Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
File: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft (raw, json)
Hash identifier: juDLCdroMa7thRZ6lEs/HmqIpJ+ui0//TV3JcwAnvJo=
Subject key identifier: 46:A7:0F:8E:6C:E2:BC:42:E2:72:D5:25:FB:19:12:F3:83:ED:3B:6D
Authority key identifier: FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
Certificate issuer: /CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Certificate serial: 019E1C10029ED4340E51F4B4A98203CCF384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
Manifest number: 16A7
Signing time: Tue 12 May 2026 12:01:11 +0000
Manifest this update: Tue 12 May 2026 12:01:11 +0000
Manifest next update: Wed 13 May 2026 12:01:11 +0000
Files and hashes: 1: 1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl (hash: VZFf7cLy8A45sKDesIvEu3HXURgWgok9bk9wVK2n9uI=)
2: DIEeHXr-sg72w8tBgzQ5nqnQ7go.roa (hash: EtH8YkhhVk7GVyIh/CoOOspQ4bbxWgxf9R15/OkaX/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:10:02:9e:d4:34:0e:51:f4:b4:a9:82:03:cc:f3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1fce9aa72c838496f4bdef9c1f0b8e894fc98e
Validity
Not Before: May 12 12:01:11 2026 GMT
Not After : May 13 12:01:11 2026 GMT
Subject: CN=46a70f8e6ce2bc42e272d525fb1912f383ed3b6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:07:dd:0f:9c:74:e5:4c:84:f0:38:28:ab:87:
17:06:da:bf:f4:16:18:06:74:0a:fb:47:64:67:4a:
4d:6c:41:29:a4:aa:56:97:01:cb:13:da:77:8e:74:
5e:64:c5:df:ce:ce:91:6c:74:7c:82:8a:6e:3f:1b:
71:c2:ab:91:10:76:f8:36:58:c9:30:ee:2e:75:cc:
aa:3d:da:81:20:b2:0f:6e:3b:16:16:7d:65:db:a7:
e2:ce:d1:91:0a:25:dc:05:37:61:c8:dd:3b:4f:c7:
d6:77:b8:c2:a3:d5:a9:ef:76:07:19:1b:5e:9c:72:
33:64:b4:02:23:0e:03:50:16:af:96:31:ca:12:70:
bd:04:0f:6b:b5:7a:96:76:cb:24:4b:fc:86:6d:11:
35:6c:57:f2:47:a5:95:7d:eb:4d:a2:5f:cc:cc:ba:
14:24:0f:3d:a7:bf:cf:ce:2b:56:ec:c6:96:f1:4d:
e6:52:74:de:3c:d7:9a:fb:28:b2:62:55:53:55:2b:
81:cb:20:9c:e7:d5:d0:cc:88:dc:f0:10:6b:cf:8f:
aa:07:04:a2:da:6d:04:cb:3f:43:36:97:64:cc:4c:
b3:38:38:39:de:6c:a1:61:8f:8c:a8:f8:21:00:c0:
0c:40:2f:03:44:0f:99:14:83:09:79:42:0d:f5:1d:
3d:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A7:0F:8E:6C:E2:BC:42:E2:72:D5:25:FB:19:12:F3:83:ED:3B:6D
X509v3 Authority Key Identifier:
keyid:FB:1F:CE:9A:A7:2C:83:84:96:F4:BD:EF:9C:1F:0B:8E:89:4F:C9:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-x_Omqcsg4SW9L3vnB8LjolPyY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5655f5-0141-4f3d-a50c-b5998680d914/1/1-x_Omqcsg4SW9L3vnB8LjolPyY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9a:5b:a3:3f:16:59:71:98:3d:a1:d8:72:00:86:51:92:d6:
c9:0c:d5:45:63:52:dc:ac:34:36:22:0f:43:fe:68:9b:68:21:
79:96:ac:bb:93:52:22:a2:9b:35:43:d9:ca:87:80:a1:a6:46:
2f:f8:8c:c6:fd:93:ec:63:46:8c:4e:c2:ed:14:6d:21:f3:a5:
9c:8e:dd:87:41:f3:ba:f7:85:b1:fd:8d:21:cb:38:18:c9:38:
e2:79:52:10:f7:7c:85:c1:74:9c:0e:56:5a:75:c0:71:a3:b8:
d3:3d:6f:bf:6e:95:cb:92:33:4e:c9:41:61:6e:54:11:c7:55:
a4:e8:60:1c:25:2f:9d:1e:e3:54:de:8e:3e:b8:77:cb:d8:3e:
58:a3:2e:e0:55:c7:35:0a:6c:36:73:03:cc:21:13:da:38:57:
f5:9d:78:d1:a2:f7:45:ce:2c:1e:08:18:1e:91:aa:42:b2:52:
82:31:73:76:1b:64:91:10:a9:05:63:a2:29:ec:7d:42:ca:45:
09:ab:ba:5d:7e:53:b1:ae:eb:92:a0:4f:3d:6e:d5:e9:85:28:
8b:d3:fa:92:5d:ad:ec:34:cf:11:83:9b:12:6a:66:6d:4d:95:
9e:17:a2:fe:6d:c0:a8:55:0d:f2:be:6f:06:47:de:47:0c:e2:
66:89:c8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:18:03 2026 by rpki-client