Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
File: q7lESdTSRidxdzvAimJFB9pRKw0.mft (raw, json)
Hash identifier: QdokDyoppGP38MJgWmd1ONPHmMFIO5WI28fzuczoGjM=
Subject key identifier: 05:09:C0:DB:D8:A5:97:8C:EE:07:6B:82:2B:7E:C3:B7:CE:DE:B9:84
Authority key identifier: AB:B9:44:49:D4:D2:46:27:71:77:3B:C0:8A:62:45:07:DA:51:2B:0D
Certificate issuer: /CN=abb94449d4d2462771773bc08a624507da512b0d
Certificate serial: 019CAC47776706973CB3BD22D98B0452A414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
Manifest number: 092B
Signing time: Mon 02 Mar 2026 02:01:30 +0000
Manifest this update: Mon 02 Mar 2026 02:01:30 +0000
Manifest next update: Tue 03 Mar 2026 02:01:30 +0000
Files and hashes: 1: q7lESdTSRidxdzvAimJFB9pRKw0.crl (hash: 9rEcFYYHzrVzm6cv4OzsLUhfn5h1G4RM7bfLJZH9XCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:77:67:06:97:3c:b3:bd:22:d9:8b:04:52:a4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb94449d4d2462771773bc08a624507da512b0d
Validity
Not Before: Mar 2 02:01:30 2026 GMT
Not After : Mar 3 02:01:30 2026 GMT
Subject: CN=0509c0dbd8a5978cee076b822b7ec3b7cedeb984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:43:0e:ed:08:82:95:6d:40:bc:7e:6c:54:07:
81:e5:0e:96:4c:75:3d:a8:fe:b3:5a:f9:51:57:51:
b6:c2:dc:c5:f9:0a:18:be:41:ee:b2:dd:9a:b2:6c:
1b:a2:cc:f9:5e:a2:11:62:ec:a7:75:20:24:b4:a7:
0f:84:82:6e:9c:c3:85:11:5d:84:23:bb:10:9b:40:
ed:b5:e1:8c:50:9b:80:18:10:42:8f:69:af:4e:3c:
e8:3b:4b:54:58:62:45:d6:d2:0c:06:19:f3:6c:7e:
f4:ca:35:d3:c2:7d:90:02:97:8c:d0:a1:2e:f2:6a:
59:14:5a:0c:ca:fe:e2:12:48:40:a9:f9:dd:82:e6:
74:fe:4b:db:94:71:37:93:30:25:51:6b:6b:aa:cd:
95:a6:f7:1b:c2:f8:33:9b:b4:be:70:8e:87:03:84:
af:66:6c:5e:43:4b:3f:61:c0:9d:c1:96:ca:4b:7b:
f8:d9:14:0b:8f:d6:c1:ea:37:b0:dd:e4:cf:d3:54:
bf:27:b7:41:79:80:d5:5a:39:4e:65:96:d7:94:6f:
b9:01:c1:6a:c3:65:f6:58:f7:03:55:52:02:49:2e:
e2:74:f6:dc:a8:b6:85:85:2e:dc:be:36:ca:e8:a3:
12:dc:60:7e:58:6a:4d:39:14:f7:d8:36:ca:b6:7a:
ef:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:09:C0:DB:D8:A5:97:8C:EE:07:6B:82:2B:7E:C3:B7:CE:DE:B9:84
X509v3 Authority Key Identifier:
keyid:AB:B9:44:49:D4:D2:46:27:71:77:3B:C0:8A:62:45:07:DA:51:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:70:86:18:fb:af:2d:ae:f5:11:74:d3:38:26:d4:72:67:75:
c2:a0:13:05:5f:70:dc:cd:05:39:69:0d:90:5c:2e:66:2a:bf:
b9:67:bc:38:4c:ba:61:92:c9:b7:fa:9f:25:47:97:1a:1d:05:
9c:2e:cb:f4:07:ef:38:b5:41:c0:9b:5c:60:06:ce:18:9e:56:
f0:46:37:53:9e:a8:60:59:df:d5:b2:aa:d2:45:db:66:b8:1b:
16:69:1e:db:0e:25:4d:a6:bc:2f:06:cf:86:3c:e5:e1:0d:51:
f4:f5:de:97:23:89:3c:81:8e:15:53:df:61:a1:ca:f1:c7:39:
d4:0b:52:b1:30:7e:ac:8e:f3:c5:ab:b5:1f:46:7c:dc:ae:c7:
f0:c3:1f:f7:4b:41:d4:42:e5:87:6e:64:d3:3e:55:d6:ff:0a:
38:7a:2c:eb:f2:1f:f0:ff:2a:8c:ad:b1:a6:00:fe:c5:11:c6:
70:4c:51:c2:a0:31:fe:c5:26:52:d7:27:06:eb:d4:4a:e8:18:
d7:20:20:ce:2c:e1:e5:d6:8b:58:31:b8:e3:db:3b:b8:d7:20:
7f:0f:46:70:1c:a5:da:0b:aa:42:e4:a4:75:4a:a6:de:38:af:
0d:46:da:dc:93:03:81:3a:73:09:01:42:6c:40:89:6a:b3:f7:
a7:22:28:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:54:05 2026 by rpki-client