Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
File: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft (raw, json)
Hash identifier: QjwHlRmU2QzCejn5YtFpsJrDpElvhXqa2BYMjiBXb2Y=
Subject key identifier: A6:6C:B8:C7:91:BE:B7:3F:A3:8D:7B:C5:4C:35:7A:F4:C0:6A:B5:32
Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
Certificate issuer: /CN=faa16909ca4da39935eab9af038b58a5233122b3
Certificate serial: 01A11A509E4A0C763DF28D7A959D5BBE45C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
Manifest number: 1A26
Signing time: Thu 08 Oct 2026 07:00:53 +0000
Manifest this update: Thu 08 Oct 2026 07:00:53 +0000
Manifest next update: Fri 09 Oct 2026 07:00:53 +0000
Files and hashes: 1: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl (hash: ugk51J6A63UiQdCW6QOU2+3J478rHT2sMn4K85CfR4E=)
2: GB_a4b1kVxMMUZoZCCtwC17cEDo.roa (hash: 33UFtMiUsHKZAxOVuIqQu69SANl3j9uJJ2Mz9LnCmac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:50:9e:4a:0c:76:3d:f2:8d:7a:95:9d:5b:be:45:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3
Validity
Not Before: Oct 8 07:00:53 2026 GMT
Not After : Oct 9 07:00:53 2026 GMT
Subject: CN=a66cb8c791beb73fa38d7bc54c357af4c06ab532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2b:68:a0:86:da:99:fd:e7:10:ed:49:75:ba:
e8:31:73:4f:0d:24:cf:d5:cb:46:89:d9:17:4e:a8:
fb:bb:45:6d:c2:70:8c:37:a1:0e:c3:ba:a2:ad:d7:
cc:9a:20:df:4e:e8:dc:8b:c2:38:3f:bc:3a:43:62:
d0:f4:74:d2:0b:f9:e2:f9:44:dc:52:f2:57:d1:07:
d4:c3:b6:49:64:be:4a:74:11:34:c6:68:2c:55:bc:
b1:31:99:bb:a5:1d:d1:14:16:bf:fc:56:f2:ce:9f:
8b:ce:cf:37:b8:86:dd:b9:c9:72:6b:30:6b:0a:1a:
4a:ce:c4:7f:16:51:a0:e6:85:bc:b5:32:4c:b2:79:
31:c4:a7:d8:00:8e:03:ee:36:18:76:8d:e0:d8:e5:
23:fe:35:3a:89:ef:09:9a:58:bc:ff:a1:eb:a4:c5:
b4:3a:13:3f:12:77:17:1d:ce:a1:67:71:0b:00:e2:
85:cd:ff:06:fd:d3:32:38:c3:79:31:77:ec:03:ac:
db:f7:db:45:88:dc:60:b1:bc:c3:64:d2:62:d5:ad:
71:95:04:36:3c:dc:c8:d4:b7:73:55:7c:57:3d:7b:
d9:35:40:7c:3a:d7:e5:32:69:6d:ea:1b:f5:79:7c:
dc:23:2e:9e:66:73:e8:e6:d4:8b:eb:08:88:74:04:
43:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:6C:B8:C7:91:BE:B7:3F:A3:8D:7B:C5:4C:35:7A:F4:C0:6A:B5:32
X509v3 Authority Key Identifier:
keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:8f:ab:31:2b:69:be:55:b2:41:7e:fc:4d:68:8e:f0:6a:68:
c5:6c:35:b7:b5:39:d9:0d:cb:d6:79:54:19:e0:9b:59:72:4c:
c0:a0:09:99:00:9c:62:2e:05:2c:40:b0:2a:d1:78:22:0d:06:
94:a7:a7:2f:96:a8:b0:87:74:b1:1e:4a:ed:e7:af:0f:2c:7a:
d5:7c:40:c8:e6:ee:bc:15:39:59:e2:4e:46:69:8a:d3:6e:b2:
3b:ad:48:0b:de:2c:cd:e8:6a:f1:3f:84:a1:73:7a:fc:94:7e:
5e:b9:0f:95:a7:72:ab:fd:30:31:3f:0d:a7:5a:2e:a8:99:a1:
da:72:35:3d:f3:5b:24:9c:08:a4:6c:1a:45:5c:e6:1e:df:3f:
bd:fb:4c:ee:f8:dd:0b:3f:26:96:93:a2:9f:e7:cf:fa:b9:60:
f1:df:f1:bb:35:13:eb:64:d6:b9:a2:66:cb:0b:da:b6:ea:31:
e6:c9:fe:39:08:a8:09:9a:4b:53:57:ad:a9:42:cd:42:0c:d5:
49:31:71:db:46:53:03:d0:33:21:bf:74:68:1c:f8:2d:d0:8b:
44:12:96:de:2b:0c:77:a7:df:0a:29:63:fa:73:07:2f:85:6c:
e4:a5:bb:85:84:37:34:a4:d9:f2:d6:ac:05:81:1c:2e:5b:f5:
8e:ee:04:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:43:07 2026 by rpki-client