Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
File: qYI63d9sNfBbfByuB5BL_58vass.mft (raw, json)
Hash identifier: YRzJOXcyheJDFRYV2mFxTimSF3/FrdDiI7Js31xBPVo=
Subject key identifier: 04:B4:0C:A7:C0:0B:33:90:21:84:D9:41:C7:CE:70:3A:B8:A2:0B:98
Authority key identifier: A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
Certificate issuer: /CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Certificate serial: 019DA309FE9B8E1C0AE062721EA6FA7C2A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
Manifest number: 0D3C
Signing time: Sun 19 Apr 2026 00:00:34 +0000
Manifest this update: Sun 19 Apr 2026 00:00:34 +0000
Manifest next update: Mon 20 Apr 2026 00:00:34 +0000
Files and hashes: 1: qYI63d9sNfBbfByuB5BL_58vass.crl (hash: 7tt20T0AXdl5Dbj3ylY1A6kGKCxizQxJwcjUReQ8PiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:fe:9b:8e:1c:0a:e0:62:72:1e:a6:fa:7c:2a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Validity
Not Before: Apr 19 00:00:34 2026 GMT
Not After : Apr 20 00:00:34 2026 GMT
Subject: CN=04b40ca7c00b33902184d941c7ce703ab8a20b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:e2:67:b4:f9:0a:61:93:8b:f9:bd:3d:6b:45:
b6:47:74:46:47:0b:73:79:16:a8:b1:7f:ca:5f:f0:
4a:bc:cc:09:f6:1b:32:86:0c:85:79:a4:45:a4:10:
ec:9c:98:f7:08:52:8d:04:38:e3:3b:d8:6d:7e:b6:
38:ee:a2:8b:11:af:c0:ca:45:ce:5e:7e:48:eb:bc:
2f:34:f8:aa:eb:33:a0:98:f2:e0:f1:27:b9:e3:04:
cb:25:fa:e3:48:9c:5e:36:1b:0c:67:5b:8f:5e:86:
4b:19:94:c7:0e:5d:b8:b2:a1:5f:d6:18:c7:c0:4e:
d5:1d:a7:0f:f6:60:fb:0f:c1:fe:57:ec:51:5e:8f:
bd:11:45:9a:a8:46:10:01:d6:8a:ee:ca:ac:a7:d5:
04:e3:55:03:5a:39:ff:cb:80:2a:55:5c:e6:bd:bf:
39:f4:5f:6e:9e:83:11:54:ee:3c:ea:fc:f5:c5:ce:
57:72:64:0c:f4:ce:75:be:e9:ad:c5:52:42:3e:e9:
53:55:0a:86:87:e7:2c:cb:c6:8d:59:0b:cd:48:b7:
47:ab:fa:d6:7b:61:35:6d:0f:72:e5:dc:e4:ed:41:
28:cd:a4:08:72:a5:e1:0b:58:c8:3e:ee:b5:9d:4b:
45:62:1e:81:19:92:93:c4:9e:55:5d:e1:f6:45:d7:
75:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:B4:0C:A7:C0:0B:33:90:21:84:D9:41:C7:CE:70:3A:B8:A2:0B:98
X509v3 Authority Key Identifier:
keyid:A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:2e:28:42:85:a7:7f:36:fe:22:dc:57:8b:4f:19:a5:80:54:
32:e8:1e:d0:44:c8:e4:7d:62:c0:91:f3:41:6d:64:09:d7:9e:
8c:f0:2c:76:4b:9a:2d:9a:73:0b:b8:eb:57:7f:6c:a1:91:cf:
6a:2d:97:61:5a:3d:ad:e1:71:c7:0d:2d:56:aa:ee:2e:8a:6f:
07:8e:03:e7:a9:0e:89:cf:13:37:84:d3:3d:6d:d5:6c:ae:15:
78:be:ca:5a:a4:ec:e4:f0:f6:46:96:01:d7:1f:b4:c7:65:82:
e4:09:05:30:28:3a:d2:17:51:d5:32:28:95:8c:69:91:f1:ef:
8d:1c:c9:95:19:01:59:b0:ec:2d:2c:6b:65:9d:6a:04:8c:54:
c4:97:97:e2:4e:9a:37:68:32:e4:07:1b:12:52:a6:a7:71:f9:
b5:21:21:ac:68:cd:b1:df:bf:f9:d3:ed:3f:f8:c8:ca:e1:74:
af:d9:0c:e5:9c:3b:fb:d3:f2:82:3c:ef:de:aa:73:62:b4:df:
8e:18:b3:c0:f6:ee:bc:9a:2a:0c:cb:46:7d:d8:88:f1:81:de:
29:82:4b:6f:4b:c8:b5:42:bc:c7:81:80:68:8f:b3:70:ae:eb:
d4:b8:63:c1:78:6d:b6:62:40:f5:c1:be:74:cc:ae:b3:74:06:
89:f0:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:59:35 2026 by rpki-client