Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
File: FqwWDambNJSla1R8aKjiwJGGkbU.mft (raw, json)
Hash identifier: 9cP1M2XA3Q2GY3VZNiII9pnvGHDkpzSWu4BD/h7618E=
Subject key identifier: FA:07:A7:F6:16:83:83:EB:4F:D9:0B:AB:D5:82:1F:4B:0D:C4:49:E9
Authority key identifier: 16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
Certificate issuer: /CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Certificate serial: 019D26CD055C1317EAA102EA634B88B35C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
Manifest number: 13FF
Signing time: Wed 25 Mar 2026 21:01:03 +0000
Manifest this update: Wed 25 Mar 2026 21:01:03 +0000
Manifest next update: Thu 26 Mar 2026 21:01:03 +0000
Files and hashes: 1: FqwWDambNJSla1R8aKjiwJGGkbU.crl (hash: 3cjyVPe3bQ2k7BryD7gU3K3gKvsMDG9o/k9P4Tus4zk=)
2: wUaSEcujq46XjAGKMjmbe-PCA2c.roa (hash: iDnvgXNOGCFHMgs34cLFhiiuAQok9TTuwz4AWmow75Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:05:5c:13:17:ea:a1:02:ea:63:4b:88:b3:5c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16ac160da99b3494a56b547c68a8e2c0918691b5
Validity
Not Before: Mar 25 21:01:03 2026 GMT
Not After : Mar 26 21:01:03 2026 GMT
Subject: CN=fa07a7f6168383eb4fd90babd5821f4b0dc449e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1f:48:a7:38:e0:06:3a:08:1a:6a:59:e6:da:
6e:7b:7b:16:f8:0d:7c:28:22:6a:9c:b8:36:3a:aa:
44:96:9d:cf:a5:a5:15:f4:a4:80:66:58:8e:c9:e0:
f5:ab:d1:86:12:4f:fc:37:7d:7b:1f:cc:3f:68:0a:
13:78:10:d5:95:43:6c:36:ab:93:03:20:d5:f5:10:
a8:9d:04:6a:66:4d:94:6d:ad:54:de:c3:93:d4:06:
92:63:2a:89:36:57:71:e6:b8:cb:89:b6:eb:2d:94:
da:e6:73:06:c0:a9:a6:dc:e4:d6:0a:36:b3:ad:8b:
20:a6:4e:cd:61:34:4d:30:d7:6a:5b:4d:5e:a9:90:
4e:69:73:53:78:62:41:80:74:9c:dd:d9:69:b5:b5:
9a:18:ac:b0:9c:03:d7:a5:9a:66:bd:de:b7:48:30:
97:34:8a:12:0f:f9:4b:ad:ef:16:21:34:9c:43:09:
9b:08:b8:45:eb:fc:fe:50:46:de:77:b2:e1:3b:05:
3c:ee:7d:d7:73:df:13:99:7b:8d:07:81:a9:d4:69:
72:36:db:b6:87:01:f2:de:79:d5:60:4c:d1:86:f0:
b3:c7:33:ef:70:3d:fe:e3:c7:ab:7a:1c:92:bf:f4:
b6:5a:2c:67:03:18:eb:e5:45:95:b9:eb:05:4b:ab:
18:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:07:A7:F6:16:83:83:EB:4F:D9:0B:AB:D5:82:1F:4B:0D:C4:49:E9
X509v3 Authority Key Identifier:
keyid:16:AC:16:0D:A9:9B:34:94:A5:6B:54:7C:68:A8:E2:C0:91:86:91:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqwWDambNJSla1R8aKjiwJGGkbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0f4973-60bf-4386-97a6-1e6912689dd8/1/FqwWDambNJSla1R8aKjiwJGGkbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:19:13:5b:9a:b6:5e:63:04:8b:ca:6e:12:d6:eb:8c:68:39:
5b:5d:dc:4b:a3:e9:9e:48:53:90:91:d6:11:02:4f:b1:df:ea:
ee:8e:b0:45:1e:b6:0b:b8:0b:15:f9:9e:68:d6:d6:67:d2:b1:
f6:69:9e:06:0e:17:42:6b:ff:91:e4:de:30:35:da:01:98:d7:
a7:0c:a2:97:59:42:12:1a:ff:34:79:4b:92:d0:f0:6e:0a:6c:
03:a9:fb:6f:63:bd:26:28:4d:ce:b3:93:3c:f7:ee:dc:7c:9b:
8c:fa:20:e6:f7:6c:e8:be:b2:47:9f:6a:63:ec:4a:06:85:cb:
01:13:49:5c:cb:91:48:b3:ff:24:64:0e:49:7e:b2:5a:5a:2a:
60:db:32:e6:b7:0b:66:fc:10:00:f9:49:c3:c8:2e:f0:3f:d3:
86:1f:d9:2a:18:05:ca:90:56:9f:ef:b5:48:54:0d:8d:6d:68:
b8:c3:cc:c1:ee:e5:25:24:85:33:e3:b0:d0:db:99:d3:56:fc:
2e:6b:18:76:04:20:89:d5:ab:6e:4c:4c:95:64:90:bb:18:1b:
4b:14:9a:c0:c1:fe:da:a5:91:71:0b:14:97:a6:c1:4d:b7:0d:
0a:3f:03:d1:ff:8e:71:02:91:21:7e:23:31:1e:5e:76:c0:83:
a8:a0:fb:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:39:17 2026 by rpki-client