Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
File: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft (raw, json)
Hash identifier: tOAPd5kRJimUIZsvBzH5nctoJuB9pr1D/0fVaJjWHwM=
Subject key identifier: 74:4E:7D:D0:69:4E:53:B8:98:82:EA:B9:05:19:0A:19:2B:E7:56:66
Authority key identifier: FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
Certificate issuer: /CN=faa61e29c166bf0635c8cefe8da82104a783b454
Certificate serial: 019D2961962E0CF9E9943898511A901792EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
Manifest number: 1886
Signing time: Thu 26 Mar 2026 09:02:34 +0000
Manifest this update: Thu 26 Mar 2026 09:02:34 +0000
Manifest next update: Fri 27 Mar 2026 09:02:34 +0000
Files and hashes: 1: 1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl (hash: mwm+WeqTNhdB6qw+WVhYf4GBXK/dgDg1HTwggmMB760=)
2: 3vC4pYqybSvnyiv9AWSFuid8GOw.roa (hash: v8QGywV5eLuGaT2Uqfo+veGfvP9FzA92hTs+zKxoZtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:96:2e:0c:f9:e9:94:38:98:51:1a:90:17:92:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa61e29c166bf0635c8cefe8da82104a783b454
Validity
Not Before: Mar 26 09:02:34 2026 GMT
Not After : Mar 27 09:02:34 2026 GMT
Subject: CN=744e7dd0694e53b89882eab905190a192be75666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:da:b2:62:cb:20:24:f3:1a:21:e0:94:01:cd:
4c:63:e9:bd:16:98:1f:99:87:c3:22:13:d6:4d:12:
1f:50:b4:6e:b8:de:24:ff:0f:8c:25:2e:cb:3a:df:
4a:94:f4:b2:2d:07:24:2f:52:65:e4:7f:bb:7d:dc:
21:8a:3b:8c:4b:a0:79:67:41:84:93:8a:2d:30:0f:
f6:20:b6:20:b5:f1:2c:53:2e:e0:28:e8:05:db:06:
9c:b7:6f:99:94:a5:91:8a:f0:57:33:a7:41:ac:e9:
47:ed:17:01:f8:cd:ec:e7:be:06:06:8b:da:98:7d:
b1:4f:19:af:e4:7c:19:0f:76:78:40:f3:44:42:8e:
9b:d9:8c:b9:79:dc:1f:6d:78:39:9a:25:50:44:ff:
6f:af:72:15:bc:d1:de:61:ac:ce:35:cd:f7:c7:73:
03:b1:bf:c5:e4:08:6c:9d:72:92:fa:5b:0b:85:cb:
28:8c:1c:6f:f8:b1:ca:89:a9:78:42:a0:a3:e6:c5:
92:2b:07:b2:ff:c0:2c:75:1e:16:7a:76:71:bd:2c:
42:68:5e:d3:fc:09:78:15:f6:9f:6b:cf:61:39:8c:
68:85:81:05:6c:f6:9b:4a:10:92:33:b4:48:ce:7f:
e2:68:1f:07:b9:43:d5:a6:af:c4:bb:13:23:52:c0:
f0:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4E:7D:D0:69:4E:53:B8:98:82:EA:B9:05:19:0A:19:2B:E7:56:66
X509v3 Authority Key Identifier:
keyid:FA:A6:1E:29:C1:66:BF:06:35:C8:CE:FE:8D:A8:21:04:A7:83:B4:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/14671e-86d2-42fc-80d9-825d3ff1dde8/1/1-qYeKcFmvwY1yM7-jaghBKeDtFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:dc:f1:7f:14:44:b9:67:02:c0:44:5d:a8:bd:c6:29:71:c7:
e3:eb:16:47:35:5a:9c:5e:71:d1:bc:fe:71:3b:40:ee:ab:2d:
3e:12:ce:e9:94:d2:09:c5:90:6d:6b:a7:99:70:4e:24:03:31:
cb:c0:b5:5b:36:44:d7:3e:37:14:d9:bd:7b:cc:5e:57:c5:9a:
66:d6:22:6c:57:76:84:2e:9a:4c:45:c0:27:f3:81:cf:8b:4e:
e1:1b:ae:bc:80:f6:01:93:97:a7:ee:70:32:15:ed:db:56:80:
74:f3:26:af:e2:37:04:85:70:f7:f5:7f:b4:8d:4b:ff:ad:53:
dd:41:8b:7b:47:c7:79:72:53:62:a2:a3:29:4a:e0:be:95:75:
39:19:9f:ab:91:bd:b2:f8:b7:fa:d8:14:c7:8e:b5:85:44:db:
82:c1:8f:6a:3f:a0:59:b1:19:d5:1e:5f:e8:17:0d:6f:ba:7e:
d4:37:32:de:06:fc:b1:60:50:27:0b:88:e5:a6:da:c7:dc:66:
79:56:29:13:e6:a0:9b:93:1e:79:c4:21:a3:ab:08:da:40:d5:
d1:a9:66:b5:97:4d:03:48:1d:ad:84:67:28:e8:1d:4d:b7:95:
85:47:13:b5:0e:ce:38:a8:76:65:08:dc:10:23:28:b3:84:56:
92:33:59:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:01:57 2026 by rpki-client