Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
File: FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft (raw, json)
Hash identifier: tAsRBj1+3KACC5oNjzQ/UrTrOT0GpwphjCgOGE7waf0=
Subject key identifier: 1F:E7:75:25:28:DB:4E:4E:FD:E6:47:47:4D:BF:9E:28:29:DB:27:FA
Authority key identifier: 16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
Certificate issuer: /CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Certificate serial: 019D284D99223235DF2148F9F4FC3FC50695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
Manifest number: 0756
Signing time: Thu 26 Mar 2026 04:01:07 +0000
Manifest this update: Thu 26 Mar 2026 04:01:07 +0000
Manifest next update: Fri 27 Mar 2026 04:01:07 +0000
Files and hashes: 1: FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl (hash: 0Kd+LJKTgY4Lq3+8ucH8YCfL3Ogmh8zJ8MabYfz0CzQ=)
2: mSf_6hw9LbwczEGLxS7bvwkiv9c.roa (hash: CPUV5PHm53/ZGx8XFmHD3voe3NEDlMd+rbTwW6kMNMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:99:22:32:35:df:21:48:f9:f4:fc:3f:c5:06:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a28a0e241fff7aa2e64aa388156f223e2d215f
Validity
Not Before: Mar 26 04:01:07 2026 GMT
Not After : Mar 27 04:01:07 2026 GMT
Subject: CN=1fe7752528db4e4efde647474dbf9e2829db27fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3f:2f:64:87:bb:1a:24:61:78:f3:34:8e:cb:
39:8c:5b:20:1e:6d:6e:4d:62:f9:ef:2d:f5:c8:f7:
7a:76:99:d6:83:c0:c4:b6:7b:98:ae:31:09:0c:21:
ea:b1:c4:cd:5d:b9:f4:cf:c6:40:37:19:2a:f6:5a:
6e:e6:a9:8f:f1:38:92:e2:0f:2b:ec:84:1d:4c:96:
70:7c:c2:2e:90:40:c7:89:ee:6c:e1:ad:5f:3d:65:
ae:b7:07:63:00:9a:ee:13:ea:41:53:bc:35:31:e1:
fb:be:d7:27:09:18:e1:aa:9a:7a:b2:45:e2:23:65:
ff:e7:47:a6:6d:6f:2c:2d:33:8c:2b:67:b8:f2:eb:
95:11:19:75:6a:87:ef:48:22:7c:01:4a:b5:b1:b1:
ce:e6:9e:8f:e6:86:b9:d6:18:d9:f2:6c:40:c6:f6:
42:d7:6d:7a:56:3c:df:50:d7:6f:4e:ad:c8:93:4b:
88:15:33:a5:58:e7:1d:68:45:3f:e1:84:ca:05:0b:
8b:e7:98:06:07:ef:b2:db:9b:37:e6:6a:ff:9a:1b:
ae:41:5a:6e:5c:d8:5c:43:8e:1e:64:0e:5a:7b:5b:
2e:0a:c4:ed:22:f1:56:e2:d5:91:80:f3:c3:fa:2f:
5a:f0:83:b8:1a:fb:4c:ba:9c:5f:4f:ce:cc:b9:58:
c8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E7:75:25:28:DB:4E:4E:FD:E6:47:47:4D:BF:9E:28:29:DB:27:FA
X509v3 Authority Key Identifier:
keyid:16:A2:8A:0E:24:1F:FF:7A:A2:E6:4A:A3:88:15:6F:22:3E:2D:21:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqKKDiQf_3qi5kqjiBVvIj4tIV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/d95f1d-0e77-4ec6-bbca-fb2a983cc66a/1/FqKKDiQf_3qi5kqjiBVvIj4tIV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:da:b4:ee:38:0b:5f:d0:52:18:96:ef:53:68:33:4c:99:d7:
46:4f:44:31:79:51:76:50:0b:0a:52:e9:c9:19:d5:3d:e0:97:
2b:8e:d8:1a:1a:4b:58:6b:86:4b:d9:62:68:e1:16:70:93:57:
e1:a2:79:68:36:d2:9d:75:99:49:6f:40:9a:a3:92:b2:71:b6:
1a:d4:aa:cb:f5:fe:f3:69:f9:10:f2:c9:d1:40:7f:1f:98:75:
f4:aa:ac:da:34:87:b7:f2:27:0d:c1:2d:89:05:29:f6:1e:fc:
43:d1:91:27:af:ea:3b:b1:c9:86:34:38:5a:3e:e5:22:ce:85:
82:25:45:dc:34:20:23:92:21:98:cc:e4:47:af:6c:0c:32:ef:
cf:a5:ca:5a:c5:10:8d:46:c4:ee:dc:b6:ae:8a:18:a5:d5:13:
ac:ba:36:de:6b:de:da:3f:d2:a3:7c:70:78:8e:36:bf:5a:a4:
a3:0a:dc:60:84:4d:61:5d:ba:85:28:a4:15:33:9d:f0:96:de:
af:1b:e4:4f:c0:34:e8:a6:1c:18:eb:c0:8d:fc:55:8b:4c:ee:
32:ec:ef:90:53:ab:e1:33:56:3b:07:46:07:88:c8:23:b3:0e:
8e:cd:e1:28:dd:0d:ca:04:c3:23:8b:54:a5:44:3a:0a:73:03:
1b:f6:0b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:12:05 2026 by rpki-client