Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: z3oLB8PKDhtOWkNZxuGXlzzMFCzIizd8+rm7GpmQxSw=
Subject key identifier: F1:67:C4:AD:EE:2C:90:4F:DB:C3:57:37:EF:6E:76:8E:1C:EA:F5:0F
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 019E1E354FF53D385CC9F485BEEFA1579B8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 103B
Signing time: Tue 12 May 2026 22:01:10 +0000
Manifest this update: Tue 12 May 2026 22:01:10 +0000
Manifest next update: Wed 13 May 2026 22:01:10 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: m4bMUHgC29Jk7fLwdtINEoJE1duUAGEAoxTbarOdG54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 22:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:4f:f5:3d:38:5c:c9:f4:85:be:ef:a1:57:9b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: May 12 22:01:10 2026 GMT
Not After : May 13 22:01:10 2026 GMT
Subject: CN=f167c4adee2c904fdbc35737ef6e768e1ceaf50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7c:7a:9e:8d:f3:b7:02:e3:cf:b0:4f:f5:71:
20:1f:66:5e:3c:92:8f:97:d4:81:ef:de:da:90:43:
31:79:f7:1f:64:00:5f:0c:08:bc:a5:99:da:e3:fb:
cb:56:ac:90:2c:68:67:1b:3a:84:30:d5:43:e9:3e:
8e:49:92:f1:c1:d3:47:c6:85:05:ef:9a:76:c5:ef:
0c:16:27:3a:2d:84:a7:39:45:5b:f8:2d:eb:ee:93:
92:e9:ef:8b:b3:27:8c:29:ef:55:85:fc:3d:69:c5:
b5:2b:3c:7e:a9:5c:4a:8e:ea:d4:d7:08:58:47:29:
b7:b7:3d:7e:06:4e:19:2c:52:e0:44:fd:16:30:08:
f3:47:f9:71:ad:4a:47:8e:17:11:f1:04:2c:d8:a2:
71:ca:09:b7:28:4e:4b:7c:c2:06:ac:f9:d8:9d:c1:
93:bb:b2:ab:db:b1:ac:2c:ac:0f:15:8e:5c:ea:77:
1c:97:b2:29:04:92:66:97:60:42:72:5d:01:95:3c:
50:a9:83:4c:35:68:14:d7:4d:51:48:95:ec:8b:21:
3d:15:eb:1e:c4:46:a8:5e:f4:c2:81:76:7f:f2:c0:
df:8d:3e:f9:de:32:83:c5:c4:a6:02:dc:fe:2d:6b:
14:07:ca:cd:91:e9:75:d0:2e:38:75:dc:29:33:3a:
ef:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:67:C4:AD:EE:2C:90:4F:DB:C3:57:37:EF:6E:76:8E:1C:EA:F5:0F
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:0c:e3:f1:c2:66:09:93:9e:8b:b5:79:57:40:b6:5b:34:2b:
38:1d:90:43:49:86:9d:7e:46:e1:93:85:a4:e0:27:78:38:e8:
b9:44:fe:3b:43:41:f9:3d:95:1e:6e:e9:3c:b8:5c:94:01:1b:
94:55:e2:82:33:5c:8f:36:ac:2d:5b:59:2d:6b:42:ba:fa:82:
52:98:53:85:10:9c:2f:ea:b0:cb:dc:06:89:68:0e:40:f2:00:
52:b2:eb:c7:f6:13:09:d9:2e:bc:aa:00:1b:fd:c7:0b:a8:8c:
ff:81:80:c0:e7:43:33:90:bf:ca:46:f1:4c:0f:99:6e:ae:25:
b5:44:cb:46:22:a9:83:0a:76:65:5f:dd:88:81:2a:1a:18:98:
e8:e9:75:95:d3:16:be:e7:8c:53:bf:22:57:f7:7f:a0:db:25:
d6:6d:d2:3a:11:18:3a:9e:5d:d2:d0:4c:fb:53:bf:1b:af:e9:
48:d2:34:a7:66:ef:75:f0:e2:f8:92:18:02:8d:dd:85:38:b5:
da:87:8f:1d:46:ef:2f:3b:f1:57:ea:80:25:12:dd:30:0e:d6:
56:e1:25:8f:b0:05:b4:67:c7:29:6e:c9:56:a2:f4:83:ca:ee:
bc:9a:97:af:9a:c2:82:2f:07:cb:ab:81:c7:4b:57:65:a9:23:
16:aa:fe:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:30 2026 by rpki-client