Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier: EG/7dZKvy2LkAMOhjcAxclUOdScliPNw+24bLp/pnIs=
Subject key identifier: 79:79:F1:35:E2:F2:62:DF:68:BF:0B:CF:E2:5E:DF:D5:90:14:4F:0B
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial: 019D26CD0104A34C299318CF660A2782C411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number: 1628
Signing time: Wed 25 Mar 2026 21:01:02 +0000
Manifest this update: Wed 25 Mar 2026 21:01:02 +0000
Manifest next update: Thu 26 Mar 2026 21:01:02 +0000
Files and hashes: 1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: ayJa5JjblVCIRsfxujWJQtIfPbss47MmKvkDzMx1oSw=)
2: DIEeHXr-sg72w8tBgzQ5nqnQ7go.roa (hash: EtH8YkhhVk7GVyIh/CoOOspQ4bbxWgxf9R15/OkaX/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:01:04:a3:4c:29:93:18:cf:66:0a:27:82:c4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Validity
Not Before: Mar 25 21:01:02 2026 GMT
Not After : Mar 26 21:01:02 2026 GMT
Subject: CN=7979f135e2f262df68bf0bcfe25edfd590144f0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b0:6c:37:0a:61:bc:8e:53:07:68:45:24:c0:
cb:81:09:3a:10:7c:a7:5b:02:e9:60:2b:68:f7:e4:
10:90:22:b3:07:02:8c:f6:93:b3:42:d5:dd:c2:1c:
b0:6c:5f:0b:b4:3e:99:d5:bb:af:2c:79:f6:70:26:
39:bb:04:47:b2:78:3e:0e:f9:33:73:22:8c:49:b7:
84:7a:4e:dd:7f:8b:e5:58:67:b0:e1:18:f2:91:23:
a6:ae:fb:d7:1f:34:04:cd:a2:53:02:bf:be:17:6a:
90:61:fa:4f:4f:0c:2b:c5:e1:70:d4:92:60:47:c4:
94:8a:04:92:38:79:87:c2:da:6b:d4:c0:c0:5d:ad:
13:12:bf:00:18:84:d6:35:30:c2:3a:1a:10:1e:d1:
c0:15:a6:03:6f:50:74:d9:99:83:13:97:aa:40:2a:
07:d7:f8:cb:5b:da:12:d9:ca:6b:3e:76:d7:ee:11:
13:0a:b9:1b:15:a6:b2:d9:2a:47:8f:b3:a8:de:dd:
47:df:83:7c:b5:55:77:4a:a9:33:f8:34:ef:15:cc:
02:c7:8a:79:ec:44:55:48:db:81:cc:37:b5:3b:94:
1c:14:ea:d1:75:72:0c:20:94:4f:e6:ef:84:30:8b:
66:3f:37:c9:10:43:67:7d:fa:ad:0a:37:a5:c7:cf:
4f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:79:F1:35:E2:F2:62:DF:68:BF:0B:CF:E2:5E:DF:D5:90:14:4F:0B
X509v3 Authority Key Identifier:
keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fd:0f:d8:ab:8f:a6:15:25:0b:fa:35:f9:f2:4e:ad:7b:aa:
31:9c:0a:e5:55:0a:ba:e7:3f:b0:d5:40:0b:30:8a:13:79:8b:
35:78:c4:ae:5a:ed:fe:dc:0e:71:12:d4:22:c6:7c:f1:ce:e7:
74:29:9f:7c:71:3b:18:87:2b:9c:77:95:ce:7d:29:e6:42:75:
0c:8f:3a:34:7f:2b:a0:82:04:03:40:9c:13:8e:da:21:8c:a1:
8b:60:15:76:3b:a0:a7:2e:5f:f5:c4:94:e9:bb:e7:fa:9e:42:
47:0b:f1:20:40:28:32:cb:7a:06:00:2b:ca:46:f1:68:35:91:
9a:bc:0c:c4:f1:21:0d:1c:f5:44:47:b7:58:be:33:9b:fd:3f:
96:28:c7:9b:8c:3f:5f:2e:cc:c3:f6:f1:82:a7:b1:41:c5:c0:
ab:a5:a7:7e:3c:a9:f1:3a:b4:11:be:83:31:49:0b:c5:15:7d:
e6:35:8a:20:99:7d:a6:ac:fb:50:5a:c6:8e:39:d9:4c:38:5c:
74:d4:74:d6:48:32:b5:8e:ae:a2:18:75:7f:04:3d:ce:e3:c4:
14:ea:2e:0d:82:68:b5:7b:81:50:ca:05:43:ea:22:f1:40:13:
42:62:cf:e1:56:95:dd:28:1a:b4:e0:b8:3b:65:ac:ba:0a:18:
48:86:12:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:56:01 2026 by rpki-client