Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
File: pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft (raw, json)
Hash identifier: 8Y1qPbqG4VvEuEc/WmukFfN22Hr8lJqFUaIXBY7WokM=
Subject key identifier: 72:2D:5B:7D:BB:16:DB:58:1C:95:D7:2D:F8:AC:94:16:48:7A:F8:24
Authority key identifier: A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66
Certificate issuer: /CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866
Certificate serial: 019D2583EB3432199EC087FBE28691F08A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
Manifest number: 0C52
Signing time: Wed 25 Mar 2026 15:01:35 +0000
Manifest this update: Wed 25 Mar 2026 15:01:35 +0000
Manifest next update: Thu 26 Mar 2026 15:01:35 +0000
Files and hashes: 1: i8Jkc4pxTLURfEXCzuvgdJ4d5UM.roa (hash: 3Aa3KlSn62IyX7PygJ6vdIXQzOFJ0C/FH3ms8tRbuZk=)
2: pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl (hash: vN1ec/XsdhOAuOpE9uJI6oISc6Xbaxx3sxdFR1fB01I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:eb:34:32:19:9e:c0:87:fb:e2:86:91:f0:8a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5afc5435fcbbe348d2b56016a7bc7bcacf1b866
Validity
Not Before: Mar 25 15:01:35 2026 GMT
Not After : Mar 26 15:01:35 2026 GMT
Subject: CN=722d5b7dbb16db581c95d72df8ac9416487af824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:51:50:24:bb:1d:25:47:8d:59:d6:96:0f:
61:da:94:4c:f1:28:ee:3f:26:67:bd:75:1d:6f:1a:
f6:9b:ae:ad:6f:a9:a2:d5:6b:6b:3e:4f:79:0d:46:
4d:96:22:50:0a:9e:02:24:78:b2:e9:57:99:a2:c3:
8e:fd:47:e1:5a:c0:3b:9c:56:bf:90:05:cd:a7:ff:
7b:7e:64:b0:b5:1f:f7:83:ed:05:c6:47:c9:68:40:
5c:22:af:8f:89:6d:9f:6d:35:71:d7:4c:00:7c:6b:
65:77:ab:89:76:52:55:19:79:e2:d8:4c:9e:06:e4:
02:9a:a4:b6:33:0e:32:d1:83:3d:87:c9:33:0f:78:
88:5d:63:2a:fa:6c:5c:7d:0a:57:b9:bb:b3:95:b7:
fa:ed:41:81:6b:e1:0f:2c:9c:70:9d:26:fe:b3:c3:
e7:1b:9e:ed:7b:c5:3b:af:ac:ed:6b:3c:2e:ec:ad:
55:9d:67:3d:42:99:1c:81:9e:33:c1:ce:52:ac:c6:
93:93:6e:2d:91:7b:b5:de:00:4c:05:90:c9:6a:d7:
a7:c5:1e:6d:86:5d:23:4c:9a:36:9f:8b:1f:1a:21:
f7:69:f3:ee:b3:47:7e:8d:50:6b:ea:5e:a2:86:ea:
5c:c6:99:cf:8c:29:c8:fc:a1:a8:7d:6a:2b:44:7f:
50:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2D:5B:7D:BB:16:DB:58:1C:95:D7:2D:F8:AC:94:16:48:7A:F8:24
X509v3 Authority Key Identifier:
keyid:A5:AF:C5:43:5F:CB:BE:34:8D:2B:56:01:6A:7B:C7:BC:AC:F1:B8:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa_FQ1_LvjSNK1YBanvHvKzxuGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/419af0-cbd6-4233-b52f-d7484bf9ca2b/1/pa_FQ1_LvjSNK1YBanvHvKzxuGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:68:85:02:26:0f:48:c7:d0:8b:86:8f:a3:cd:48:22:21:37:
43:96:61:4d:3f:53:de:8e:d2:59:22:85:cf:40:e0:46:78:96:
d7:4a:c8:63:13:b4:7b:ff:23:eb:43:87:84:8a:30:6c:c3:da:
30:7e:ed:f3:36:2c:17:84:2b:80:f7:ea:c9:5f:4e:7d:51:2d:
14:0f:2d:ab:fd:97:5b:50:17:7b:6d:8a:6a:e9:0b:7a:91:9e:
81:bc:48:de:3f:63:2e:32:b9:12:13:4b:1e:be:33:5b:5e:07:
df:ef:9c:23:cb:32:5d:c8:ac:16:e5:ac:3f:7f:da:d9:ac:f6:
54:29:2d:af:be:7c:02:0f:7e:19:a8:64:bd:7f:05:db:90:23:
a7:d5:81:a6:1b:25:1e:eb:8a:61:e6:f8:bf:06:85:8e:1c:d1:
ba:95:06:c7:ff:d7:c9:b7:9e:52:85:14:74:25:75:3c:03:64:
0d:e4:86:66:c6:75:96:35:bb:7c:dc:dd:dd:9b:d8:35:e7:77:
19:97:97:eb:db:ca:d8:6d:5b:4c:05:69:e0:f4:6b:6d:4e:cb:
d5:8f:43:ee:a2:6f:33:48:68:02:b1:0e:b6:72:66:05:e3:f6:
87:c1:98:b7:57:c4:3d:b1:9d:71:36:d7:1b:d7:bb:0b:6b:cd:
2b:05:50:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:11:36 2026 by rpki-client