Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
File: FQmDQfJrtURkBQe9iAqZp-eiNdA.mft (raw, json)
Hash identifier: ao762goyPaJFG2FsZGnKVFn5TqiNWewm8riYJeCdZAs=
Subject key identifier: 37:4C:93:16:11:77:E9:BC:41:13:EA:C5:0B:7E:EC:11:C9:F6:59:37
Authority key identifier: 15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
Certificate issuer: /CN=15098341f26bb544640507bd880a99a7e7a235d0
Certificate serial: 019D2961075823AA243C9375BF8E5EE1D284
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
Manifest number: 1816
Signing time: Thu 26 Mar 2026 09:01:57 +0000
Manifest this update: Thu 26 Mar 2026 09:01:57 +0000
Manifest next update: Fri 27 Mar 2026 09:01:57 +0000
Files and hashes: 1: FQmDQfJrtURkBQe9iAqZp-eiNdA.crl (hash: 1R7Ci/6fjqJ2Rhx768ZK60XHFQNjalVWnh2xfDD6J8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:07:58:23:aa:24:3c:93:75:bf:8e:5e:e1:d2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15098341f26bb544640507bd880a99a7e7a235d0
Validity
Not Before: Mar 26 09:01:57 2026 GMT
Not After : Mar 27 09:01:57 2026 GMT
Subject: CN=374c93161177e9bc4113eac50b7eec11c9f65937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:04:c6:b6:61:40:ff:b8:66:66:02:4e:83:c6:
62:82:52:7e:8d:59:dc:c3:66:da:35:6d:31:64:01:
6d:72:d5:47:62:f0:35:4e:83:1c:5c:72:cb:7d:18:
7d:95:c1:3d:87:86:77:28:a4:dc:08:f5:9d:73:3e:
ff:b0:bd:d7:b3:45:7f:0f:85:69:a7:de:fb:1e:de:
d9:96:7f:3b:51:f0:6c:be:cb:ca:6c:8f:8f:d2:96:
50:a0:c8:2b:a1:81:32:9f:1d:3b:bc:80:f2:27:e2:
68:d1:36:c9:e9:c4:94:ac:20:0a:2d:38:64:dd:b8:
8f:77:ff:14:69:fd:87:28:1b:a1:e4:12:fc:bd:df:
a1:cf:7c:7c:e9:10:8e:c3:fe:2f:c9:7b:6f:4a:f6:
52:5c:3c:c6:5b:05:b6:d0:3a:91:ce:93:69:18:9d:
e9:b6:4b:20:fe:71:47:cc:0f:aa:1a:a7:57:73:9a:
03:85:62:e5:82:67:85:4d:f1:a1:49:bb:54:9c:f3:
2b:31:d8:5e:e3:ca:87:e0:8f:22:02:c6:35:b0:b5:
cb:20:3d:80:8c:54:2e:93:cd:c8:bf:e7:a1:d2:34:
30:62:08:41:d9:fc:c9:4e:5b:74:cb:8d:03:01:2d:
71:9a:e5:67:2a:d2:eb:39:18:fe:0f:82:c7:ff:6a:
43:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4C:93:16:11:77:E9:BC:41:13:EA:C5:0B:7E:EC:11:C9:F6:59:37
X509v3 Authority Key Identifier:
keyid:15:09:83:41:F2:6B:B5:44:64:05:07:BD:88:0A:99:A7:E7:A2:35:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQmDQfJrtURkBQe9iAqZp-eiNdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/1f2ea1-a017-4385-8394-9ed9a993f508/1/FQmDQfJrtURkBQe9iAqZp-eiNdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a4:da:f2:87:06:8b:5d:d0:8d:de:db:97:28:82:8b:80:77:
7f:4f:0d:9d:a3:a1:83:07:cd:14:cf:b9:d2:8f:69:b2:6c:e7:
0d:7b:e8:ec:85:cd:6c:69:8c:d0:39:45:ec:3e:2e:82:79:a2:
27:cd:ff:ac:2c:5a:88:93:1c:d3:be:64:66:c8:f0:08:82:71:
15:ab:1b:bc:5f:0d:9b:ba:2c:b7:9c:bb:82:0a:57:65:24:1a:
71:fa:66:2b:e2:69:70:66:c0:5b:52:1c:fe:54:e3:c1:11:c1:
73:bb:76:33:d8:41:07:73:06:73:83:73:54:26:17:ab:a7:e1:
b3:e0:cd:46:33:d1:81:5a:b9:99:23:3a:54:fd:46:45:23:64:
cf:f0:a3:2d:e4:bf:2c:39:4b:81:72:61:ce:a7:96:68:47:93:
53:0e:e6:a5:f9:93:a9:d1:1c:0b:79:c0:ab:ad:36:cf:06:0c:
88:36:42:11:8f:53:f1:d5:ef:cd:c3:05:2c:a6:47:07:d2:64:
8a:38:f5:47:bb:94:70:78:fb:c4:bb:1e:41:e1:0b:03:fe:d0:
9d:5b:86:1d:b1:6e:85:b8:d7:06:ab:78:c7:6d:bf:a2:c8:fa:
e8:95:b4:8b:32:37:ec:85:fa:8a:f3:c4:bb:80:88:0f:a3:e3:
d6:65:c9:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:53:46 2026 by rpki-client