Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
File: qTThBr5Thu0QZ17g3jNtx34gDVk.mft (raw, json)
Hash identifier: eRoU9HZsC12hj4wDJtkSCduc6LTyP4EkMfPWRd1QQw4=
Subject key identifier: 87:B5:CD:10:44:52:84:C3:76:20:E5:83:C3:F1:5F:9F:FB:52:56:0F
Authority key identifier: A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
Certificate issuer: /CN=a934e106be5386ed10675ee0de336dc77e200d59
Certificate serial: 019D9A3E795E170D4485FEF80B14B4CC7CD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
Manifest number: 0713
Signing time: Fri 17 Apr 2026 07:01:18 +0000
Manifest this update: Fri 17 Apr 2026 07:01:18 +0000
Manifest next update: Sat 18 Apr 2026 07:01:18 +0000
Files and hashes: 1: qTThBr5Thu0QZ17g3jNtx34gDVk.crl (hash: zV2KkbJHpDS/zl+7u2xrB8pkd5JEN8REiQ9hK0/3SOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:79:5e:17:0d:44:85:fe:f8:0b:14:b4:cc:7c:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934e106be5386ed10675ee0de336dc77e200d59
Validity
Not Before: Apr 17 07:01:18 2026 GMT
Not After : Apr 18 07:01:18 2026 GMT
Subject: CN=87b5cd10445284c37620e583c3f15f9ffb52560f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:15:66:10:3c:d6:af:38:cc:7d:f9:04:ff:8a:
f6:3f:1e:93:2a:d5:97:fb:fd:b4:ab:c1:e7:ea:c4:
81:85:73:82:97:86:e1:22:cb:3b:0b:ae:2d:66:98:
90:c3:1d:4a:3a:95:10:e6:61:e9:e3:a2:ab:87:7a:
8a:cb:5c:ac:c4:8c:72:bf:69:2e:b3:85:30:ee:bc:
c2:3d:66:7c:73:06:52:ab:51:33:07:43:8f:be:f8:
e1:f9:68:d4:e6:67:67:5d:e8:40:b8:6b:da:6c:70:
96:5a:8f:d1:ff:6d:ed:e2:fe:28:33:7c:6b:0b:43:
c7:88:33:68:24:83:5a:c4:17:d8:c5:2f:12:54:07:
12:b3:d7:c9:fe:93:51:23:23:f1:d4:12:2b:8f:fa:
1a:69:f0:18:04:6e:6a:32:b9:01:2f:40:4e:fa:9d:
99:ac:b6:28:0c:75:71:cf:03:a1:6d:13:29:c9:57:
49:1a:c5:9d:e9:82:2f:71:2f:c0:0a:6e:01:e4:40:
85:fb:b1:c2:3c:82:0f:48:63:ec:cf:f9:2d:3f:18:
62:d4:6c:89:d8:8b:01:f0:2c:06:1a:aa:9c:a6:53:
51:3e:78:43:88:45:24:c9:ea:5a:74:48:57:11:c9:
1b:ae:d1:34:62:a8:36:9b:8f:29:e6:5a:69:0e:4f:
29:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B5:CD:10:44:52:84:C3:76:20:E5:83:C3:F1:5F:9F:FB:52:56:0F
X509v3 Authority Key Identifier:
keyid:A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:20:cb:c9:3e:50:d0:94:7b:f4:a0:41:3c:42:00:5c:7b:ad:
0b:7f:6e:90:1f:68:6b:f9:a7:5e:6a:99:04:e0:b3:f1:36:bc:
6d:18:e8:af:9d:2c:a7:ec:c1:73:f7:4e:75:c3:7a:35:31:62:
77:22:5a:6d:8d:fe:11:7a:e6:4c:6c:2c:f2:ca:c1:1e:30:4b:
45:20:46:22:ab:a2:63:e8:88:4b:9c:35:77:78:dc:44:d1:86:
85:d1:69:21:fa:91:42:c6:aa:fd:c4:9f:4f:d6:99:d9:c5:82:
8d:c9:e1:a9:58:12:92:c9:90:83:42:6f:91:98:41:05:74:fa:
d3:97:69:f9:d9:c1:3e:c9:49:c9:5e:c3:6d:44:6c:7d:51:a5:
e5:e0:76:6c:1f:89:43:17:c2:93:08:3e:b7:33:1b:97:de:03:
a5:e4:43:40:66:36:da:eb:b1:6b:d3:7d:c4:e5:93:6a:16:c7:
03:ac:81:18:3b:13:30:6d:38:64:a0:d9:b5:40:90:ad:5c:99:
dc:3e:3f:75:26:31:ab:9c:da:50:ae:8a:c2:ad:f4:ca:db:6d:
08:1f:86:74:3a:98:2a:9f:42:4e:d3:44:f8:f3:5b:26:46:4a:
2a:e0:0a:57:bd:3a:ad:4c:de:b4:b4:df:c9:08:54:93:90:ff:
ea:ff:91:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:59:04 2026 by rpki-client