Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
File: 1-hqD-7PhubY4MaaB9rciomUBbJw.mft (raw, json)
Hash identifier: UpXfN6o5eYraK6QZ/7ciKLFs3xNwqhVad5NnMJe8GJ4=
Subject key identifier: A2:72:DC:35:45:26:98:23:80:2F:AA:BB:35:76:26:34:CA:CE:8E:79
Authority key identifier: FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
Certificate issuer: /CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Certificate serial: 019D28F28C41B4BEFF7384D2DD55D721B51A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
Manifest number: 0FBC
Signing time: Thu 26 Mar 2026 07:01:17 +0000
Manifest this update: Thu 26 Mar 2026 07:01:17 +0000
Manifest next update: Fri 27 Mar 2026 07:01:17 +0000
Files and hashes: 1: 1-hqD-7PhubY4MaaB9rciomUBbJw.crl (hash: qbS+OBYKO7EYvFc3WPik84kD0xPM0tQG6Is6dCjL4oI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:8c:41:b4:be:ff:73:84:d2:dd:55:d7:21:b5:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa1a83fbb3e1b9b63831a681f6b722a265016c9c
Validity
Not Before: Mar 26 07:01:17 2026 GMT
Not After : Mar 27 07:01:17 2026 GMT
Subject: CN=a272dc3545269823802faabb35762634cace8e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a3:ae:a4:11:fd:b4:c5:e7:e4:ea:3d:37:44:
43:08:a5:45:f5:e9:ea:df:91:ea:72:24:76:2a:f9:
13:2a:39:fc:3f:91:42:63:11:5d:0a:61:d1:74:7e:
bd:23:6e:65:fb:fb:57:a1:e9:1b:a3:79:05:5f:79:
65:08:5b:d3:1a:69:79:7a:16:94:7b:35:27:af:15:
a9:77:2c:b5:3d:c8:30:9a:fa:90:7b:a7:84:d7:8e:
6a:9e:9a:04:4d:e7:0e:41:36:f3:3c:0b:41:b3:2a:
e0:9e:a8:9f:ce:7c:7a:0b:46:b4:8e:85:9e:0a:72:
38:48:0d:30:d0:37:98:f2:27:fa:e2:f4:13:41:4f:
30:82:75:a5:8f:2f:a5:c5:f1:0a:fe:b0:54:04:74:
4f:af:a9:40:41:5b:d6:49:42:11:c6:8e:98:7b:f0:
11:fa:93:34:69:92:27:85:22:77:f8:d0:bb:10:0a:
f3:1c:e0:87:39:78:90:39:40:f1:9f:4a:54:4d:e0:
97:fc:f8:c4:6f:8d:fe:4d:69:91:d9:72:cb:12:35:
a4:10:2b:a1:34:a6:8b:f5:51:35:8c:ff:9d:05:f9:
99:a8:fb:55:d1:32:48:1f:d4:02:c9:18:e3:a3:e5:
cc:6c:0f:d6:69:fc:78:ee:fe:b7:8c:9b:a7:4c:b9:
25:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:72:DC:35:45:26:98:23:80:2F:AA:BB:35:76:26:34:CA:CE:8E:79
X509v3 Authority Key Identifier:
keyid:FA:1A:83:FB:B3:E1:B9:B6:38:31:A6:81:F6:B7:22:A2:65:01:6C:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-hqD-7PhubY4MaaB9rciomUBbJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/592d43-40d2-4deb-96b4-d0126a5e3733/1/1-hqD-7PhubY4MaaB9rciomUBbJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:a4:48:49:1c:a2:8d:0e:28:79:2a:72:3e:37:64:ae:96:5a:
b9:fd:2a:cd:2f:a9:4f:d7:27:6d:b0:67:bf:6e:13:c1:cf:6b:
a2:0a:ed:5b:d7:d3:14:eb:c2:0e:eb:ec:f7:00:b2:53:33:30:
7d:21:91:27:26:35:f8:1e:11:ea:81:77:60:01:31:55:a3:de:
b9:1d:24:ac:79:bd:36:c6:bd:9e:45:87:53:bf:cb:73:df:85:
d3:6e:7c:e2:28:c3:78:78:a4:35:56:40:e7:89:98:39:19:03:
1f:60:dc:1e:ad:c8:8f:97:07:59:fe:de:09:f5:60:b4:ce:75:
d4:ae:29:5f:00:ff:04:f6:87:09:f7:c3:48:1b:3f:14:c7:a0:
9e:49:99:96:d8:c7:dd:e3:0b:3a:e2:70:91:25:2a:fa:aa:86:
24:bc:e3:6d:03:d6:69:d8:ef:4e:d8:e5:6c:61:74:5c:ae:9a:
91:ed:f5:3e:bd:d0:19:ef:e4:05:f3:bc:6e:1b:c2:b8:72:fa:
0d:dc:88:23:84:f7:1e:49:13:78:76:99:2d:da:13:ab:4b:55:
2b:d6:6a:e2:54:67:50:34:26:09:bd:cd:36:1a:4b:68:e7:61:
80:86:7a:07:0b:ff:b0:5c:ae:58:2a:0a:3c:70:76:7d:28:e4:
08:49:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:29:03 2026 by rpki-client