Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
File: 1-qWsXSKtkHinLhNplihyR-nx4TE.mft (raw, json)
Hash identifier: HIYJgBlFkOqykTTlOvaDCru1kh6O/e9uzLc9ociWGgI=
Subject key identifier: 09:6C:DA:81:FB:68:F4:3F:A2:B9:EC:6B:4E:CE:D4:82:0E:74:55:13
Authority key identifier: FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
Certificate issuer: /CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Certificate serial: 019E1DFDF56A23B1EFF22BE5272BD490459A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
Manifest number: 1434
Signing time: Tue 12 May 2026 21:00:43 +0000
Manifest this update: Tue 12 May 2026 21:00:43 +0000
Manifest next update: Wed 13 May 2026 21:00:43 +0000
Files and hashes: 1: 1-qWsXSKtkHinLhNplihyR-nx4TE.crl (hash: j5q2FplRGPF3MreVR3ANgrz1GHEBasdUTZuwUulDt2E=)
2: Sg5TLd0LRzU1Kyw2aXOACqsG4yA.roa (hash: 4vlEE5O6rdTk7GzU24AHkksV5knXEZvyv5QSu+1PBWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:f5:6a:23:b1:ef:f2:2b:e5:27:2b:d4:90:45:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa5ac5d22ad9078a72e136996287247e9f1e131
Validity
Not Before: May 12 21:00:43 2026 GMT
Not After : May 13 21:00:43 2026 GMT
Subject: CN=096cda81fb68f43fa2b9ec6b4eced4820e745513
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:05:d6:0c:08:b4:7d:13:5f:e8:65:d4:f3:97:
59:45:64:d7:45:79:8a:b4:35:fc:d8:bb:40:0a:a7:
54:70:1d:bd:e1:9f:0f:7e:e5:e9:a0:bb:77:9c:ac:
88:35:29:b0:56:e4:49:fd:ff:11:e4:2a:84:9b:15:
b9:af:77:70:77:bd:35:15:c2:01:ec:3f:03:fe:fb:
f7:4b:92:ad:62:64:c3:dc:01:4e:38:ad:ac:fd:cc:
41:d3:86:4f:1b:48:d6:d1:43:6b:f9:76:6b:af:b2:
c6:e9:44:2e:72:51:c5:43:18:f4:f5:d9:42:46:48:
82:1c:87:44:c8:9a:ba:13:6d:b9:08:30:d0:c1:29:
14:7d:57:6a:b9:c2:4b:b1:75:66:44:b1:c3:52:9f:
5a:3b:00:f9:25:ce:41:cb:29:73:2a:3d:7f:0f:c1:
2d:e5:40:d8:12:2e:e2:20:a0:24:be:81:1e:39:51:
4c:50:e8:8c:4f:9e:96:28:fb:ef:54:b4:b6:28:53:
54:c4:19:95:f7:03:f7:dc:58:f3:f2:ef:b7:f3:03:
fc:9c:8c:c7:a7:13:54:3f:86:84:90:f6:2b:88:7d:
f4:e1:88:c1:3f:09:1b:53:4a:c5:d3:c8:10:1f:24:
c4:ad:53:93:a7:c5:16:53:73:2e:11:16:35:74:88:
c0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6C:DA:81:FB:68:F4:3F:A2:B9:EC:6B:4E:CE:D4:82:0E:74:55:13
X509v3 Authority Key Identifier:
keyid:FA:A5:AC:5D:22:AD:90:78:A7:2E:13:69:96:28:72:47:E9:F1:E1:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qWsXSKtkHinLhNplihyR-nx4TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/b55c04-6d4a-4949-aaa8-6ee1a700b219/1/1-qWsXSKtkHinLhNplihyR-nx4TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:a8:14:b6:51:48:a5:e8:57:4f:e2:62:08:cc:6d:5b:4e:d1:
af:62:5a:75:d6:04:ed:74:aa:32:cc:ee:d8:25:9c:3a:23:0f:
b8:6b:07:16:b3:0f:19:2c:35:1d:f9:f1:cd:a2:be:55:9d:b6:
19:47:42:17:88:8c:00:30:30:9c:48:8e:3b:8c:23:6d:65:0e:
48:28:0c:9b:97:a4:cf:1e:e0:e9:12:cb:e8:d4:62:22:4f:0c:
f2:04:11:23:3b:d8:05:98:dd:8b:d1:4c:05:2e:54:8b:af:02:
67:e9:28:17:39:d3:99:dd:49:ec:14:ba:44:ff:f2:c7:2a:c2:
ae:e7:7a:c2:5d:ec:04:d0:0d:0d:fd:2e:ce:69:04:74:35:fa:
5a:0e:b8:0e:50:58:62:ed:02:fe:8d:7f:43:ab:8b:38:40:34:
e0:ad:e9:1a:47:ac:7b:ce:51:16:ae:d6:8f:64:c8:46:ab:c9:
17:6e:51:ea:9c:08:d4:0e:43:d9:b8:4b:c7:3d:b3:31:51:3d:
d2:2e:d2:0a:67:fb:d4:09:27:b6:5c:ca:60:50:55:4a:c0:46:
07:2b:fd:63:c7:51:d4:21:07:11:b2:03:84:92:3c:a3:88:d9:
49:4a:00:0f:b6:a3:93:f9:d5:c6:81:e7:72:40:7b:25:6b:c8:
7e:66:b3:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:35:15 2026 by rpki-client