Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier: WuYfc/kbCtt9vCxpUm9VUEuAC8e0U/wd/X+pGYzdRz4=
Subject key identifier: 67:B5:68:05:FF:83:9A:60:80:52:0E:8E:D6:12:B7:E0:32:C4:CC:44
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial: 019D98BD1B2410CEF2AF258619FA5370503A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number: 13EF
Signing time: Fri 17 Apr 2026 00:00:23 +0000
Manifest this update: Fri 17 Apr 2026 00:00:23 +0000
Manifest next update: Sat 18 Apr 2026 00:00:23 +0000
Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: P4DQ+QUFj8tvm+9FjSzFbcJfiob6ssHPDws4z7LVQ6o=)
2: Sg5TLd0LRzU1Kyw2aXOACqsG4yA.roa (hash: 4vlEE5O6rdTk7GzU24AHkksV5knXEZvyv5QSu+1PBWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:1b:24:10:ce:f2:af:25:86:19:fa:53:70:50:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Validity
Not Before: Apr 17 00:00:23 2026 GMT
Not After : Apr 18 00:00:23 2026 GMT
Subject: CN=67b56805ff839a6080520e8ed612b7e032c4cc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:29:7c:22:c5:ab:37:21:47:9a:1c:72:6b:c0:
4e:95:88:41:d9:90:d7:bf:48:65:45:2b:7d:d1:70:
ea:e5:72:db:65:3b:66:cb:7f:a3:60:55:54:69:26:
7c:61:bf:f6:62:b6:03:a4:3e:b6:1c:dd:e7:61:73:
2e:06:71:f3:03:a1:5f:cc:2e:49:b0:80:22:85:c8:
38:41:2a:c9:a5:d9:4a:c6:ef:cb:bb:8c:39:74:8e:
6e:a2:17:fd:fd:52:0e:76:df:be:cf:c1:1b:a5:c5:
14:cf:a7:a5:4a:f2:c3:67:58:c4:d2:b7:18:e6:ae:
d6:12:86:56:ce:41:0a:fe:33:75:cc:08:4c:58:9e:
51:41:d1:6f:bc:59:45:c9:76:11:56:2c:a6:b5:aa:
4a:46:66:a9:a1:4e:5a:63:66:f2:51:b2:76:17:39:
88:dd:2a:cd:e6:b9:e9:1e:05:88:34:9c:92:a0:e2:
87:2a:0f:62:17:e4:28:c2:8b:42:2a:d1:0e:6e:f6:
d2:42:a8:db:c6:1b:29:e4:46:e1:75:c6:80:58:75:
0b:a2:96:f4:3b:37:ab:0e:75:db:22:7d:64:20:c9:
67:30:8f:8d:3e:4c:37:51:42:bf:4b:ef:20:20:98:
f0:4d:95:1d:2c:7b:95:ce:ea:d3:d3:48:e9:75:29:
f5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B5:68:05:FF:83:9A:60:80:52:0E:8E:D6:12:B7:E0:32:C4:CC:44
X509v3 Authority Key Identifier:
keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:48:68:e1:91:1e:89:60:05:8e:e1:d5:20:06:de:23:69:02:
8e:31:5e:27:b7:4d:aa:77:fd:b3:fc:4a:b8:d6:b1:34:fa:85:
82:ef:7c:9a:ea:5b:9a:09:ca:37:a5:d9:ec:fd:56:ca:c8:19:
e6:34:6f:48:f7:c1:5c:60:82:54:df:94:b6:23:99:ef:c0:73:
17:ba:6a:01:8a:82:66:bf:77:cf:fa:1c:b3:5e:73:95:a2:2d:
e7:32:30:89:f9:a5:60:99:5e:cc:1e:da:a8:96:37:ce:d8:94:
bc:8d:20:53:68:81:9b:47:8a:9c:ac:8c:fb:f1:e9:f8:61:82:
ff:0a:2d:aa:1b:ee:8a:00:4c:01:49:f3:28:af:0d:48:35:b4:
f9:7d:02:4e:11:bf:c1:83:e5:5b:78:d6:32:76:b5:e4:64:97:
f6:74:6f:bd:00:5b:cd:eb:0b:0f:df:d9:8a:6e:2a:d5:75:41:
e3:1f:1b:01:c0:3e:04:10:fd:6f:e5:36:67:2f:ff:ba:af:0c:
d3:9d:af:13:45:99:dc:4f:88:5f:c8:b2:72:ab:ec:b8:7f:3a:
2a:2a:da:bf:a5:ba:e8:07:28:5b:3d:b2:97:27:da:9e:2a:be:
a2:42:d2:ee:1c:aa:72:bd:43:70:09:70:a2:cf:56:6e:36:96:
d1:fb:b1:bb
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2YvRskEM7yryWGGfpTcFA6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTVhYzVkMjJhZDkwNzhhNzJlMTM2OTk2Mjg3MjQ3ZTlm
MWUxMzEwHhcNMjYwNDE3MDAwMDIzWhcNMjYwNDE4MDAwMDIzWjAzMTEwLwYDVQQD
Eyg2N2I1NjgwNWZmODM5YTYwODA1MjBlOGVkNjEyYjdlMDMyYzRjYzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Sl8IsWrNyFHmhxya8BOlYhB2ZDX
v0hlRSt90XDq5XLbZTtmy3+jYFVUaSZ8Yb/2YrYDpD62HN3nYXMuBnHzA6FfzC5J
sIAihcg4QSrJpdlKxu/Lu4w5dI5uohf9/VIOdt++z8EbpcUUz6elSvLDZ1jE0rcY
5q7WEoZWzkEK/jN1zAhMWJ5RQdFvvFlFyXYRViymtapKRmapoU5aY2byUbJ2FzmI
3SrN5rnpHgWINJySoOKHKg9iF+QowotCKtEObvbSQqjbxhsp5EbhdcaAWHULopb0
OzerDnXbIn1kIMlnMI+NPkw3UUK/S+8gIJjwTZUdLHuVzurT00jpdSn1hQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGe1aAX/g5pggFIOjtYSt+AyxMxEMB8GA1UdIwQY
MBaAFPqlrF0irZB4py4TaZYockfp8eExMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xV3NYU0t0a0hpbkxoTnBsaWh5Ui1ueDRURS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjkvYjU1YzA0LTZkNGEtNDk0OS1hYWE4
LTZlZTFhNzAwYjIxOS8xLzEtcVdzWFNLdGtIaW5MaE5wbGloeVItbng0VEUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y5L2I1NWMwNC02ZDRhLTQ5NDktYWFhOC02ZWUxYTcwMGIy
MTkvMS8xLXFXc1hTS3RrSGluTGhOcGxpaHlSLW54NFRFLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcEho
4ZEeiWAFjuHVIAbeI2kCjjFeJ7dNqnf9s/xKuNaxNPqFgu98mupbmgnKN6XZ7P1W
ysgZ5jRvSPfBXGCCVN+UtiOZ78BzF7pqAYqCZr93z/ocs15zlaIt5zIwifmlYJle
zB7aqJY3ztiUvI0gU2iBm0eKnKyM+/Hp+GGC/wotqhvuigBMAUnzKK8NSDW0+X0C
ThG/wYPlW3jWMna15GSX9nRvvQBbzesLD9/Zim4q1XVB4x8bAcA+BBD9b+U2Zy//
uq8M052vE0WZ3E+IX8iycqvsuH86Kirav6W66AcoWz2ylyfaniq+okLS7hyqcr1D
cAlwos9WbjaW0fuxuw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:02:06 2026 by rpki-client