Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier: op9lUSIiOthRsxQFxxgwmcqpQLRuZcFVCmA1e//Ndwg=
Subject key identifier: EF:78:D8:C5:E4:42:1B:42:67:91:7E:D4:7D:7E:9E:E2:BB:D6:C3:3D
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 019D29CEDAF09405022987B80AD8F091D103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number: 188C
Signing time: Thu 26 Mar 2026 11:01:55 +0000
Manifest this update: Thu 26 Mar 2026 11:01:55 +0000
Manifest next update: Fri 27 Mar 2026 11:01:55 +0000
Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: r5+Xl3CljgHE0mEgLZZTyINU8Nq/JXBolDpEh+XNvMI=)
2: P1yj3gjDhxChJcFO8Skm9pkXt48.roa (hash: xfZq4sva3XVYvdr878z0V/BBEkb+f01RPeig0MyhrEo=)
3: ocI1Tj5xjc77HCxaih4HTT8zJWQ.roa (hash: 7GTm6dNpL+1aKtBHlqS15Lk5zVrRS8hQJ81O+NY5Eh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:da:f0:94:05:02:29:87:b8:0a:d8:f0:91:d1:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Mar 26 11:01:55 2026 GMT
Not After : Mar 27 11:01:55 2026 GMT
Subject: CN=ef78d8c5e4421b4267917ed47d7e9ee2bbd6c33d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:35:e7:f2:e7:68:b2:ae:75:fe:28:b2:39:df:
62:f9:01:7b:6b:9e:e8:51:aa:27:22:c9:8f:ae:0d:
5e:2f:7e:27:5c:92:2e:3e:61:60:64:b5:1a:6f:19:
0c:b4:f1:11:ee:33:43:3a:14:6f:19:5d:88:8a:5d:
5f:3d:b3:1b:7b:97:0d:7d:5e:43:11:49:0a:f8:ec:
59:42:c9:45:64:d5:d9:6d:6b:ca:95:e7:96:ed:27:
c0:0d:c4:7f:a1:61:de:c4:3b:07:5f:d3:27:7b:01:
71:a0:d0:90:ee:95:ed:ed:04:38:01:ca:07:b6:08:
f1:46:a9:7c:d3:3e:84:e1:f2:74:9e:87:a3:50:0d:
d6:df:2d:a5:57:6f:5b:52:3b:78:db:0a:3d:f5:d8:
29:52:46:2a:75:d9:5e:de:98:4a:5b:dd:ee:e3:49:
ae:c1:59:e0:62:33:59:7f:5b:de:ae:0d:de:22:fb:
c1:bb:1d:f1:85:17:9d:44:e8:e0:a4:78:e0:3c:78:
dd:8a:ed:45:3e:cd:5a:df:15:91:11:78:6f:b3:31:
47:e7:33:86:43:29:b4:32:05:cf:a3:a4:61:d6:eb:
30:6a:be:12:c5:05:3a:dc:3d:a4:dc:9c:89:65:4e:
ef:cb:2c:0f:83:b4:aa:0d:af:1e:d1:76:e9:df:24:
dc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:78:D8:C5:E4:42:1B:42:67:91:7E:D4:7D:7E:9E:E2:BB:D6:C3:3D
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:0e:5c:02:fe:8b:63:31:87:a1:5f:0d:41:06:71:a5:78:32:
24:0d:46:be:e4:eb:6a:50:09:e8:12:e4:23:d4:4c:be:2f:66:
32:5e:52:6b:c5:76:fc:c6:e3:ba:bd:7d:17:94:c0:ae:39:7b:
c5:13:ce:a1:4f:d3:a1:0e:68:8a:6c:95:a8:e8:f6:13:43:c8:
b1:1b:5c:4f:58:19:ff:54:b4:ee:b0:59:cf:b9:41:cd:ea:f8:
b1:46:6f:1a:d6:6e:8a:61:bf:e2:98:2f:1f:06:31:39:5a:a7:
22:f3:18:bb:ab:1d:81:32:0d:6a:f4:b5:aa:40:4b:f5:7c:6e:
f1:a6:6b:bf:c6:d8:d3:0a:cd:b3:3b:57:c5:00:ba:c3:52:4e:
3c:c7:33:2f:fc:25:5b:02:ba:a7:34:dc:e2:9c:0e:0a:a5:2e:
28:37:2e:f9:57:b1:af:33:e5:45:04:3c:a9:2b:66:7b:f2:71:
1c:46:3d:f2:0b:b6:9c:00:77:4b:9b:1d:5a:21:73:0e:c5:71:
cf:d7:ce:15:6b:f6:19:f5:9f:60:7f:b4:0c:8d:ae:ea:0e:a9:
63:92:aa:0f:f9:ae:5b:68:03:c6:8c:c4:57:1d:26:2f:6b:50:
26:11:8c:73:32:c1:4d:ce:30:eb:d5:5a:2d:7b:46:d8:6b:33:
88:06:33:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:18:26 2026 by rpki-client