Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
File: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft (raw, json)
Hash identifier: G1DcCUZCr3tEwAOkp1atU7rGI0QL82JDiaL8Qw33qF4=
Subject key identifier: 41:A3:AE:14:1C:8B:51:CC:60:E8:BD:3F:13:08:90:A8:14:F9:32:5E
Authority key identifier: FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
Certificate issuer: /CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Certificate serial: 01A1310FB569B50845B9A51535E940F8C13E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
Manifest number: 1A9E
Signing time: Mon 12 Oct 2026 17:01:15 +0000
Manifest this update: Mon 12 Oct 2026 17:01:15 +0000
Manifest next update: Tue 13 Oct 2026 17:01:15 +0000
Files and hashes: 1: 1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl (hash: qpgW+JuF3IP3YxStMqBjyDpSHiJfneWtZy6dutT+VWs=)
2: Rgo2xEGDtwl1Aqv6lnZ3W9C4Qvk.roa (hash: odpOex+bLP44T2CZB4hEU633jHaa81Iak+Z1Bzzr7eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:31:0f:b5:69:b5:08:45:b9:a5:15:35:e9:40:f8:c1:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf400e63cb262c2000e071ce90aa72ef693e6a2
Validity
Not Before: Oct 12 17:01:15 2026 GMT
Not After : Oct 13 17:01:15 2026 GMT
Subject: CN=41a3ae141c8b51cc60e8bd3f130890a814f9325e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:db:1c:98:11:b1:39:38:b7:fa:dd:e3:b4:31:
60:a7:33:50:94:40:f9:07:d8:ff:88:ee:e5:d3:8a:
97:f2:3f:70:95:69:3b:97:33:13:ee:c3:df:a4:dc:
9a:bc:42:7f:bc:d3:64:83:d5:c2:0c:35:ff:da:64:
7c:d9:2a:d7:a5:d7:1d:76:c9:91:55:e5:c9:f1:ee:
38:19:12:db:d2:cf:da:f3:b5:66:50:46:57:2f:06:
5e:fd:6d:83:9c:47:3b:a6:af:fe:e8:b2:39:3b:87:
84:59:0f:81:86:25:0b:10:e4:55:7c:a3:58:4f:74:
19:56:ba:1a:69:4b:02:37:ee:45:a0:f4:bc:d2:ff:
99:ff:fe:0a:56:88:d1:05:b2:97:5c:9c:6c:cb:52:
d6:1e:4b:f8:1a:6e:cb:02:b3:2c:19:17:99:6a:d5:
6f:b1:b0:d5:34:32:29:d3:80:91:03:07:9f:39:a7:
55:28:95:eb:5b:e3:e5:da:15:97:4a:22:a8:06:b3:
cd:4d:68:88:47:c4:9a:9b:c5:3f:40:ca:45:f0:dc:
a4:58:08:f5:36:09:b7:7b:e0:8c:8f:70:81:da:86:
77:8e:65:cd:3c:29:74:0a:a7:3c:f0:cf:8e:e1:84:
e3:05:a4:49:b8:83:83:4e:8a:f8:46:9e:b3:81:64:
bc:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A3:AE:14:1C:8B:51:CC:60:E8:BD:3F:13:08:90:A8:14:F9:32:5E
X509v3 Authority Key Identifier:
keyid:FB:F4:00:E6:3C:B2:62:C2:00:0E:07:1C:E9:0A:A7:2E:F6:93:E6:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_QA5jyyYsIADgcc6QqnLvaT5qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9b3f6f-9754-458f-b5b4-f95855f10763/1/1-_QA5jyyYsIADgcc6QqnLvaT5qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3c:6e:d0:75:c8:9b:9e:58:d0:f5:a8:d6:55:31:c5:db:e8:
24:0b:8d:9d:29:ed:1b:fb:93:59:ba:f5:7b:f4:02:4d:90:90:
b8:8c:e3:c1:da:43:02:99:c4:fc:4e:09:90:8d:a6:1a:4b:9c:
73:c7:1e:a2:ab:96:ae:5b:b2:26:db:bd:53:75:9f:1f:10:4a:
2f:3b:14:3e:b9:34:2f:6f:f9:6a:e4:4b:1a:8f:87:41:79:0a:
e2:b4:e6:75:ef:52:31:24:3b:1e:c1:d5:33:4c:2e:c6:c4:11:
98:93:68:9d:b5:d1:53:a1:a8:25:94:f5:3a:77:86:38:44:5b:
9f:d3:aa:80:b9:07:ff:9b:cf:a7:cf:38:21:fc:4b:31:76:c0:
6b:cf:29:df:8f:24:4d:08:9e:0b:44:1c:94:17:b0:c4:ab:54:
3a:e7:72:61:0e:b0:c6:d5:0a:4a:ca:9a:df:b0:5a:28:ca:c4:
36:29:ea:23:96:34:bf:02:7c:24:ff:ec:cb:c1:11:63:48:b3:
b7:2b:42:67:52:d6:51:2c:66:67:b2:3d:38:9a:40:93:32:19:
69:2c:b8:08:4a:ba:d2:b5:4b:7a:4c:54:f4:f0:3d:5f:4f:3e:
5a:9b:16:74:9d:b6:61:1b:5c:d5:4a:95:c4:26:10:c1:bf:bc:
e4:2c:61:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 22:43:24 2026 by rpki-client