Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
File: qW_WWYUaNLt3wyE8pL93JRHghzQ.mft (raw, json)
Hash identifier: j4LXj1mHelllxP8iUwWXYSruEO3LRXMNYB2hiOSKK8A=
Subject key identifier: 41:F1:67:4C:8A:31:25:72:54:03:23:21:79:9B:A7:0D:D0:7F:6F:44
Authority key identifier: A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
Certificate issuer: /CN=a96fd659851a34bb77c3213ca4bf772511e08734
Certificate serial: 019D9A74BFDF0F6369AFECB526C70156CABE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
Manifest number: 0583
Signing time: Fri 17 Apr 2026 08:00:35 +0000
Manifest this update: Fri 17 Apr 2026 08:00:35 +0000
Manifest next update: Sat 18 Apr 2026 08:00:35 +0000
Files and hashes: 1: qW_WWYUaNLt3wyE8pL93JRHghzQ.crl (hash: 59p7lPgA+clW0aRdsy6qsa6zLM4v0TDJNr6a7HrlS2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:bf:df:0f:63:69:af:ec:b5:26:c7:01:56:ca:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96fd659851a34bb77c3213ca4bf772511e08734
Validity
Not Before: Apr 17 08:00:35 2026 GMT
Not After : Apr 18 08:00:35 2026 GMT
Subject: CN=41f1674c8a31257254032321799ba70dd07f6f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:64:54:93:48:2c:75:e3:89:71:34:40:0b:d0:
91:e8:10:3f:17:81:0a:03:c6:eb:f7:ec:47:18:eb:
40:99:94:e1:8d:7d:b1:13:db:b5:e8:09:26:11:af:
1e:05:cb:df:2f:45:e0:db:e6:7c:d8:58:75:df:fa:
d6:6d:9f:4e:58:09:3c:40:f2:6f:00:eb:41:75:59:
98:81:85:cf:c2:46:75:29:d3:ac:15:e1:04:87:82:
fb:e9:b4:4c:18:29:79:45:93:08:3b:71:bf:99:de:
ea:86:40:d6:dd:76:29:44:fa:84:26:94:6b:66:f2:
04:89:73:94:99:68:a7:4f:a7:0b:3f:66:d6:aa:12:
31:cd:01:1f:82:6d:9c:13:14:77:6d:1e:d8:4b:fd:
48:79:8b:7d:9d:ed:78:4e:7c:99:a2:ad:05:cf:dd:
f8:b0:5d:39:43:bc:9c:2e:7f:79:99:61:32:c1:aa:
e6:ef:cd:bd:f1:6b:f6:80:88:24:0c:b2:f0:f9:dc:
9d:d9:0c:e1:04:c6:3a:20:b3:3d:fa:7f:d0:1a:90:
c6:cd:ed:8b:62:98:9f:24:a1:ba:89:4f:db:ac:b7:
d3:7b:69:ed:6e:12:d3:6c:8f:73:03:bd:b8:5b:76:
6d:fe:ff:d0:57:d1:0e:ee:6d:bd:36:e7:57:02:a5:
e9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F1:67:4C:8A:31:25:72:54:03:23:21:79:9B:A7:0D:D0:7F:6F:44
X509v3 Authority Key Identifier:
keyid:A9:6F:D6:59:85:1A:34:BB:77:C3:21:3C:A4:BF:77:25:11:E0:87:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qW_WWYUaNLt3wyE8pL93JRHghzQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/5c6a2a-c0b6-49a4-993e-c2cce35b7015/1/qW_WWYUaNLt3wyE8pL93JRHghzQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5d:2b:70:a3:3e:22:c1:d9:89:e6:95:7f:2d:a0:b5:27:7e:
44:17:f7:c0:90:78:57:ff:8b:92:b0:36:65:56:cc:c1:11:d5:
bd:2a:a6:cb:3d:4a:ee:bd:53:03:d1:1e:b7:5b:cd:8d:ac:96:
db:14:07:6d:b5:fd:39:ba:34:37:98:b9:fd:0e:47:a0:07:33:
2e:5c:c2:b7:33:64:75:04:8f:2b:2f:44:e0:85:16:18:36:d7:
a7:78:72:d1:58:c6:3a:b1:01:86:9f:61:1f:cb:53:32:43:3c:
df:5a:6d:1b:ee:8a:68:4b:25:49:7a:e9:2a:a0:85:07:60:cd:
76:42:e0:af:84:14:a7:37:59:7d:84:9d:96:c4:56:81:8a:38:
d7:91:ea:1d:b1:cf:e1:52:1f:b1:e2:3c:2c:d7:fe:76:30:70:
18:cd:cc:f0:e0:b2:31:93:31:5b:fd:7a:d3:dc:4c:31:aa:18:
a7:5a:92:f6:4e:1a:ef:22:e2:e2:5f:b8:07:18:e0:81:5c:6b:
68:98:e6:6b:52:fe:26:5b:f3:9d:8d:71:78:f4:67:aa:cd:a6:
96:14:c9:fe:65:28:5a:ae:11:dd:e0:e8:97:eb:21:10:f8:13:
78:6e:9c:f4:de:df:ad:4f:ff:a4:1c:eb:86:bf:12:79:1b:ae:
2c:9e:81:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:05:30 2026 by rpki-client