Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
File: qTThBr5Thu0QZ17g3jNtx34gDVk.mft (raw, json)
Hash identifier: oqyDmPmOntsxYcuVAc2K6NCH+tAbgOaB6liqoEkVCWs=
Subject key identifier: A1:47:04:E3:EA:20:63:2E:D4:57:85:2A:DD:95:1B:23:8A:68:3E:D4
Authority key identifier: A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
Certificate issuer: /CN=a934e106be5386ed10675ee0de336dc77e200d59
Certificate serial: 019CAAC64C387CDB3C713957A1F37D07F6B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
Manifest number: 0697
Signing time: Sun 01 Mar 2026 19:00:48 +0000
Manifest this update: Sun 01 Mar 2026 19:00:48 +0000
Manifest next update: Mon 02 Mar 2026 19:00:48 +0000
Files and hashes: 1: qTThBr5Thu0QZ17g3jNtx34gDVk.crl (hash: OvuoY7V7ft9vm4y+scxVcGhX8IurpG6u+iXpQJKd5tc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:4c:38:7c:db:3c:71:39:57:a1:f3:7d:07:f6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934e106be5386ed10675ee0de336dc77e200d59
Validity
Not Before: Mar 1 19:00:48 2026 GMT
Not After : Mar 2 19:00:48 2026 GMT
Subject: CN=a14704e3ea20632ed457852add951b238a683ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fe:19:d5:80:2a:cf:61:de:41:9e:4c:ff:e3:
13:43:c0:73:fc:af:7f:5b:c5:7b:9b:a8:a2:1e:a0:
e1:b0:c5:ab:d9:13:07:ee:a1:1c:c7:c5:c1:d6:70:
5f:84:4e:a3:b6:9f:79:dc:78:fb:78:69:bd:6b:8e:
7f:6f:42:f6:39:bd:f5:6a:f0:fb:0a:41:f2:5f:70:
06:48:d4:18:1a:dc:d9:ff:25:94:d7:a9:9b:9a:b1:
d0:1a:77:9c:f3:e6:c5:3a:cf:75:2c:c8:bb:79:1e:
e4:13:22:b3:82:98:7f:04:92:27:9c:a7:eb:b8:c4:
69:29:f2:5d:a3:01:5c:a9:36:33:f3:ef:35:8a:a9:
cb:98:e8:09:ed:f9:d8:87:63:c5:14:5f:04:00:a2:
58:69:77:f4:7d:32:e1:be:c1:64:d8:ee:98:f3:5c:
ad:5e:e6:a7:17:28:1f:17:31:d9:0e:ba:f9:c0:81:
63:83:11:70:c3:aa:80:5c:2c:a1:7e:15:7c:b1:6b:
1d:81:3a:12:aa:45:9a:73:fa:46:a5:d0:0b:5e:60:
61:09:f4:a1:6f:b9:56:01:a4:08:fc:4c:6a:16:f5:
e5:7f:96:4b:b2:8b:9e:02:8b:ff:85:f6:3d:02:75:
d6:7f:a2:1a:af:3a:cc:9c:20:85:7f:7d:44:fe:79:
e8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:47:04:E3:EA:20:63:2E:D4:57:85:2A:DD:95:1B:23:8A:68:3E:D4
X509v3 Authority Key Identifier:
keyid:A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2a:9a:f9:d0:45:21:fe:cd:da:20:c4:21:13:1c:4a:12:45:
38:b7:3c:17:70:d2:3a:48:a8:d8:1f:42:03:bb:43:55:55:08:
da:af:6b:b9:7d:ac:49:20:e3:d3:9a:33:0d:00:4f:5e:40:6c:
35:67:47:50:d8:86:4f:e0:c8:71:0f:d2:30:e3:94:50:4f:78:
e5:3a:1d:ca:5f:40:8f:43:21:a7:42:ef:35:af:32:67:a4:f0:
f9:f8:02:9f:c6:1d:3d:3b:1d:a9:4f:f8:f1:52:f0:70:67:67:
fd:41:e4:2a:01:fb:1d:eb:1a:3f:1a:19:42:3b:5f:d6:25:c9:
3c:31:cd:18:80:04:63:92:e4:fc:dd:fa:f2:9c:8e:4b:7c:66:
bc:4c:5a:41:f4:f4:e9:5f:a4:07:0a:c0:9c:39:76:79:a1:c8:
e5:da:d5:af:c1:2e:72:50:0d:7c:4d:c8:ac:c5:e5:af:b2:9f:
c7:f8:56:56:99:2c:d0:20:b8:4c:f2:94:06:dd:49:b2:cb:aa:
3f:c1:0b:4e:15:c7:3d:04:a6:ae:80:4d:de:3b:2f:96:ab:07:
d0:dd:48:02:05:7c:39:37:bf:0f:77:16:94:33:19:c8:82:09:
c4:f4:ad:b0:4f:2f:2c:be:62:7d:61:4e:20:e0:18:65:b8:42:
c8:44:d2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:45 2026 by rpki-client