Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
File: qKI6ziwGf44hL_NZ2pbCBYtks-o.mft (raw, json)
Hash identifier: rOgpEk/Nhn0sKLvVRgZW3ZbdTqRgjaUc/6rKhoDeK5Y=
Subject key identifier: 91:5F:6A:2B:03:D9:D6:20:14:58:94:E6:65:FD:14:5A:23:A2:47:73
Authority key identifier: A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
Certificate issuer: /CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Certificate serial: 019D99993E3F7122718AA818E8E9083FD4D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
Manifest number: 08F4
Signing time: Fri 17 Apr 2026 04:00:50 +0000
Manifest this update: Fri 17 Apr 2026 04:00:50 +0000
Manifest next update: Sat 18 Apr 2026 04:00:50 +0000
Files and hashes: 1: qKI6ziwGf44hL_NZ2pbCBYtks-o.crl (hash: a30KiosyG04Ru+Z5z34P1kuuSjB35itNN2gM0eDuAXY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:3e:3f:71:22:71:8a:a8:18:e8:e9:08:3f:d4:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Validity
Not Before: Apr 17 04:00:50 2026 GMT
Not After : Apr 18 04:00:50 2026 GMT
Subject: CN=915f6a2b03d9d620145894e665fd145a23a24773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1a:5f:dd:0e:f7:d7:e4:17:6a:1d:af:9a:2d:
ed:1e:fe:d1:c9:e7:4b:df:1b:a8:6b:4c:52:04:55:
00:db:38:a3:b8:40:8b:76:61:69:39:f1:38:d4:c5:
39:25:95:63:e5:5c:9c:dd:ab:da:67:9f:b9:bf:14:
3a:b3:b9:58:da:61:ca:9b:34:24:29:2d:5d:2d:f1:
22:69:d2:11:f5:4f:c6:df:4d:ce:1e:fd:d5:7f:cb:
b0:df:d5:42:47:80:d6:86:02:57:d3:78:64:75:d3:
23:f2:13:e2:1c:fb:a5:47:70:a2:ad:bc:95:69:db:
9c:02:41:29:c8:47:e0:c8:f1:42:e9:84:11:43:bb:
c9:84:08:0a:83:3d:4e:7f:67:6b:a7:55:49:42:ee:
df:e0:76:c7:0e:e4:30:10:04:6f:15:5e:6d:2d:3b:
12:c8:f1:e1:98:48:65:bd:0e:e3:0f:62:83:c0:39:
14:e9:c3:55:a9:ea:b1:cc:3c:3a:14:c9:62:53:99:
e1:95:b6:55:4f:53:ae:1c:4e:7d:06:19:b3:c5:4a:
f9:9f:e3:b7:c1:47:82:7a:3e:7a:a1:62:ea:60:d8:
f8:a4:18:bd:fc:76:3d:b4:52:b6:e9:ee:a4:c7:2c:
fc:8e:1f:af:13:09:f1:f3:f3:af:9a:b3:78:22:33:
d1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5F:6A:2B:03:D9:D6:20:14:58:94:E6:65:FD:14:5A:23:A2:47:73
X509v3 Authority Key Identifier:
keyid:A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:8d:69:d5:c0:f8:e8:6d:f6:c6:ae:28:aa:58:96:23:fa:f7:
6a:80:64:8d:08:58:29:f7:1b:7d:d2:b6:33:d6:fb:7c:91:74:
b7:46:32:77:64:f6:35:a6:7a:b5:60:53:20:70:e5:ef:ac:5f:
76:b2:b2:91:fa:c7:56:60:01:7c:78:77:f7:06:c4:6f:7d:f1:
2a:01:4b:b5:cb:d9:6a:b9:79:46:0a:37:14:88:87:05:c7:65:
2f:60:e7:db:a0:6b:eb:ad:f5:22:e1:df:34:80:eb:dd:67:bb:
a9:66:4f:0f:6a:4c:17:45:18:f9:cf:a3:83:a7:c5:67:40:7f:
a7:ad:a1:9a:92:ac:89:d4:77:9d:a3:e8:36:0a:8f:25:ac:b1:
f0:db:89:b4:73:6f:11:cc:cd:1e:04:8c:37:2e:99:ee:69:82:
53:20:02:8e:cf:3c:fe:98:35:c2:cb:5c:31:ef:0e:4a:56:12:
30:bb:5f:e8:d1:1a:8c:17:37:1d:82:63:18:b5:1a:14:4b:45:
d2:3e:3a:9b:2c:61:b3:cc:38:20:1d:6c:89:30:7e:94:e0:58:
89:6b:de:e9:fe:a1:7c:c0:00:41:34:fc:da:c7:f9:49:fd:42:
7e:40:5c:41:ed:b3:2b:50:76:d0:18:18:0e:e0:c5:3b:5c:23:
bd:5a:49:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:49 2026 by rpki-client