Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
File: qqbmeSWCHkuHnIA-wKUiRflnOtA.mft (raw, json)
Hash identifier: OxgsbvHpdEn8Cm6s9v8vr4YAjSBr/ScCtVDima7fC60=
Subject key identifier: 76:CA:F3:B2:EC:19:A2:1B:CC:94:7F:F3:41:74:F2:36:83:FC:07:2E
Authority key identifier: AA:A6:E6:79:25:82:1E:4B:87:9C:80:3E:C0:A5:22:45:F9:67:3A:D0
Certificate issuer: /CN=aaa6e67925821e4b879c803ec0a52245f9673ad0
Certificate serial: 019DA2D35CE5E136401E91075E3BF77D2CE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
Manifest number: 0668
Signing time: Sat 18 Apr 2026 23:00:53 +0000
Manifest this update: Sat 18 Apr 2026 23:00:53 +0000
Manifest next update: Sun 19 Apr 2026 23:00:53 +0000
Files and hashes: 1: qqbmeSWCHkuHnIA-wKUiRflnOtA.crl (hash: yi1R/38LpDPZ7qJ9Qq9KmGr7tnsX94C1gnlF/GI1U7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:5c:e5:e1:36:40:1e:91:07:5e:3b:f7:7d:2c:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaa6e67925821e4b879c803ec0a52245f9673ad0
Validity
Not Before: Apr 18 23:00:53 2026 GMT
Not After : Apr 19 23:00:53 2026 GMT
Subject: CN=76caf3b2ec19a21bcc947ff34174f23683fc072e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0a:ec:27:20:cb:d5:44:24:e6:14:07:81:44:
6c:b9:b1:39:96:5f:57:72:b0:33:97:5b:a2:5c:c0:
70:16:fe:c5:15:ec:d0:71:e7:ae:04:b7:65:3e:b6:
c3:cf:80:14:3e:cd:3d:e3:18:d2:2d:f7:0f:5d:b1:
22:02:f7:41:fb:42:ab:f2:f4:6a:60:ba:db:a8:f6:
30:c4:83:d0:5f:68:06:03:0e:99:c8:aa:f0:5c:b7:
c7:33:65:d9:d8:75:bd:25:2a:91:df:17:58:0e:05:
5f:10:5e:00:17:6a:fd:4b:e0:e4:70:ad:f6:a2:c8:
8a:30:3b:32:26:14:c9:0b:90:1b:a8:09:72:7a:15:
be:00:73:ca:a4:89:39:c0:4e:a6:59:8b:df:a7:6c:
7a:24:3d:d2:01:66:cc:5a:b3:ea:1f:2d:21:32:79:
e2:4f:44:4f:00:8a:90:d6:ab:86:b8:04:be:72:32:
48:b4:d1:eb:ca:9a:6b:7a:13:c6:f9:07:ba:99:0c:
26:f6:53:e0:73:7d:91:f8:a2:9d:61:66:80:da:b6:
d5:42:59:32:0e:91:41:43:71:84:3b:d4:f6:8d:6c:
be:bf:a2:44:d0:2a:f3:4a:8c:30:c5:e8:59:ec:56:
6c:6c:18:72:c4:9a:79:44:a7:95:52:bd:98:96:a5:
a5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:CA:F3:B2:EC:19:A2:1B:CC:94:7F:F3:41:74:F2:36:83:FC:07:2E
X509v3 Authority Key Identifier:
keyid:AA:A6:E6:79:25:82:1E:4B:87:9C:80:3E:C0:A5:22:45:F9:67:3A:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qqbmeSWCHkuHnIA-wKUiRflnOtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/64ae5a-8622-45e2-9327-512f565ac011/1/qqbmeSWCHkuHnIA-wKUiRflnOtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5a:9a:26:44:5e:31:ef:4d:45:e2:f3:78:c0:90:5a:44:b4:
eb:54:b6:78:ae:2d:d4:57:c3:17:a4:6c:bf:0b:40:a0:91:0c:
de:12:b5:5b:55:6c:c4:48:f6:8e:f2:4a:bd:5f:ec:77:a6:0d:
df:73:ca:d9:aa:3d:2f:d0:6b:92:4a:d6:39:b1:5f:cf:a7:1f:
62:10:68:6b:d0:a8:47:13:cf:a3:d4:d5:70:c6:c3:2f:5a:3b:
c1:76:72:8f:2e:39:70:f9:de:a2:07:9f:a8:cb:12:b8:97:f5:
f6:e5:4b:f4:ee:a8:94:e1:c6:11:d6:f1:6e:cc:71:b7:a2:48:
a2:0a:39:05:4c:c9:70:44:c4:08:c2:44:6a:a5:02:cb:4c:9e:
5a:f9:02:d0:f4:17:f1:4e:e3:53:da:71:b4:0c:84:f3:9e:9b:
1f:3e:3c:e5:18:e8:56:15:7c:73:5b:eb:71:47:93:21:4a:13:
48:d6:bb:7a:c5:97:66:85:7b:54:c7:d3:22:8d:60:5b:f0:3a:
18:d5:da:c9:69:7e:d7:09:87:4d:6e:60:b0:8f:0c:22:9c:9e:
20:d2:49:18:e8:2b:d4:52:79:96:8a:ff:fe:0e:fc:b5:36:29:
1a:6e:2f:c9:54:a3:53:04:6f:aa:78:ff:bc:14:37:0a:61:89:
cc:8f:ec:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:49 2026 by rpki-client