Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
File: qxSu-APVDXALuYUq6LsrtAkmFqU.mft (raw, json)
Hash identifier: 5aTm2JaYhj7/xqGSlmkoZU16v3a6dw4cKRv/LYwlAfQ=
Subject key identifier: E9:57:2D:06:E7:4F:62:67:13:51:A1:86:45:11:A8:A6:F1:7B:AF:E1
Authority key identifier: AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5
Certificate issuer: /CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5
Certificate serial: 019D996242FE6EDFEA00A6DD60154D564617
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
Manifest number: 0FD9
Signing time: Fri 17 Apr 2026 03:00:46 +0000
Manifest this update: Fri 17 Apr 2026 03:00:46 +0000
Manifest next update: Sat 18 Apr 2026 03:00:46 +0000
Files and hashes: 1: qxSu-APVDXALuYUq6LsrtAkmFqU.crl (hash: JtoYNP6gRqnT+0XaKizDG96VSMrvhrhAI1FNt7wW8VY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:42:fe:6e:df:ea:00:a6:dd:60:15:4d:56:46:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab14aef803d50d700bb9852ae8bb2bb4092616a5
Validity
Not Before: Apr 17 03:00:46 2026 GMT
Not After : Apr 18 03:00:46 2026 GMT
Subject: CN=e9572d06e74f62671351a1864511a8a6f17bafe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:6b:5b:f6:4a:af:ff:fd:69:93:35:6e:7a:5a:
c5:8c:fe:43:94:3b:85:33:ea:10:8d:48:34:8d:fc:
f8:24:a2:c0:a2:52:c4:13:e4:9b:42:f3:b6:16:63:
7d:f0:76:bb:35:37:f2:02:94:bf:c8:9d:2c:d7:59:
27:a1:a1:2f:64:57:3b:47:f8:8b:d6:da:ba:7d:83:
dc:04:0f:1e:19:d7:a2:1d:7f:ff:f7:d4:3b:bf:b0:
b0:12:06:8b:83:be:ba:1c:26:c5:b6:4e:c9:a9:4f:
aa:f0:2a:14:1f:91:c8:ff:20:96:06:2d:6e:0b:f5:
bd:a4:88:fc:61:64:9a:57:4c:11:8c:df:c3:7f:5a:
e9:37:92:6f:28:12:cc:c1:93:a2:e8:ba:f6:01:d9:
9c:03:cb:c3:0a:20:b4:9d:e2:ae:4e:4e:fd:48:c4:
b9:88:40:0c:85:e9:59:9d:ca:96:d3:43:8a:ed:f6:
57:9c:12:d1:6b:29:58:92:7f:17:24:f6:cb:95:22:
fd:b7:e4:04:b4:65:35:52:d6:01:c3:f8:60:55:7a:
bb:e5:1d:da:54:f3:04:48:4e:83:63:93:3e:9d:c1:
e1:5a:f7:2f:08:9d:46:61:a6:11:df:65:b1:38:44:
dc:c2:00:e8:da:b0:af:4a:f1:d2:58:26:6d:c1:de:
ac:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:57:2D:06:E7:4F:62:67:13:51:A1:86:45:11:A8:A6:F1:7B:AF:E1
X509v3 Authority Key Identifier:
keyid:AB:14:AE:F8:03:D5:0D:70:0B:B9:85:2A:E8:BB:2B:B4:09:26:16:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qxSu-APVDXALuYUq6LsrtAkmFqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/f32c2a-c054-417d-8e0c-c00bacfffce5/1/qxSu-APVDXALuYUq6LsrtAkmFqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:ae:13:39:c3:26:2e:00:ac:02:a1:5c:36:a9:ce:19:22:11:
c9:b7:0a:3f:b2:de:53:6f:ab:fb:7a:64:97:71:7c:d8:6f:0a:
50:a8:aa:02:5c:b7:10:49:e4:bb:24:88:84:e9:3a:ce:8a:6a:
67:17:e5:d0:02:ff:b1:25:5f:8f:e2:f5:56:ff:ae:0a:dc:16:
1b:f3:90:c1:d2:cc:f4:c0:46:25:44:f6:d1:21:1a:c0:2f:64:
28:18:67:75:36:18:27:89:fc:2f:6c:77:26:a0:e1:fd:35:99:
b6:2f:71:68:64:cb:65:04:41:2d:97:83:10:73:47:86:c4:a8:
02:58:0d:37:63:df:1b:8b:15:b1:44:11:ba:20:8b:0d:97:7d:
89:b6:5e:6c:95:48:aa:3b:7b:88:f5:f2:b9:0a:49:06:69:3c:
71:16:31:c5:dd:ed:4b:c0:b0:b3:01:c9:68:37:4c:f5:5d:da:
d0:f3:b1:f6:d7:81:b6:03:e2:7e:56:ad:e6:ab:7a:b6:8f:ac:
7c:5b:0e:86:3d:ab:fb:39:9d:4d:67:43:b6:e1:cc:e4:c0:c8:
7a:8c:90:0d:f8:e6:5f:75:fa:9a:5c:44:a1:f9:f3:78:bc:62:
c4:a3:6c:1f:50:d7:39:02:61:7c:39:d1:cf:e0:54:3e:69:d3:
91:f0:e1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:59:13 2026 by rpki-client