Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
File: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft (raw, json)
Hash identifier: CE05H3xoHlzyBd+sbWsMMJIt2HnpILp0k94NCQ/8HJ4=
Subject key identifier: D2:BD:53:C1:BB:10:48:C2:68:AA:E4:34:0F:B6:2E:16:0B:E0:F4:38
Authority key identifier: F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
Certificate issuer: /CN=f90588ca22897c69a102949a682f9f1a35835bab
Certificate serial: 019D2929745C06E233E98CF013490DE2B5EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
Manifest number: 18
Signing time: Thu 26 Mar 2026 08:01:15 +0000
Manifest this update: Thu 26 Mar 2026 08:01:15 +0000
Manifest next update: Fri 27 Mar 2026 08:01:15 +0000
Files and hashes: 1: 1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl (hash: Vctx0Xgkz27g7y/QcnOGIn9qCfSCy95ZngLiuXhH9tc=)
2: M0gW80SQeN8-sWeK4V4IiUTNncs.roa (hash: 5lMZVBWnzilRk6pbxwjn0M4dlZP9bPyruzS+ojF0eMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:74:5c:06:e2:33:e9:8c:f0:13:49:0d:e2:b5:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f90588ca22897c69a102949a682f9f1a35835bab
Validity
Not Before: Mar 26 08:01:15 2026 GMT
Not After : Mar 27 08:01:15 2026 GMT
Subject: CN=d2bd53c1bb1048c268aae4340fb62e160be0f438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ce:9f:9e:42:85:af:59:0f:50:9a:88:dd:e4:
66:5f:82:3b:07:03:4d:4e:dc:cb:90:14:31:c8:b6:
8f:e4:0a:87:13:78:f5:2e:f9:7f:00:2d:0e:9a:85:
4c:79:ce:ce:cf:60:14:ac:94:20:73:ff:7a:ef:19:
95:89:0d:ee:8f:4c:57:f1:a3:dd:d3:22:d2:b4:f1:
4e:59:22:f6:ee:47:75:32:c8:7c:34:4d:e9:73:8c:
86:34:f4:2b:e3:71:90:dd:6e:f3:fd:d3:5e:2a:8c:
8a:6e:d9:88:00:38:c8:11:4f:f9:c6:b7:a2:6d:68:
17:2b:98:c2:9b:01:8d:4d:67:20:67:a1:ef:87:7e:
e8:93:84:6f:20:63:2f:05:6a:e6:6a:b0:20:81:de:
14:9c:3d:16:b9:2b:f0:1a:51:d5:31:4d:35:0b:4b:
b3:6c:d8:b8:a0:85:11:46:1b:7c:95:d8:ec:ac:c4:
4e:3a:28:cb:7f:5d:31:91:ef:1e:ee:69:4b:d6:fb:
e6:78:33:44:73:1b:04:7d:74:e0:18:26:f5:96:86:
b2:2d:c2:7f:97:62:ee:20:fe:1d:4e:22:b5:2a:ab:
c1:8f:70:6b:70:79:eb:d3:69:6a:f1:90:ad:96:bf:
4d:22:a9:1b:02:81:90:57:b6:c6:ab:1b:df:6c:b9:
e1:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BD:53:C1:BB:10:48:C2:68:AA:E4:34:0F:B6:2E:16:0B:E0:F4:38
X509v3 Authority Key Identifier:
keyid:F9:05:88:CA:22:89:7C:69:A1:02:94:9A:68:2F:9F:1A:35:83:5B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-QWIyiKJfGmhApSaaC-fGjWDW6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/425f2b-0ec0-4657-a050-569f1dd0c01f/1/1-QWIyiKJfGmhApSaaC-fGjWDW6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:d1:4d:94:f5:c9:00:83:dc:3b:eb:1a:90:7c:71:41:6a:1e:
b9:7f:1a:f5:4e:3d:62:46:f5:74:4a:d2:04:3e:0d:5a:57:be:
a0:db:89:84:6e:a7:ae:b4:ac:84:ed:77:9c:ce:3b:4e:c2:c9:
fd:8d:73:9f:19:1c:3a:33:0c:91:7c:4e:59:f7:cb:5f:9a:af:
50:3f:31:ed:d8:f7:2d:c5:c4:8c:9d:ea:ac:be:67:6b:a7:58:
a9:b0:76:e0:25:24:15:3c:8a:1f:c4:d2:9a:fa:03:41:ec:d3:
b0:8f:dc:d8:a6:b1:92:63:73:39:74:19:0f:30:14:37:20:1a:
63:75:f0:3c:2e:3d:31:32:25:e7:99:b5:8d:8c:e5:ef:ad:bc:
93:65:ff:70:2d:11:43:ac:2a:44:8f:34:b6:6b:33:74:7e:95:
50:36:a8:62:36:1d:1d:fc:6e:d3:a6:91:f6:eb:eb:00:b6:75:
80:03:3b:d3:1e:b6:63:59:b3:5e:d2:4e:fd:e9:b1:a1:29:10:
02:1f:e8:9e:26:22:be:0a:e9:ae:5c:b7:62:78:53:0d:4e:d4:
f8:b7:71:f3:35:b2:67:eb:11:8a:cb:b3:07:b0:20:db:06:4c:
47:9a:ed:2e:88:cb:0f:ef:d7:b9:5b:fb:fa:6a:33:48:fb:68:
15:cf:ae:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:45:59 2026 by rpki-client