Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
File: q2yACAY3-ssW9RnF2X7Cez2FCX0.mft (raw, json)
Hash identifier: zB39frbkQ2W9Laio+3tAfoG8UFLJmngSa3JFdb5cYAo=
Subject key identifier: 9A:52:2E:EE:94:5A:06:10:03:D7:6B:0F:BA:ED:4C:9A:48:E8:64:22
Authority key identifier: AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D
Certificate issuer: /CN=ab6c80080637facb16f519c5d97ec27b3d85097d
Certificate serial: 019D9818D599008343D34AFE3AD46852D41D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
Manifest number: 0B25
Signing time: Thu 16 Apr 2026 21:00:57 +0000
Manifest this update: Thu 16 Apr 2026 21:00:57 +0000
Manifest next update: Fri 17 Apr 2026 21:00:57 +0000
Files and hashes: 1: q2yACAY3-ssW9RnF2X7Cez2FCX0.crl (hash: j/RuxXslB+naAeUAK3CwfRi8wsfC/Sn7KabYFlaUo4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:d5:99:00:83:43:d3:4a:fe:3a:d4:68:52:d4:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6c80080637facb16f519c5d97ec27b3d85097d
Validity
Not Before: Apr 16 21:00:57 2026 GMT
Not After : Apr 17 21:00:57 2026 GMT
Subject: CN=9a522eee945a061003d76b0fbaed4c9a48e86422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:42:d0:15:8d:70:1c:48:c9:04:ce:b6:41:4b:
b7:d5:b6:55:5f:85:71:dc:2f:a0:f8:bf:44:39:3f:
f5:4c:28:4f:62:13:75:a1:6e:b3:7b:28:de:11:16:
6f:c2:e8:cd:8c:86:44:f1:f3:30:95:19:78:3f:31:
02:e3:c8:4d:38:43:db:15:21:d9:8c:f0:4d:0b:0c:
aa:58:0f:ca:23:58:97:d3:ca:12:97:6e:40:be:1d:
12:75:0a:0b:eb:f6:dc:f5:d5:8e:0a:7b:a5:cc:4d:
16:8a:41:ac:b2:08:67:f4:ec:8e:b4:48:1d:74:0d:
81:a1:d3:25:50:f4:4c:9d:3e:bc:47:b0:7d:f4:48:
20:23:23:f9:df:f7:92:db:fe:83:6b:6a:cf:82:f9:
c2:66:b8:f2:83:54:23:8e:29:dc:df:96:5f:73:f0:
da:86:a8:eb:db:f0:f7:0f:17:46:f2:a2:f0:c6:4f:
4d:7f:ea:46:f8:2a:3c:e7:0c:a0:52:ea:5b:ac:9a:
de:8d:fb:c1:e7:08:93:7c:ca:1a:6d:ff:03:8e:02:
04:b6:69:c7:ca:e1:66:30:e4:3c:c0:d5:49:35:33:
82:0f:92:24:2c:11:84:d8:33:1c:dc:b2:13:b5:f7:
0f:8c:45:7d:f9:29:1b:40:8f:c7:41:c6:43:f7:10:
c0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:52:2E:EE:94:5A:06:10:03:D7:6B:0F:BA:ED:4C:9A:48:E8:64:22
X509v3 Authority Key Identifier:
keyid:AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:35:15:f0:04:3e:b9:dc:d5:8f:7c:05:38:76:a1:c8:fd:be:
f5:8d:66:e5:fe:93:f4:4c:fa:4a:52:c6:44:66:06:69:e2:e8:
d5:bd:06:c2:9c:70:e5:c9:72:db:37:b2:e0:a7:9a:0e:2b:b9:
28:ff:6c:bf:e3:66:0d:e4:ac:eb:fe:5c:15:b4:98:6c:73:46:
b4:e0:79:82:71:79:59:ad:09:5c:ce:d7:b6:94:93:aa:45:74:
99:c3:6b:52:fd:a4:aa:12:46:97:5d:32:8f:a6:89:b1:b5:ca:
07:0b:8f:a8:68:98:ae:dd:ab:36:3d:c9:0f:f7:a1:13:00:63:
b2:74:66:93:86:21:e3:d5:6f:32:d8:c3:5b:10:0b:1a:bd:85:
a2:7c:c7:61:f5:3e:76:37:19:e0:4c:82:c2:f7:ed:ad:cc:b1:
0f:63:8e:56:09:23:df:9e:0a:d1:a2:19:b9:98:c6:97:3e:9d:
e9:e4:17:39:42:be:fe:f1:d5:4a:11:48:a7:74:05:fb:5b:41:
7d:5e:fd:fc:c3:e7:d7:19:a4:ef:d0:0d:8d:f0:9a:9f:ca:0c:
37:95:6e:64:bb:c5:a9:4f:ee:dd:66:de:c2:96:75:0f:34:4f:
87:43:27:33:bb:5d:29:0a:c5:dd:ce:4d:97:5e:d7:d3:c2:27:
cf:aa:62:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:37:08 2026 by rpki-client