Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
File: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft (raw, json)
Hash identifier: QrulSATrfHYYY+FBzRojQMqpSCz3Dc0d6Uxi0SfC+3E=
Subject key identifier: EE:23:42:04:63:C3:C7:C7:64:76:DD:21:BE:FF:7B:35:9C:2F:BF:FE
Authority key identifier: 16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
Certificate issuer: /CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Certificate serial: 019D284DCCE1321A807153DF10BF390C4880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
Manifest number: 0443
Signing time: Thu 26 Mar 2026 04:01:20 +0000
Manifest this update: Thu 26 Mar 2026 04:01:20 +0000
Manifest next update: Fri 27 Mar 2026 04:01:20 +0000
Files and hashes: 1: Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl (hash: DyllcXkl8b1qWi+RWeawpu37HpwHBKRsWXlTksNNRqc=)
2: OytMoAZMK8wtoSzZvtAHJ9Md1Mo.roa (hash: H/07CVFn18uiXemUf+RsWUhgJ/GpamvFqfgXdnjOQDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:cc:e1:32:1a:80:71:53:df:10:bf:39:0c:48:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16af8ffa644e4041fdad0fc96d6272cb4017a8b0
Validity
Not Before: Mar 26 04:01:20 2026 GMT
Not After : Mar 27 04:01:20 2026 GMT
Subject: CN=ee23420463c3c7c76476dd21beff7b359c2fbffe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:eb:62:bf:97:2f:95:09:2e:57:b0:65:37:55:
51:48:80:31:29:5d:bd:16:c5:eb:9c:4d:64:b9:7d:
d6:17:b4:ca:69:b5:10:b2:8e:75:22:8c:d7:d9:21:
ae:a0:23:09:66:e5:bd:53:01:83:10:5d:d6:84:12:
8d:30:b6:d8:87:be:5f:b9:c2:2f:e9:fe:2d:fb:7f:
10:d1:e4:71:3f:3f:76:96:03:a7:ce:47:d6:23:53:
fe:43:d9:df:65:70:b5:91:7b:fc:b7:09:71:dc:a7:
95:01:97:94:5d:95:7d:6e:56:ac:e5:b9:27:8a:24:
0e:6b:ad:bc:c5:82:41:5a:e2:09:86:74:9f:1f:2a:
b1:38:ac:27:f9:d2:fd:3c:3b:77:65:cf:4b:73:10:
b3:43:f8:c7:97:3a:52:0a:b6:24:17:26:15:c4:6b:
c9:1b:67:9a:b7:39:44:6a:e4:c4:08:f8:7b:41:12:
30:0c:31:40:07:8d:85:44:ed:fb:b3:c0:4c:d5:d7:
48:74:6e:79:c9:3b:c3:84:57:13:ca:ed:ca:69:bd:
a8:7e:02:0c:7f:d3:bd:bd:63:6c:58:39:ec:29:47:
74:4f:7b:b6:3b:1b:00:39:23:2a:3a:3d:a1:0c:66:
a9:d5:ea:e4:0b:a2:6d:5a:32:c2:00:ee:eb:90:de:
3d:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:42:04:63:C3:C7:C7:64:76:DD:21:BE:FF:7B:35:9C:2F:BF:FE
X509v3 Authority Key Identifier:
keyid:16:AF:8F:FA:64:4E:40:41:FD:AD:0F:C9:6D:62:72:CB:40:17:A8:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/daa03d-d74b-4cfc-a23b-5a14372457f5/1/Fq-P-mROQEH9rQ_JbWJyy0AXqLA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e1:97:c9:1e:d7:98:7d:2e:b5:4b:1f:bf:73:78:c8:b3:fd:
a5:07:f7:28:91:a3:4d:fd:5a:82:50:ca:93:ab:7a:a2:f6:62:
84:e0:c9:a7:f7:7d:03:76:6a:8e:a5:49:81:9e:1f:9d:9e:db:
3c:ff:61:2b:59:28:9e:85:f2:f0:93:2e:20:f2:40:45:02:66:
7e:46:e8:69:07:1f:34:4d:bc:84:83:16:c1:42:8e:93:70:15:
7d:27:96:5d:c1:c4:94:5b:3f:1d:3c:cb:4b:01:40:41:af:4d:
81:9e:45:49:27:65:6d:c5:d4:33:2e:42:03:45:e8:3a:16:9b:
1b:aa:2f:c8:52:9e:51:08:06:73:14:8b:87:93:22:7a:58:93:
df:30:f6:19:1d:04:d9:00:3e:dd:0e:96:8e:91:44:fa:83:14:
c2:7a:63:5e:8f:99:72:fe:c6:ca:71:b9:69:9f:d0:3a:33:99:
b6:00:14:f4:fd:37:93:d1:9f:b7:45:08:e6:e5:ca:9f:32:0b:
ba:3c:5f:7d:ed:f3:ef:d4:00:a6:10:22:13:bd:fa:f6:91:19:
e7:ba:0b:0b:ea:45:5b:d9:69:71:2d:d7:7c:26:37:c3:d2:e4:
05:ba:57:89:bc:c7:a6:65:94:ab:d8:4f:1e:37:40:e6:52:2a:
a9:90:2e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:13:57 2026 by rpki-client