Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
File: qjJY2XybwoTUhXvO498JCDa80hI.mft (raw, json)
Hash identifier: JkJJT2nrhqwxif+AsVgQmNuN3lqlVq8rfLcj5LvniH0=
Subject key identifier: 4C:C4:43:3F:E9:3B:2D:03:4D:98:94:45:74:7A:4A:54:7F:B3:D5:28
Authority key identifier: AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
Certificate issuer: /CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Certificate serial: 019D9AE34F406864BA79D5C86068FA722180
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
Manifest number: 17FB
Signing time: Fri 17 Apr 2026 10:01:21 +0000
Manifest this update: Fri 17 Apr 2026 10:01:21 +0000
Manifest next update: Sat 18 Apr 2026 10:01:21 +0000
Files and hashes: 1: qjJY2XybwoTUhXvO498JCDa80hI.crl (hash: KQ5bZc09a9ICobcmpZfWY6+ncf2qeMZAioYvAqRrntA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:4f:40:68:64:ba:79:d5:c8:60:68:fa:72:21:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Validity
Not Before: Apr 17 10:01:21 2026 GMT
Not After : Apr 18 10:01:21 2026 GMT
Subject: CN=4cc4433fe93b2d034d989445747a4a547fb3d528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:92:f2:87:32:f7:1d:45:29:09:bb:8d:79:6d:
49:ee:1b:4e:b0:1c:14:4d:1a:88:46:d6:ce:85:b5:
51:03:6f:dc:c1:59:c6:b2:24:77:03:5d:b6:b5:ed:
f6:f9:aa:28:2e:eb:b0:0a:61:a5:04:65:bb:4c:7c:
b3:e2:e2:96:26:07:5e:af:4e:33:8d:ae:40:61:09:
4c:0b:94:17:5e:23:8b:9c:ad:d0:f6:4e:73:db:51:
68:ac:40:a4:5a:66:8e:c4:37:fc:5b:99:11:aa:3c:
97:ec:77:60:90:e7:02:7a:41:0e:b7:c2:6c:60:dd:
35:c3:40:51:6e:4e:5d:bb:ea:df:c1:ab:f9:86:7a:
78:c1:6f:8a:72:fa:03:d5:a0:f3:0b:d5:fd:d0:dd:
b5:7a:00:e0:29:ae:25:20:2b:aa:d6:c8:b8:5f:3e:
ea:57:27:b3:a6:a4:92:be:4e:55:40:f6:53:77:06:
00:a9:64:03:f9:2c:ba:fc:0a:8a:4f:1f:9f:c3:eb:
a0:00:ab:6f:dc:ee:fd:67:3a:53:34:8a:db:dc:22:
33:35:05:7e:11:28:25:d2:e0:61:c4:99:df:80:80:
30:ef:0d:f0:1e:64:46:c8:f4:d2:e4:52:65:4b:eb:
cd:32:10:78:04:39:94:22:18:c5:49:1f:37:ae:58:
6c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C4:43:3F:E9:3B:2D:03:4D:98:94:45:74:7A:4A:54:7F:B3:D5:28
X509v3 Authority Key Identifier:
keyid:AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:42:69:e5:b6:dc:05:a4:a9:5e:bd:52:e5:0e:e3:fc:a4:f6:
11:e4:1a:71:c8:ea:b0:ea:34:af:b6:63:60:23:02:7a:70:5a:
23:07:67:99:a6:a4:be:37:9a:2e:b2:f3:5f:f5:cd:90:da:29:
c3:af:04:33:79:59:fe:01:a5:c0:cc:90:b9:d2:5c:94:f3:c8:
cc:6b:99:76:57:ff:88:74:8b:43:d2:05:53:99:21:b1:64:99:
a5:34:5c:96:54:cd:ef:7f:5d:0c:22:bb:b4:a1:f6:68:c4:3a:
7f:39:20:60:4d:8b:4a:b9:01:40:b6:da:68:83:d7:18:f6:1c:
4a:b7:24:3f:16:4b:4c:15:b1:ba:63:b2:95:ae:30:e3:42:fd:
d1:95:17:53:1b:32:00:f9:28:18:b2:ec:2c:f9:59:31:fa:51:
2b:86:65:18:65:40:ca:29:64:c7:61:4e:9a:f7:e0:94:9d:c7:
72:ba:8b:39:5d:1b:57:2f:4c:48:ef:16:59:7a:65:85:7d:03:
96:2e:64:dd:0d:8e:c1:41:6b:c6:b5:60:ac:16:0d:c9:f4:89:
13:e5:c6:a1:1b:c4:73:b4:ff:7f:69:48:ce:f2:2c:1e:ca:86:
7f:ff:6a:f5:2e:24:69:82:91:95:95:6d:3c:0f:94:d8:6f:f1:
93:33:16:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:40:04 2026 by rpki-client