Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
File: qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft (raw, json)
Hash identifier: YUGPT8yHpTKCxC7V/oNcmOI2auWjmSrEVqzfXwhaTBk=
Subject key identifier: C8:3E:95:C4:A3:BC:A2:0D:0F:D1:D1:5D:51:E7:1E:A2:4D:D8:90:13
Authority key identifier: A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23
Certificate issuer: /CN=a948d011edb8cd33e66767880ca4ab3061d9c523
Certificate serial: 019D9A06FC1CE43F95E6E09ED9F4A9B28C11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
Manifest number: 05D9
Signing time: Fri 17 Apr 2026 06:00:42 +0000
Manifest this update: Fri 17 Apr 2026 06:00:42 +0000
Manifest next update: Sat 18 Apr 2026 06:00:42 +0000
Files and hashes: 1: qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl (hash: HCE23NhMYkI3jMoe1D2La0DxzJlLIXSWRP2aD9MGRjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:fc:1c:e4:3f:95:e6:e0:9e:d9:f4:a9:b2:8c:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a948d011edb8cd33e66767880ca4ab3061d9c523
Validity
Not Before: Apr 17 06:00:42 2026 GMT
Not After : Apr 18 06:00:42 2026 GMT
Subject: CN=c83e95c4a3bca20d0fd1d15d51e71ea24dd89013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2c:53:58:b5:fb:2d:ea:c7:18:fa:8b:4b:42:
84:3b:ac:9f:b2:08:67:a4:88:8e:bf:ad:fe:34:08:
74:92:e6:d7:e1:d2:ce:fb:10:40:7d:90:1a:b3:d6:
31:26:00:95:3d:25:0d:a1:f4:7d:e3:be:d3:ce:e7:
bc:16:cc:4f:a1:fd:24:df:8a:ff:40:5e:92:19:7b:
49:6d:c9:23:bd:4f:bf:34:9c:dd:24:22:a4:80:76:
e4:35:fc:a0:b1:22:1d:27:83:54:eb:d8:1a:bd:05:
f1:f9:51:05:94:d4:c6:0f:8d:79:73:72:8d:59:f1:
0a:54:0f:5b:49:fa:69:d5:6a:57:de:31:c7:2f:16:
c1:a3:16:eb:d1:49:82:0f:b4:4d:7d:bf:5e:eb:c4:
63:69:d1:d6:ba:b8:3e:6f:20:94:b3:91:31:07:92:
90:3c:11:b8:d7:ce:46:86:19:d9:61:03:7a:21:f8:
47:76:e9:8c:d6:66:42:87:02:6e:83:fd:73:39:96:
26:0d:ba:7c:2f:2b:0a:22:03:af:55:f8:3f:7d:49:
74:13:73:b6:8d:bb:94:08:5f:ff:4f:82:61:aa:8f:
7d:70:f1:2c:cb:2c:7b:60:e0:66:6d:a6:96:b4:d9:
12:b5:ae:bd:15:a6:cd:2e:a3:f3:80:e0:55:67:9b:
44:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:3E:95:C4:A3:BC:A2:0D:0F:D1:D1:5D:51:E7:1E:A2:4D:D8:90:13
X509v3 Authority Key Identifier:
keyid:A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6f:7c:e0:e6:64:34:55:1b:5b:31:cd:91:66:3b:b5:4f:9d:
a7:9f:39:e5:c3:59:2d:af:2c:15:48:30:f6:31:83:20:13:90:
31:58:3f:07:57:4f:03:e5:c3:1f:1b:b4:f0:60:7f:18:26:b0:
c6:8f:8b:61:ba:8f:c6:ff:96:84:25:fb:07:d8:37:88:b7:a4:
d8:69:a8:5e:c5:ed:1a:41:ff:f0:30:1c:d7:34:12:c2:8d:e0:
55:da:28:7c:66:ac:07:e5:a9:e7:a1:0b:8b:11:06:6e:5c:c8:
81:7a:02:d3:42:ae:64:6b:92:10:08:b5:85:31:f8:08:5c:08:
6d:28:89:86:b6:0b:de:e2:75:2a:ae:07:1c:c7:03:3f:41:83:
84:2d:e7:1b:66:b3:ce:2e:aa:b9:fb:71:a6:97:07:93:81:02:
40:c2:b1:8e:b6:fb:83:1c:15:37:95:f0:8a:19:91:e6:34:2d:
52:50:da:61:bf:22:52:6f:16:5c:cb:be:d1:24:70:f4:ef:1e:
f9:6a:83:57:1c:2f:b2:56:91:ef:fb:ca:97:b3:7e:df:a7:00:
f1:90:9d:48:49:c2:d6:57:b3:17:9d:63:2a:98:fd:b0:2a:a9:
03:43:8b:57:47:c1:4e:7e:cd:e5:c3:e2:65:fa:61:60:a3:d6:
0c:68:81:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:08 2026 by rpki-client