Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
File: fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft (raw, json)
Hash identifier: BlulgVGsZ1jKl0+hQ7j5Fay89c2Of1WolwLO/tBGRAE=
Subject key identifier: 6A:90:FB:92:B6:C8:81:0D:BD:94:5D:23:84:61:45:76:29:38:4B:23
Authority key identifier: 7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
Certificate issuer: /CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Certificate serial: 019E1DC7484330ACBBD1C9BC5AC225ADD6FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
Manifest number: 1898
Signing time: Tue 12 May 2026 20:00:59 +0000
Manifest this update: Tue 12 May 2026 20:00:59 +0000
Manifest next update: Wed 13 May 2026 20:00:59 +0000
Files and hashes: 1: fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl (hash: 95D+cZvrCW0YBVI+vvFe26njEfYrWR2+8WymO7IHUY4=)
2: uuyf9SL1IzQsxC4GwsHv2Aqvi6I.roa (hash: bWBF8Lzkc1fXhVOcL+v1lM3xBjFclLxIjyc/HWhj0fY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:48:43:30:ac:bb:d1:c9:bc:5a:c2:25:ad:d6:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d01a5d90dc3a836ceb6381efc7534e129f43a4c
Validity
Not Before: May 12 20:00:59 2026 GMT
Not After : May 13 20:00:59 2026 GMT
Subject: CN=6a90fb92b6c8810dbd945d238461457629384b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:0f:e4:7f:4c:e8:4e:e5:3f:d6:fb:00:f2:6b:
74:9f:ea:39:9d:dc:7f:5b:8b:62:ae:ca:96:98:1c:
45:83:fc:86:a1:11:80:52:f7:d4:c9:15:41:06:7c:
f2:6d:54:8c:64:e9:4b:d2:56:26:0a:88:dd:33:f5:
78:aa:1b:69:38:b3:86:7a:86:f5:22:37:4c:68:df:
77:11:7e:e5:04:68:b3:8a:7a:d4:00:58:55:56:58:
b1:06:22:d0:69:cd:fc:92:24:49:b3:25:f2:a5:4b:
16:a5:51:23:c6:53:6f:2a:60:e5:9d:86:da:6b:8c:
e6:88:ab:25:7a:cf:8a:67:32:6f:27:3f:d1:b8:2e:
98:79:e8:02:68:0f:72:4f:f0:9f:36:71:c2:38:b4:
a9:3d:d0:34:9b:21:ee:1f:e1:af:b6:70:39:f4:b9:
a3:8f:5e:7f:3a:19:49:19:ce:c6:18:a7:86:d9:71:
27:2c:f6:2c:ae:49:11:5f:79:a6:87:b0:5b:8f:b9:
68:a1:d6:d4:8b:4b:8e:a6:db:68:98:87:2b:31:65:
7e:ae:c5:e5:e6:b4:cc:e1:08:cf:3c:42:eb:ed:80:
f0:4b:16:5b:ff:f8:ab:77:1b:22:80:5b:7c:f3:8d:
2e:f9:cf:ae:ea:b5:eb:b2:3c:6c:99:2d:48:4a:86:
c6:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:90:FB:92:B6:C8:81:0D:BD:94:5D:23:84:61:45:76:29:38:4B:23
X509v3 Authority Key Identifier:
keyid:7D:01:A5:D9:0D:C3:A8:36:CE:B6:38:1E:FC:75:34:E1:29:F4:3A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQGl2Q3DqDbOtjge_HU04Sn0Okw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/21b007-a086-4312-9d23-62f666473b21/1/fQGl2Q3DqDbOtjge_HU04Sn0Okw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5f:7f:cd:a2:fd:bb:37:40:3c:59:0f:e0:1e:34:da:34:2c:
bc:19:ab:2e:b1:17:29:d0:71:bd:a6:c7:2e:61:e8:9e:0f:5b:
19:ae:10:ad:17:6f:0f:d6:7f:0d:e0:62:17:d6:83:76:fd:8b:
8e:fa:54:ac:af:21:8d:d1:6b:8a:97:34:af:0d:f1:16:e5:3a:
45:37:79:74:43:5a:90:67:ad:25:7a:4a:23:a6:ca:5f:2a:20:
bb:18:ec:9d:e7:63:6e:6b:5e:ee:8e:51:67:36:06:e5:42:13:
00:9f:02:cc:d3:fc:3d:19:83:35:a3:34:65:d0:19:43:f1:91:
22:98:42:5b:5a:54:1b:f3:c4:08:3d:02:3a:67:90:80:5e:5a:
99:7f:9e:39:88:e1:b3:29:46:09:ad:cb:00:fa:49:41:8a:f4:
ed:dd:54:ac:96:39:22:9b:7a:85:2d:eb:3e:e3:02:31:5e:be:
f7:e1:09:e5:ff:ed:6c:c9:4d:2a:9c:f5:71:7d:f2:2d:6a:e8:
78:fe:6c:98:c4:d5:65:d9:32:9b:47:ab:8d:cf:a9:b1:b9:ed:
c6:31:cf:e0:cf:91:7c:36:59:94:c4:aa:47:ba:dd:02:f8:8d:
32:a2:89:de:73:56:ed:67:aa:c7:a8:b9:b7:61:76:a7:d9:93:
9c:9b:87:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:22:35 2026 by rpki-client