:e8:80:a6:
f2:ae:d2:f8:b6:88:56:89:75:5e:b1:ce:2f:b6:23:
6a:ea:06:56:b9:db:81:c3:ab:53:d1:e8:58:3d:90:
de:2f:a5:84:df:86:ff:ff:26:ad:bf:46:56:43:1e:
73:c5:14:54:9f:e2:29:a7:29:50:10:b7:86:ad:6f:
ee:6c:13:fa:3b:52:46:ad:c1:bc:a9:7a:25:4d:7a:
f7:cb:84:06:5b:35:0e:13:68:08:8c:d1:41:b3:3c:
0b:e1:ce:40:11:51:a6:3a:13:04:49:a1:e4:ef:fd:
a3:97:91:7b:7d:cd:82:0d:b4:68:88:e2:8b:a9:df:
7c:4b:07:b2:8d:2b:24:76:d4:28:f5:84:50:7c:8f:
e2:5b:78:12:0b:b1:87:7d:4a:15:16:28:a7:45:fe:
a0:19:17:e2:6c:3e:1a:8d:a2:77:59:cb:40:ff:3b:
0a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D5:0C:8B:B8:9B:DE:24:CC:48:AF:B3:B9:CE:79:62:05:5D:BF:E8
X509v3 Authority Key Identifier:
keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:92:73:61:1f:21:9e:db:81:d9:dc:39:25:f8:3f:c8:c5:6a:
c4:e2:6c:16:52:1f:ea:16:bc:79:ce:85:4a:8a:85:70:c7:23:
be:04:7f:cc:b0:c3:6a:16:ba:88:27:0b:33:19:a4:5c:ff:ff:
42:f6:2f:2a:d0:0b:85:6c:96:dd:7a:31:ec:28:a6:72:0e:15:
08:09:e2:26:f1:30:4a:dd:66:e4:a9:f2:38:49:16:24:9a:8a:
e2:54:45:a4:cb:77:f7:5c:62:00:50:d5:e5:98:74:69:f2:5c:
29:c9:fc:48:7a:65:0c:5a:8d:5b:f6:46:1c:2c:42:e8:8c:bb:
49:c3:e1:83:8a:cf:31:62:21:a3:fb:77:26:db:47:65:b2:a1:
51:ca:5d:b3:a1:ad:53:af:88:0d:e3:f9:45:5e:00:b7:0d:78:
37:ab:b4:d4:59:6c:a3:9b:65:bc:d0:72:22:17:d1:08:8d:ec:
3b:3c:f9:69:15:fd:af:e9:19:88:44:12:aa:ef:9b:6e:24:77:
3e:52:00:9c:5d:f5:b9:d4:56:cc:e4:1e:d8:6f:3a:db:4f:b5:
fb:27:a3:b8:cc:b9:b5:57:dd:bb:a6:03:58:81:c1:d2:4f:34:
c9:42:0f:e3:24:ff:96:7c:21:a2:ee:85:5c:44:79:e2:73:16:
7c:15:46:39
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDJogKd8Imfdc1Kq7EStCQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTVhYzVkMjJhZDkwNzhhNzJlMTM2OTk2Mjg3MjQ3ZTlm
MWUxMzEwHhcNMjYwOTIyMTUwMDMyWhcNMjYwOTIzMTUwMDMyWjAzMTEwLwYDVQQD
EyhiMGQ1MGM4YmI4OWJkZTI0Y2M0OGFmYjNiOWNlNzk2MjA1NWRiZmU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSiptLZnjXhnudGAjRwrlou7oUns
+H7euh338JzPDCbPlIbeqRivzGAMRYMtNFzS+5A0MG9+swnfZ7fei+XDyOwWUBzR
mMV32Q7KdPZYOEz4q5ZXyYLogKbyrtL4tohWiXVesc4vtiNq6gZWuduBw6tT0ehY
PZDeL6WE34b//yatv0ZWQx5zxRRUn+IppylQELeGrW/ubBP6O1JGrcG8qXolTXr3
y4QGWzUOE2gIjNFBszwL4c5AEVGmOhMESaHk7/2jl5F7fc2CDbRoiOKLqd98Swey
jSskdtQo9YRQfI/iW3gSC7GHfUoVFiinRf6gGRfibD4ajaJ3WctA/zsKpwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLDVDIu4m94kzEivs7nOeWIFXb/oMB8GA1UdIwQY
MBaAFPqlrF0irZB4py4TaZYockfp8eExMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xV3NYU0t0a0hpbkxoTnBsaWh5Ui1ueDRURS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvYjU1YzA0LTZkNGEtNDk0OS1hYWE4
LTZlZTFhNzAwYjIxOS8xLzEtcVdzWFNLdGtIaW5MaE5wbGloeVItbng0VEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y5L2I1NWMwNC02ZDRhLTQ5NDktYWFhOC02ZWUxYTcwMGIy
MTkvMS8xLXFXc1hTS3RrSGluTGhOcGxpaHlSLW54NFRFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpJz
YR8hntuB2dw5Jfg/yMVqxOJsFlIf6ha8ec6FSoqFcMcjvgR/zLDDaha6iCcLMxmk
XP//QvYvKtALhWyW3Xox7Cimcg4VCAniJvEwSt1m5KnyOEkWJJqK4lRFpMt391xi
AFDV5Zh0afJcKcn8SHplDFqNW/ZGHCxC6Iy7ScPhg4rPMWIho/t3JttHZbKhUcpd
s6GtU6+IDeP5RV4Atw14N6u01Flso5tlvNByIhfRCI3sOzz5aRX9r+kZiEQSqu+b
biR3PlIAnF31udRWzOQe2G8620+1+yejuMy5tVfdu6YDWIHB0k80yUIP4yT/lnwh
ou6FXER54nMWfBVGOQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:12:13 2026 by rpki-client