Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
File: 1QTmQeVaSK7gFB4sDSYicQLKptQ.mft (raw, json)
Hash identifier: jYGV88ums9lmuqvoDXtRejw0IhvYN5yvvEeoJhO4nzA=
Subject key identifier: FB:C6:B8:A8:10:08:38:15:D7:19:EA:C6:26:88:BE:90:55:2C:7F:A4
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019D273AFC02C6E969C3F1CE0CD3D551B3A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
Manifest number: 123B
Signing time: Wed 25 Mar 2026 23:01:10 +0000
Manifest this update: Wed 25 Mar 2026 23:01:10 +0000
Manifest next update: Thu 26 Mar 2026 23:01:10 +0000
Files and hashes: 1: 1QTmQeVaSK7gFB4sDSYicQLKptQ.crl (hash: eKe49e7296c9DWkoYmxgt4EdYNE5RzT49SsamJNQ94k=)
2: Fmacp4NY6nEGonmiT-U_xfP1PNA.roa (hash: nMGKz5J/UdppiFPUA3K/6569wtZvBmanoCiwnJ4msoE=)
3: G8ok4WnRssMF_kSU0fMKahJetsU.roa (hash: l43UBskPXl3nXaaaJdzsHUtTJRUjiog9FX+gAeGDp4g=)
4: HXx-9xf840ychc1XFQvrQhYAMc8.roa (hash: wEQlpP9y0gAps6ZTYiJzXEzVVAyiwRr/90bpIEEpgsY=)
5: KdqxPru-n3hoW07_Ia_EY5qo-gs.roa (hash: nHBt8Iolo72XzLdo8e8Ep2RH7UXsZGR1GpAo5yUz4DM=)
6: _G6g6_QnVtIFB_-iAP4mTCvteXs.roa (hash: uAtUHoDLiIbUy1NlipnwKBXuGU0z4c5OSzrv5oTG0UI=)
7: lbA6fkEyToINYPSmlJ-B17hV6T8.roa (hash: RPJR9tlk6PGxFVrIXjpYwQZILEQbLWxfjexbsXGiL+U=)
8: nU05wjCCjQdvD0N5GwShQguLcMg.roa (hash: j/VwIGsTlBAaDg3IJsHet13mXvJWrVOZiHUgffdX7c4=)
9: smJvEGMAn4xu8Scd8dffeO2ae_U.roa (hash: hTRU88LHGp5KUHTSb+P61y5pXqOZZZN6CAlWM8NKLFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:fc:02:c6:e9:69:c3:f1:ce:0c:d3:d5:51:b3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Mar 25 23:01:10 2026 GMT
Not After : Mar 26 23:01:10 2026 GMT
Subject: CN=fbc6b8a810083815d719eac62688be90552c7fa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:52:9b:b6:b3:33:c3:69:37:67:19:ec:37:bd:
e4:4d:30:d9:07:d4:85:a2:bc:7d:7f:9b:91:ef:94:
4c:e6:cb:19:5b:bc:70:13:55:d0:90:51:18:a0:ae:
de:bb:09:f0:8e:a8:96:ec:1c:8d:2d:e6:9a:e9:90:
a0:fc:93:e5:5b:20:75:7f:b4:a8:51:79:27:e0:63:
04:6c:0c:dc:c2:4c:75:9a:70:9f:cf:b0:55:1b:d3:
3b:97:74:59:d8:64:b3:27:d1:11:ea:68:9c:b5:ce:
a0:07:62:9f:dc:48:f6:50:7c:2c:c3:77:6d:6d:12:
40:4c:69:58:42:36:d4:d7:69:19:66:79:4d:65:ba:
6b:b2:4a:0b:37:cd:3f:73:f9:6c:7b:8e:de:63:70:
5c:db:0d:33:8b:d2:e2:b3:2f:ed:18:16:07:66:66:
bf:f8:87:d2:af:8b:05:b5:47:ac:2f:f0:13:ef:45:
22:61:9e:73:83:9c:82:55:31:0b:9b:4d:04:42:ba:
35:0e:30:dd:80:f4:c9:41:78:56:96:d7:64:d9:c9:
be:3f:c5:8d:a0:1d:14:bf:99:df:d1:3e:19:69:95:
68:16:41:6e:8c:8f:90:10:cc:a6:d4:f2:3c:99:00:
93:21:e3:c4:d6:78:94:97:ef:3c:8a:0b:db:97:1c:
bc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C6:B8:A8:10:08:38:15:D7:19:EA:C6:26:88:BE:90:55:2C:7F:A4
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:4d:77:04:0d:12:c0:bc:23:f4:14:59:79:4b:16:06:fd:ef:
06:bb:f4:b7:1c:c8:a7:3e:db:1a:30:d9:88:b5:3f:5e:c9:77:
2a:d7:76:28:c5:31:4a:0b:04:a1:1d:4a:ee:72:e0:f8:1d:eb:
7c:71:19:2c:a1:61:41:b3:ad:0f:6a:7a:b3:b0:cb:1a:c0:95:
09:13:bc:03:e4:88:1d:49:4f:37:4c:db:c8:be:e6:27:f1:4c:
5c:5f:ce:fc:b0:4c:21:21:8e:69:e8:29:d8:1c:83:44:4f:f0:
52:e0:f4:99:99:c7:35:b9:ed:9a:52:96:3b:cb:73:22:e2:df:
f3:93:ed:38:b4:fb:2d:c2:9d:1a:df:b9:8a:9e:cc:18:72:bf:
ed:59:c2:15:84:a4:8f:90:32:94:46:ca:68:b5:c6:48:0a:7b:
f8:4d:cf:d8:0d:b9:9e:4a:6a:6b:44:71:1b:85:ef:a0:03:84:
20:cf:50:1c:af:cc:1b:f1:e0:00:66:f8:8b:91:9d:a7:c2:9d:
c5:87:e3:b1:2b:44:5f:54:9c:e0:fd:51:be:ed:f6:34:21:29:
03:6b:91:4b:43:1d:f9:05:54:d2:ee:e8:ab:03:3f:f1:e8:a0:
29:44:0b:da:3f:26:40:ee:1e:86:fa:e7:58:92:ee:4b:d3:ac:
31:7e:10:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:47:34 2026 by rpki-client