Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
File: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft (raw, json)
Hash identifier: T3O9dOG6NILG84f3ptliODbUS+J+Pz/zuM+O8bu8ago=
Subject key identifier: 5E:6C:A1:1A:24:57:F6:E0:59:E7:16:27:65:0F:B5:FC:BF:7A:AA:3E
Authority key identifier: 16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
Certificate issuer: /CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Certificate serial: 019D2628008EF4632A4D44C6A49F5F1D8491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
Manifest number: 1897
Signing time: Wed 25 Mar 2026 18:00:48 +0000
Manifest this update: Wed 25 Mar 2026 18:00:48 +0000
Manifest next update: Thu 26 Mar 2026 18:00:48 +0000
Files and hashes: 1: FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl (hash: UiBHSk+h52jBK67B1F6y6+1U7AbnOms46hWNcgD6zBM=)
2: SsijrrcZeuQhP_HaD4XVk_EWwn4.roa (hash: zKAAiwYgXYcXj2UxjxtGejsCb+VWZb5M4yKkcDyDWw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:00:8e:f4:63:2a:4d:44:c6:a4:9f:5f:1d:84:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16241dd83d8ac080b66504bf937459ffcec4ccc4
Validity
Not Before: Mar 25 18:00:48 2026 GMT
Not After : Mar 26 18:00:48 2026 GMT
Subject: CN=5e6ca11a2457f6e059e71627650fb5fcbf7aaa3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:92:07:1f:a7:d9:7b:42:e0:4c:73:61:cb:bb:
2f:35:1b:24:90:fd:aa:90:7a:0a:3c:1b:a7:2f:0f:
13:99:40:e9:43:d4:92:a9:68:cd:5c:bd:2a:83:1a:
e7:16:26:d1:62:cc:a1:55:8c:9f:ab:dc:99:76:58:
48:cd:fc:a4:ca:c2:a5:13:af:30:1a:95:82:4f:0b:
d4:03:0d:cc:d3:9d:37:fa:54:6c:a6:b6:38:15:e9:
e1:62:e1:98:c5:b0:9c:9b:9e:58:f0:1b:a5:24:d1:
88:8e:7e:53:ee:7b:ed:04:38:a1:c5:8e:48:e2:64:
bc:52:73:aa:8e:a9:5b:97:b4:44:1d:f0:8f:f0:d7:
82:92:e7:59:e0:ee:84:d0:4f:e9:28:d6:4f:38:0a:
fd:5e:52:b5:e0:08:af:81:15:86:5c:7c:70:59:c0:
37:67:74:36:e5:76:06:86:2e:bb:36:62:3c:a9:92:
bd:fb:71:1c:80:81:2c:84:13:07:04:aa:10:ee:b0:
d5:85:ee:76:f2:b5:4b:32:79:1b:e7:39:da:78:17:
59:b0:cf:7d:97:75:49:62:ee:87:3d:e8:81:ef:67:
59:3e:5e:72:45:0d:0b:f3:59:e8:4b:5d:de:7a:30:
f1:fa:5d:3b:36:14:24:fd:a1:21:76:c2:94:eb:bc:
e7:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6C:A1:1A:24:57:F6:E0:59:E7:16:27:65:0F:B5:FC:BF:7A:AA:3E
X509v3 Authority Key Identifier:
keyid:16:24:1D:D8:3D:8A:C0:80:B6:65:04:BF:93:74:59:FF:CE:C4:CC:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/b90060-5aaa-43ea-bceb-5e749f4341a4/1/FiQd2D2KwIC2ZQS_k3RZ_87EzMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:11:56:ee:9a:d4:4e:60:3f:58:5c:94:b8:2a:ae:bc:7e:2c:
23:55:f7:73:f6:71:99:3e:2b:fc:5f:79:67:9c:19:0b:7c:e0:
35:1b:4a:e7:14:24:7e:39:ca:69:d1:1e:43:28:dc:01:c6:3e:
29:5d:71:78:fd:76:7e:b2:f7:c8:7f:53:d8:11:a4:a6:e0:fe:
f6:fc:65:6c:ac:fe:53:f4:93:80:74:e2:dd:b3:62:f4:27:df:
be:c2:16:b9:97:9c:6d:76:10:e0:62:f7:ab:ce:3f:4f:d5:1a:
5c:13:4f:89:b5:96:60:76:28:2c:58:24:ba:da:15:94:35:ef:
a8:eb:23:5f:d5:33:0f:4e:77:56:8c:d5:34:bb:b3:7c:93:1f:
2c:9f:18:23:22:34:1f:a3:0c:b7:4a:35:b3:ff:23:55:c5:17:
25:91:9f:57:dc:1d:d2:16:d8:7e:d6:59:78:8e:18:30:f7:95:
dc:41:b6:ad:8c:51:ae:2e:c7:16:bf:ee:09:7b:ba:5e:50:47:
84:e3:c1:f2:5b:cb:bf:bd:a8:a4:67:08:ee:f4:c8:f4:3e:b3:
d1:09:4b:bb:62:f8:3a:c7:8d:5a:70:89:f5:65:24:a6:5f:0d:
f5:10:4d:ef:3d:92:d9:19:9d:54:ba:48:79:ad:29:e2:17:ea:
be:31:a5:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:23:53 2026 by rpki-client