Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft (raw, json)
Hash identifier: 8CS7mNamVK1mDfbekdlUPOcJBHD60F/LH14/yXg71xw=
Subject key identifier: 02:48:EC:71:70:6F:C3:C6:0F:0B:82:17:ED:7A:6B:97:50:92:3B:27
Authority key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
Certificate issuer: /CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Certificate serial: 019D9AE3416AC12EBB91C8DB69FA2367A038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
Manifest number: 1852
Signing time: Fri 17 Apr 2026 10:01:17 +0000
Manifest this update: Fri 17 Apr 2026 10:01:17 +0000
Manifest next update: Sat 18 Apr 2026 10:01:17 +0000
Files and hashes: 1: qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl (hash: hKe4MJL7PGc1MfqjPVJJ7I0MKFuNMw6KbnPK3aeiVkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:41:6a:c1:2e:bb:91:c8:db:69:fa:23:67:a0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Validity
Not Before: Apr 17 10:01:17 2026 GMT
Not After : Apr 18 10:01:17 2026 GMT
Subject: CN=0248ec71706fc3c60f0b8217ed7a6b9750923b27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:11:20:76:d9:02:44:4b:dd:68:fa:be:77:47:
16:a2:b0:60:fc:cf:be:dd:24:fe:01:12:c5:78:9b:
49:f1:b7:a0:72:27:8e:d6:02:0a:54:9f:c9:08:08:
53:d4:87:2c:61:33:e2:69:47:3d:3a:93:4d:d8:42:
26:e7:5a:29:45:03:a9:5d:69:80:64:fd:1f:73:ff:
70:c6:d1:e7:e1:b7:c0:70:e1:e7:3e:09:6a:d4:16:
db:23:d2:0e:95:a8:97:ce:7d:a8:56:db:c6:3e:88:
fe:8b:77:d8:10:45:22:e8:bd:ef:36:15:2f:60:e2:
3d:95:56:dd:cb:3d:da:b2:9c:bc:b5:f4:54:82:00:
52:73:00:84:32:e7:a4:02:df:40:35:5a:3c:1e:0a:
62:ed:aa:88:f6:0c:7e:35:24:4d:42:63:53:11:84:
bd:66:53:cd:79:ab:20:d9:0f:2f:c7:1d:b1:b2:0f:
d1:a2:63:56:a4:66:02:ba:b7:4f:28:dc:7e:3c:b2:
ef:71:c1:79:a0:76:04:1c:e0:ac:a3:06:ca:c4:6d:
e7:bb:a4:64:ca:eb:aa:ae:9b:2b:5c:1f:53:67:19:
a6:e9:65:6f:72:24:71:51:27:c0:fb:c0:97:f2:f1:
40:bb:62:d3:e1:75:2b:55:52:1c:ec:b3:6b:19:10:
39:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:48:EC:71:70:6F:C3:C6:0F:0B:82:17:ED:7A:6B:97:50:92:3B:27
X509v3 Authority Key Identifier:
keyid:A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:64:4c:67:f0:ef:8d:a5:84:14:fe:95:78:49:4c:00:60:96:
88:88:46:d9:80:b5:48:b0:9e:7a:55:b1:1b:63:c8:a8:0b:a2:
69:24:3b:ba:72:71:8e:5d:05:63:17:19:91:a7:c4:16:4f:3a:
0d:32:7d:6f:63:3b:80:fd:c2:d6:4a:44:26:24:47:11:a7:74:
ed:42:7e:99:81:20:ef:90:c0:a8:0d:06:a8:d0:01:cf:af:71:
c9:76:9e:61:37:b2:1d:e1:05:8a:f7:ee:ca:25:0a:60:66:6c:
65:21:19:93:b2:d1:ba:a5:1d:d6:0e:64:ff:18:97:9e:98:1e:
a6:d7:9d:ab:fe:a8:63:c1:9d:4c:64:a4:d3:c2:b6:da:0c:1e:
63:95:72:28:ad:ca:b2:27:eb:30:9e:a6:04:c0:27:8c:39:7d:
b6:2e:bc:4e:59:4a:fe:a5:c5:f7:1a:c5:bc:68:15:af:08:af:
b8:64:49:d3:e7:a5:ff:d2:30:ba:28:a7:ba:5c:fc:b9:14:c4:
12:bc:e0:e0:d1:a7:0d:7f:27:0f:34:0b:0b:45:0f:04:07:94:
fb:ec:bc:0d:b6:88:06:9e:d2:4a:ca:d9:87:de:e0:0e:40:95:
f8:f9:07:f3:20:4d:8c:d1:43:19:73:0a:d0:0b:d8:97:c3:15:
03:ba:39:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:36:07 2026 by rpki-client