Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
File: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft (raw, json)
Hash identifier: xr5qAFJj2/wco52giJm/K0pr5mo+t+c4KxeXlko6D6Y=
Subject key identifier: 95:BB:D3:B4:DC:F7:F2:3A:BA:2A:4E:49:3F:B0:ED:4D:10:04:27:CA
Authority key identifier: FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
Certificate issuer: /CN=faa16909ca4da39935eab9af038b58a5233122b3
Certificate serial: 019E1D90B6B10B19B86F1E0AC0130D59F590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
Manifest number: 189A
Signing time: Tue 12 May 2026 19:01:23 +0000
Manifest this update: Tue 12 May 2026 19:01:23 +0000
Manifest next update: Wed 13 May 2026 19:01:23 +0000
Files and hashes: 1: 1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl (hash: k2zCD5nQJPLT9x/ZaF8R5niLh1Nh7+SwcsnH6YxBbCo=)
2: GB_a4b1kVxMMUZoZCCtwC17cEDo.roa (hash: 33UFtMiUsHKZAxOVuIqQu69SANl3j9uJJ2Mz9LnCmac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:90:b6:b1:0b:19:b8:6f:1e:0a:c0:13:0d:59:f5:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa16909ca4da39935eab9af038b58a5233122b3
Validity
Not Before: May 12 19:01:23 2026 GMT
Not After : May 13 19:01:23 2026 GMT
Subject: CN=95bbd3b4dcf7f23aba2a4e493fb0ed4d100427ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0b:1f:1d:8b:a9:a8:d5:5a:42:63:fb:83:b0:
2f:1f:0c:f5:7b:a3:4f:70:3a:b8:3c:a1:a1:4f:f2:
d0:25:47:dd:f5:f4:a0:fe:fa:5d:59:ee:53:61:83:
25:4e:1f:98:0c:52:c8:a8:d9:4f:4d:e3:35:0e:68:
20:e9:59:12:d5:d8:a5:e5:e5:82:c6:b9:87:20:0e:
74:af:f0:18:cc:5b:07:a8:79:9d:5b:20:c2:ef:79:
67:c7:7f:dd:5c:8c:0f:bd:27:cf:45:20:9a:1f:37:
6c:1e:6f:10:de:4d:dd:07:3c:ad:4a:8a:4d:98:b8:
c3:93:15:be:a1:2c:84:1d:7e:64:fa:44:cc:51:6a:
e5:b2:0d:59:11:da:57:fe:df:2b:5e:52:c0:a7:f9:
04:9f:4d:22:8e:89:67:85:51:02:24:9d:b0:c4:ea:
bd:eb:3c:e1:3a:1f:55:21:bb:c9:f4:ba:44:18:06:
4b:fc:7a:31:a1:46:5f:ac:0f:44:d1:a6:e3:03:5f:
d9:29:c1:ee:8b:c3:40:a1:64:6f:cd:2d:bd:28:9b:
b2:18:28:5c:af:66:f7:5c:e9:aa:eb:53:ec:f2:f4:
c2:21:ba:54:4c:92:65:36:f1:c1:95:f6:ec:45:f5:
aa:9a:e1:84:97:04:f8:ed:98:27:ee:68:75:60:27:
2c:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:BB:D3:B4:DC:F7:F2:3A:BA:2A:4E:49:3F:B0:ED:4D:10:04:27:CA
X509v3 Authority Key Identifier:
keyid:FA:A1:69:09:CA:4D:A3:99:35:EA:B9:AF:03:8B:58:A5:23:31:22:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qFpCcpNo5k16rmvA4tYpSMxIrM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/0466f8-330d-4ac9-ac18-920b52a9f6a5/1/1-qFpCcpNo5k16rmvA4tYpSMxIrM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:b6:7c:ea:b6:0d:e5:e8:e9:42:08:a7:6b:1b:4d:90:55:90:
70:2e:16:df:1a:1a:2b:89:b8:0e:5a:75:be:05:2c:96:fd:b9:
7e:68:df:da:5c:94:2f:34:2a:22:63:f3:e3:db:df:89:ad:58:
f9:5c:e1:90:4c:de:e6:cb:0f:85:8b:68:95:bc:d4:40:58:ed:
c0:31:7b:70:04:a8:d3:1b:0f:cb:72:04:28:4b:b0:a7:68:57:
04:e6:cb:0c:ae:f0:e7:94:b8:23:a0:33:35:1c:bc:60:cd:3d:
b9:ef:5f:68:fc:36:b1:2d:97:1e:8f:11:2a:af:6d:c6:b0:ce:
16:03:f7:4b:2a:d1:99:4a:9a:3d:a5:32:2d:31:25:93:8b:a1:
4d:20:c1:05:3f:8f:04:ca:16:b8:69:ec:85:c9:17:d2:ad:f6:
43:23:79:f9:f9:8b:5f:0c:84:40:d9:e2:d3:08:5c:43:9e:00:
68:24:61:d7:55:5b:20:57:18:fa:e4:d4:8e:45:6a:ab:8e:36:
f3:0c:8c:9e:ce:20:b7:50:12:b2:9f:6f:fa:ba:f1:ef:9d:2f:
ac:14:f6:91:58:dc:68:62:7b:10:20:bc:e7:3a:40:e2:2f:62:
46:3a:c0:4e:3f:0d:cd:41:32:38:02:e3:75:e2:db:82:5a:bf:
f0:03:9d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:15:12 2026 by rpki-client