Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
File: QX7IKFpWXfUpSjs7YD_fkZTm760.mft (raw, json)
Hash identifier: mpAgYOQLlNpU0kmGtOs1CymaooN/Gb3Q8XEHWAOnCYo=
Subject key identifier: D5:5F:F8:DF:9A:74:C4:E1:F2:B7:A5:05:84:24:24:BA:12:53:81:C5
Authority key identifier: 41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
Certificate issuer: /CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Certificate serial: 019D9850471A97891AA2056C76B712F5A973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
Manifest number: 06A5
Signing time: Thu 16 Apr 2026 22:01:31 +0000
Manifest this update: Thu 16 Apr 2026 22:01:31 +0000
Manifest next update: Fri 17 Apr 2026 22:01:31 +0000
Files and hashes: 1: QX7IKFpWXfUpSjs7YD_fkZTm760.crl (hash: 97tb2SUxxpB/QiQmjZCfpKwOWh5xkB1n7ymCfLTVAe0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:47:1a:97:89:1a:a2:05:6c:76:b7:12:f5:a9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Validity
Not Before: Apr 16 22:01:31 2026 GMT
Not After : Apr 17 22:01:31 2026 GMT
Subject: CN=d55ff8df9a74c4e1f2b7a505842424ba125381c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b1:9e:59:a7:03:4c:ae:9b:03:69:fd:1c:25:
ab:dc:87:54:b0:76:9c:07:cf:83:08:3d:89:63:42:
39:1a:51:ca:ae:95:0c:ec:dd:9f:42:49:26:5d:af:
d4:17:87:13:b3:c7:11:84:7c:63:e9:2b:e3:37:74:
18:c5:4e:10:e5:20:95:fa:b3:9e:46:fb:a6:b6:da:
97:a5:02:08:dc:92:7a:fb:36:14:a9:d0:91:0a:0f:
ce:82:da:ca:5a:77:16:19:2f:78:ad:3e:9d:d5:fe:
32:5d:23:7a:d7:f8:8d:1c:ac:e9:95:34:23:71:31:
79:9b:06:bd:51:40:9a:0b:04:87:bd:9e:0c:c1:11:
cb:49:d2:99:2f:b6:78:30:a6:39:e3:c9:d7:18:da:
01:2f:a0:1b:3f:5e:b1:31:87:3c:7a:43:32:f7:d0:
c6:98:bc:38:b2:9a:b1:7d:3d:5e:9a:c6:2f:71:ac:
44:06:43:b9:0c:cb:17:04:40:27:76:cc:d5:8e:ca:
30:65:1a:87:51:80:7a:6f:54:4a:0f:3a:9f:84:d5:
cc:ba:97:b0:84:ea:73:8e:21:83:d2:b9:2c:80:03:
ce:c1:81:ac:66:04:a0:9c:74:0f:17:b7:a4:3e:d4:
7f:4d:ca:ed:6a:2e:57:82:87:d2:a2:49:5f:c6:44:
1a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:5F:F8:DF:9A:74:C4:E1:F2:B7:A5:05:84:24:24:BA:12:53:81:C5
X509v3 Authority Key Identifier:
keyid:41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:18:d1:3d:34:a3:5e:ba:5a:d3:ab:9e:cc:42:7e:09:a5:14:
dd:1b:66:31:ed:86:3f:7a:26:5a:56:e0:4b:5d:b5:c8:b1:c9:
56:be:12:2e:2f:9a:12:aa:5a:c5:e8:f6:55:5e:c4:2d:d0:f7:
86:96:33:2f:1e:4c:94:78:54:10:8d:32:83:9e:27:d5:d4:82:
f1:eb:d8:35:68:49:f9:a4:1f:fb:15:87:37:b7:2a:08:b8:85:
2c:01:b7:7c:e4:9f:48:02:72:6b:86:13:88:76:c3:26:91:b5:
40:5c:8d:fb:cc:1a:3f:a3:87:7f:17:74:e5:9f:e3:06:18:f1:
a8:ad:e2:bb:54:37:cf:fc:4d:13:15:7e:59:84:a2:c4:f4:6f:
ab:9f:b7:49:1f:b5:e1:4d:f3:50:a1:85:96:9b:73:cc:f9:3c:
0f:69:15:48:9d:05:d5:be:0a:2b:32:4c:c5:05:2c:7d:81:ad:
e3:d2:b3:43:bd:bc:92:f3:eb:1d:35:8f:59:8c:24:f5:15:68:
ec:c6:92:6d:2b:d4:62:14:7f:13:9d:34:3e:d6:1d:a1:23:7f:
38:16:94:dc:36:88:53:d7:da:67:50:ba:61:5b:ad:2a:43:09:
bf:ba:6f:20:e2:42:59:3d:63:a1:c9:12:4b:24:ab:8e:50:fd:
ed:a6:23:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:03:45 2026 by rpki-client