Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft (raw, json)
Hash identifier: sTWv3Bm4UZ6mOmgXkbIohEbP7ZAt1ErTe4AthJGTaP8=
Subject key identifier: 32:11:B0:3A:02:B5:4C:62:1D:1B:28:D5:06:D2:B7:49:DF:93:CC:F1
Authority key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
Certificate issuer: /CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Certificate serial: 019CAB6B255C0AAA8FF41BBBCE41A3CC4F18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
Manifest number: 17D6
Signing time: Sun 01 Mar 2026 22:00:51 +0000
Manifest this update: Sun 01 Mar 2026 22:00:51 +0000
Manifest next update: Mon 02 Mar 2026 22:00:51 +0000
Files and hashes: 1: qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl (hash: pU0mOqOKwNCPsPcy+s8pJ6gFcVuzJ8J22gH4nC0aNxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:25:5c:0a:aa:8f:f4:1b:bb:ce:41:a3:cc:4f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Validity
Not Before: Mar 1 22:00:51 2026 GMT
Not After : Mar 2 22:00:51 2026 GMT
Subject: CN=3211b03a02b54c621d1b28d506d2b749df93ccf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:49:a6:4b:f6:b2:14:38:60:79:43:2a:52:
2b:63:65:28:d2:39:45:d3:6b:04:60:c2:2a:ad:b2:
d1:e6:fe:d2:00:de:70:dc:71:2f:c0:83:46:d5:fd:
f1:97:72:d0:43:57:e3:17:f4:b3:7a:ec:1b:37:2a:
2c:dd:3b:de:7e:0b:ad:6e:36:55:25:45:fc:2b:c7:
2d:68:42:46:0b:d6:70:59:2d:07:99:08:c4:ac:53:
d7:b9:02:a5:1b:f0:93:25:4b:3b:e5:38:d8:67:2a:
4a:34:7a:9a:c2:6e:49:e0:74:6c:c4:0c:02:23:33:
8e:69:a8:03:26:75:69:b3:ac:ed:46:cb:16:6d:6c:
49:e7:c1:db:aa:eb:38:48:eb:b3:55:84:12:df:74:
2f:a0:8d:65:ad:70:4f:b0:cd:d8:c0:7b:b6:b7:54:
90:66:36:48:a0:1b:0d:ec:44:15:66:4e:60:78:88:
ad:34:20:06:78:f8:b6:f0:97:a2:fc:88:1e:1f:3a:
6a:8e:e5:ea:37:e1:52:dc:69:be:7f:4b:94:09:48:
19:32:88:93:c9:f9:46:e8:c3:a3:35:05:fc:d5:0e:
06:92:2d:90:72:19:25:41:54:10:e7:e5:4f:ac:2e:
83:f5:34:64:ac:7a:dd:3d:0c:4e:0a:6b:d1:ec:cc:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:11:B0:3A:02:B5:4C:62:1D:1B:28:D5:06:D2:B7:49:DF:93:CC:F1
X509v3 Authority Key Identifier:
keyid:A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:61:8c:24:24:03:72:e0:dc:d0:8c:61:8b:9e:b7:8a:d0:73:
17:8f:88:34:ac:4d:cc:da:f9:9b:ed:c0:a1:4e:1f:2b:f2:4b:
bd:b7:26:d1:4a:f1:b9:67:9b:89:df:94:d0:90:44:54:47:90:
93:cb:23:52:7f:44:4b:56:a2:8d:74:8d:1d:63:53:6c:33:a5:
62:e0:c0:ee:93:38:48:bb:bd:1c:63:a4:f5:c0:89:50:6a:11:
36:c4:72:a6:f0:e3:e7:25:d0:61:8f:68:41:fa:5d:b0:74:91:
6c:15:ee:98:19:b1:3b:a2:b2:ef:2f:5b:d6:79:59:69:6a:97:
27:70:c7:e0:6a:79:0b:cb:a6:98:24:a2:0e:34:1b:84:f1:bf:
41:40:6b:4c:1a:f2:66:95:4b:22:2d:a2:53:8f:c5:04:a4:00:
a6:d7:58:87:4d:d5:9a:36:25:13:a9:44:0d:98:0f:72:58:a1:
de:2b:b7:42:6a:b3:da:fd:86:3d:f3:9e:71:d1:dd:16:25:d8:
6a:99:67:75:db:3b:8b:11:c0:3f:52:cc:a4:53:c4:6f:9e:9d:
33:dc:11:0b:48:a3:33:a8:cf:17:02:b3:c1:d3:bb:03:e5:b6:
be:6d:4e:fd:3a:32:bb:2c:c5:dc:66:90:05:c5:f9:a0:e3:02:
c9:4f:15:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:41:13 2026 by rpki-client