Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
File: qjJY2XybwoTUhXvO498JCDa80hI.mft (raw, json)
Hash identifier: KLA5TKYUeOLAsWWmFDoT/suE6GW8q842ZZh1r5XyfWw=
Subject key identifier: 3A:79:25:F0:C3:30:58:A0:49:0C:C7:CB:E0:27:50:D2:52:33:30:E6
Authority key identifier: AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
Certificate issuer: /CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Certificate serial: 019CAD59EC36A07CBE5C3BBED553FE5F1866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
Manifest number: 1780
Signing time: Mon 02 Mar 2026 07:01:17 +0000
Manifest this update: Mon 02 Mar 2026 07:01:17 +0000
Manifest next update: Tue 03 Mar 2026 07:01:17 +0000
Files and hashes: 1: qjJY2XybwoTUhXvO498JCDa80hI.crl (hash: 2ahlraokuqvzvU6IpphHNmsFaRbLsUZjD4WvRyNa+gI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:ec:36:a0:7c:be:5c:3b:be:d5:53:fe:5f:18:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa3258d97c9bc284d4857bcee3df090836bcd212
Validity
Not Before: Mar 2 07:01:17 2026 GMT
Not After : Mar 3 07:01:17 2026 GMT
Subject: CN=3a7925f0c33058a0490cc7cbe02750d2523330e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:72:06:67:dd:4d:b3:1d:e8:5a:14:c1:0a:22:
c0:04:1e:cf:ba:ed:0b:2b:21:87:2d:35:e8:f6:b1:
36:0f:7f:69:73:0f:8a:fa:3a:95:51:b8:e3:fe:df:
a9:dc:5e:ff:a3:ab:7e:3f:6d:9e:21:8b:8e:96:09:
40:8e:cb:40:7f:02:43:59:9f:6d:99:73:f6:e4:13:
7f:c5:92:70:85:16:07:d5:34:49:99:6b:a1:df:f4:
b7:c2:19:80:26:7a:fe:d8:59:58:36:30:fe:b5:ca:
7d:e3:9c:f7:aa:c8:3b:ae:66:a1:af:ac:8f:82:aa:
d9:3a:3c:2d:7e:c8:8c:81:88:39:fe:44:19:4d:b2:
53:0b:ce:7d:72:1d:d7:c1:8f:b0:6b:58:85:92:17:
37:be:4d:ec:eb:c5:33:0c:60:2e:ef:b1:90:c8:7a:
4d:41:17:1f:50:0d:d8:75:8b:5c:36:a1:3e:68:3e:
0f:7b:7a:3e:39:70:ba:3f:a6:71:09:ce:32:94:be:
a4:be:47:b3:28:e7:d6:4a:b7:8b:c8:76:2d:05:84:
9c:e5:ca:10:09:1b:60:32:72:d3:8c:48:da:57:57:
e1:e3:43:1b:4d:5d:12:16:b9:d2:80:a1:d8:7b:ee:
35:67:ac:93:c2:9c:e5:68:3f:04:5b:7d:55:cd:18:
fc:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:79:25:F0:C3:30:58:A0:49:0C:C7:CB:E0:27:50:D2:52:33:30:E6
X509v3 Authority Key Identifier:
keyid:AA:32:58:D9:7C:9B:C2:84:D4:85:7B:CE:E3:DF:09:08:36:BC:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qjJY2XybwoTUhXvO498JCDa80hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/98a141-c42e-415e-a3cb-f98dc5338d2b/1/qjJY2XybwoTUhXvO498JCDa80hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:fd:de:5e:d2:f8:a2:5f:46:e9:24:61:16:9e:32:cc:9b:c5:
6a:bb:9c:2f:07:17:6b:de:89:1e:b7:22:fe:88:51:27:84:b1:
22:4f:a4:ba:fc:f2:6e:88:96:33:c2:47:02:01:05:fc:70:cf:
be:71:f8:a8:02:9a:fe:92:e7:f9:a2:73:46:21:20:90:ab:2d:
4a:6c:f3:06:6f:31:01:e1:1e:d7:89:7b:61:b4:8d:3f:5c:49:
05:32:7d:6f:94:66:85:c6:86:ce:4e:b2:81:aa:8e:8f:3a:9b:
92:5e:58:63:b4:8c:e0:92:f7:d5:fe:8e:10:19:61:d6:53:93:
73:43:1b:e0:e1:26:e5:06:b4:63:ce:7f:c4:c0:ed:d7:7b:0b:
8e:86:f3:d9:4c:56:e4:6f:f9:3e:91:f9:2c:38:34:62:64:9a:
0e:64:4f:2b:a9:0a:79:35:85:1f:69:74:9d:f8:aa:ec:da:bf:
b3:e8:cc:88:63:91:3f:03:1d:ff:12:47:4d:eb:0e:65:b3:3f:
62:27:f9:61:a5:6c:97:cb:61:27:ad:da:82:00:92:02:fc:e6:
72:b5:0e:45:6f:d0:44:49:46:f9:df:40:6a:b0:0b:aa:e8:39:
42:3e:65:65:98:cb:18:2d:15:d6:cd:03:b1:2e:ad:d1:99:f7:
6f:94:30:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:19:35 2026 by rpki-client