Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
File: q7lESdTSRidxdzvAimJFB9pRKw0.mft (raw, json)
Hash identifier: hXoj2hxZ0OPAW9F5b/9Cavbcdo4qRHeXFFUjUl8MkfM=
Subject key identifier: 16:05:54:6A:D5:97:5F:21:41:58:28:11:49:F3:AA:E3:D3:C9:42:65
Authority key identifier: AB:B9:44:49:D4:D2:46:27:71:77:3B:C0:8A:62:45:07:DA:51:2B:0D
Certificate issuer: /CN=abb94449d4d2462771773bc08a624507da512b0d
Certificate serial: 019D99D0324DBCDDD6EC5950B4CE1D84DEF4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
Manifest number: 09A6
Signing time: Fri 17 Apr 2026 05:00:51 +0000
Manifest this update: Fri 17 Apr 2026 05:00:51 +0000
Manifest next update: Sat 18 Apr 2026 05:00:51 +0000
Files and hashes: 1: q7lESdTSRidxdzvAimJFB9pRKw0.crl (hash: GXk+sEiy4ufW2vH0Hu+ilKpq9rarsY12vd2tgh5r9I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:32:4d:bc:dd:d6:ec:59:50:b4:ce:1d:84:de:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abb94449d4d2462771773bc08a624507da512b0d
Validity
Not Before: Apr 17 05:00:51 2026 GMT
Not After : Apr 18 05:00:51 2026 GMT
Subject: CN=1605546ad5975f214158281149f3aae3d3c94265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:54:70:3a:22:d5:52:c1:63:8e:85:63:66:ed:
28:07:93:97:0e:98:d1:89:15:6c:10:79:d5:2e:58:
ac:a8:12:c6:6b:64:06:a2:17:18:63:a2:91:fe:63:
00:6a:bf:ca:43:3a:8b:59:c2:64:93:42:82:cf:8b:
b6:41:b7:3b:a8:34:28:cc:34:ef:1e:07:e2:ff:97:
58:3b:6e:84:30:ed:5c:fa:c3:47:72:b4:b7:2f:03:
38:b4:c6:59:1e:fc:29:a0:3a:f0:4f:e5:e9:f6:94:
65:a9:71:30:6a:73:7b:e0:f9:11:c2:dd:62:df:70:
77:3e:be:81:77:41:d5:0a:f7:32:b4:11:80:b8:d5:
15:24:db:2c:25:a5:de:f8:be:9d:9c:fd:3d:27:fe:
a3:3b:cf:dd:5e:50:23:6a:27:b0:13:1d:48:15:6d:
76:73:6b:ab:c7:ee:f9:21:ea:00:ed:22:15:bc:df:
45:46:43:2a:6a:ee:39:dc:3b:e5:b2:e9:f1:30:6a:
32:3e:16:23:de:b1:2b:a9:de:64:c7:90:f6:de:99:
37:7e:1b:af:45:77:a4:9b:70:55:ae:0c:e0:36:91:
f0:ba:64:b7:18:9c:40:fe:16:94:a2:4f:04:0f:78:
f0:39:c2:a8:43:d2:7d:c8:e1:cb:e1:64:f9:72:78:
f9:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:05:54:6A:D5:97:5F:21:41:58:28:11:49:F3:AA:E3:D3:C9:42:65
X509v3 Authority Key Identifier:
keyid:AB:B9:44:49:D4:D2:46:27:71:77:3B:C0:8A:62:45:07:DA:51:2B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7lESdTSRidxdzvAimJFB9pRKw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/625d78-019c-4301-ba78-70c0c15bc80a/1/q7lESdTSRidxdzvAimJFB9pRKw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:48:b5:b2:e8:70:bb:41:98:c0:53:5b:2b:48:ec:8e:22:27:
dd:e5:be:a8:0b:28:ee:31:9b:10:3a:bd:e5:5c:11:cb:b1:25:
6c:c9:a5:e3:26:47:36:ec:ee:6a:09:5e:04:d5:d1:5c:fb:a5:
7b:26:bc:ab:dc:9e:07:a2:4d:93:64:40:a4:e7:bc:13:2a:39:
61:64:54:1f:1e:17:27:1b:8d:a9:c5:1d:31:cc:40:8f:0d:10:
2e:da:1c:fa:13:da:ad:08:00:7f:98:d3:b3:e7:3e:a6:aa:e9:
cd:94:7f:f5:09:c3:c5:b0:0c:8f:9a:99:46:67:77:2c:a3:1b:
1c:7b:d9:95:ef:c7:de:38:49:17:ce:af:af:6c:9f:8a:60:2a:
5f:53:d0:f3:e9:bb:d1:60:82:59:b5:57:38:72:54:42:a3:86:
cb:3f:fc:ff:d7:7e:d6:00:60:15:2c:38:87:23:92:57:fe:57:
50:45:6a:61:fb:22:aa:06:20:44:e2:5c:2e:57:99:42:f9:89:
f3:29:3e:45:2a:41:a9:ae:f1:f4:5a:30:91:b4:6f:85:fa:a4:
25:50:f7:88:ec:00:fe:f5:3a:a6:76:c7:cc:bb:2c:09:36:5a:
a6:c3:d1:f9:87:bf:b2:e6:48:eb:2a:3d:81:46:54:22:24:81:
c3:07:c0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:10 2026 by rpki-client