Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
File: 1-FJeQSxq4rFsrDns8ojC4uanXeI.mft (raw, json)
Hash identifier: ffBJSmMzDWU0XpGmVWaeKrYPMFktN45iObj4Su0GacA=
Subject key identifier: 79:03:52:95:D3:25:9C:EA:34:BF:31:C8:84:2E:03:D7:77:AC:32:9A
Authority key identifier: F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
Certificate issuer: /CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Certificate serial: 019D33E3ED983D65998285227461C5FB7180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
Manifest number: 048D
Signing time: Sat 28 Mar 2026 10:01:08 +0000
Manifest this update: Sat 28 Mar 2026 10:01:08 +0000
Manifest next update: Sun 29 Mar 2026 10:01:08 +0000
Files and hashes: 1: 1-FJeQSxq4rFsrDns8ojC4uanXeI.crl (hash: bnxQYRl+528ilDILx0lAvGLvhb1RpYpnfMjY4Cwo/5U=)
2: I_i8axcztRmQYBKxo7LufShIxc0.roa (hash: 2/unXqyBT639RbP4a6kb5aLTC3tSiKOPrQbrbpRMwdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e3:ed:98:3d:65:99:82:85:22:74:61:c5:fb:71:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8525e412c6ae2b16cac39ecf288c2e2e6a75de2
Validity
Not Before: Mar 28 10:01:08 2026 GMT
Not After : Mar 29 10:01:08 2026 GMT
Subject: CN=79035295d3259cea34bf31c8842e03d777ac329a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:10:83:29:15:a8:ce:ac:a3:39:63:1e:9d:7a:
90:59:88:5b:b8:60:ed:b7:2a:9a:10:8a:95:9e:3b:
a1:47:0d:66:58:60:3f:71:6a:fb:41:37:a4:f5:f5:
43:2a:a3:cf:db:8c:bc:e8:c5:22:95:2d:d7:83:72:
1b:15:2b:5a:38:02:52:48:53:73:91:0f:d6:f1:e1:
6f:ec:8e:39:b4:83:6a:74:0f:e0:3c:46:a7:f9:f0:
e0:af:c1:7c:37:e0:c3:1b:5d:46:c2:15:40:f6:ec:
73:fb:e9:fc:b6:5f:da:9b:e5:cb:5c:74:7d:7e:87:
86:3e:e1:ab:0c:f5:2a:03:4b:25:80:97:02:f7:26:
37:cb:8f:4b:3f:4e:0b:56:0f:64:e6:2f:6b:65:61:
68:ce:cd:17:72:0d:ca:47:0d:73:83:9c:c8:13:c9:
d1:f7:97:27:94:53:e8:1f:bb:77:cd:ff:8e:d8:f0:
d2:a6:b7:c2:03:70:ba:78:92:df:9e:bf:15:17:89:
ec:52:5b:81:60:f8:a0:9f:88:33:45:45:90:ce:c9:
10:f8:39:a9:a5:92:f8:c0:a2:27:43:6d:6f:17:7a:
c4:3f:2e:59:86:93:05:ca:cb:7d:4e:4d:0c:34:bf:
d6:13:4f:7f:68:6f:f7:10:3e:ef:94:7d:fe:7e:cc:
48:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:03:52:95:D3:25:9C:EA:34:BF:31:C8:84:2E:03:D7:77:AC:32:9A
X509v3 Authority Key Identifier:
keyid:F8:52:5E:41:2C:6A:E2:B1:6C:AC:39:EC:F2:88:C2:E2:E6:A7:5D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-FJeQSxq4rFsrDns8ojC4uanXeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a3fd8b-686b-4e6c-8b7b-4310c39b1f44/1/1-FJeQSxq4rFsrDns8ojC4uanXeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e1:eb:01:0e:01:02:c7:e5:fa:c0:4f:b4:97:78:dc:2f:ed:
2a:a1:f2:6a:67:8f:db:5b:7e:2b:1d:2e:2a:2f:7c:ef:0e:6c:
79:c2:a6:e9:f0:3a:73:d8:21:6b:75:d8:43:ca:c9:96:20:8c:
83:34:4b:49:62:f2:29:7c:55:ce:c3:7d:b3:a5:d6:3e:fe:05:
b0:76:2b:18:b3:7d:00:6c:64:2d:9d:7c:56:82:62:48:86:9d:
86:2d:53:72:b3:e3:cb:0b:e0:c7:7f:cf:d6:cf:c8:51:e2:4a:
2d:db:7c:a4:3b:33:22:9a:05:0a:59:2a:44:be:b6:c2:46:84:
60:e3:8f:71:dd:3c:6a:85:9f:05:f4:65:c6:a6:1a:4f:65:b7:
10:74:49:70:20:2f:aa:44:6e:b4:d3:cd:e0:79:c9:37:48:6e:
b4:d5:5e:be:da:c7:82:7c:45:e5:77:04:f8:64:19:33:5a:4c:
4d:62:5b:16:fd:5b:57:9a:18:b9:a2:c1:70:48:b9:0b:77:87:
c9:75:e5:39:be:69:de:d6:2d:94:ea:37:32:37:92:5e:74:fe:
6c:3a:6e:1f:b6:39:08:e0:5b:65:a3:de:7f:68:40:2d:51:e8:
41:a2:4d:02:0f:71:27:ee:44:11:8d:88:10:7f:51:01:2c:37:
f1:69:97:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:07:34 2026 by rpki-client