Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
File: qK9MCjctAUVV99TXyJz5lvBRQvU.mft (raw, json)
Hash identifier: 4hD7KPByFW5Fua+3SD+qc6bFNGBgV0VoAuZyjGGo+JM=
Subject key identifier: 19:5C:A1:3D:5A:63:E6:5E:AB:38:A1:0B:21:0A:13:1D:5E:F4:6A:57
Authority key identifier: A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
Certificate issuer: /CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Certificate serial: 019CAD594362E53D34538578D37C905A7416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
Manifest number: 05DA
Signing time: Mon 02 Mar 2026 07:00:34 +0000
Manifest this update: Mon 02 Mar 2026 07:00:34 +0000
Manifest next update: Tue 03 Mar 2026 07:00:34 +0000
Files and hashes: 1: qK9MCjctAUVV99TXyJz5lvBRQvU.crl (hash: YRnWjp6oepNdPpilJpzmNLBLX6G2A5BejEiii/xUFT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:43:62:e5:3d:34:53:85:78:d3:7c:90:5a:74:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Validity
Not Before: Mar 2 07:00:34 2026 GMT
Not After : Mar 3 07:00:34 2026 GMT
Subject: CN=195ca13d5a63e65eab38a10b210a131d5ef46a57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:6b:4d:a2:00:33:94:e7:9e:5f:b7:8b:fb:
85:7c:10:b6:a3:c5:be:c2:69:29:d4:b9:ae:f1:4e:
aa:1b:bc:55:a7:fa:39:a7:b6:08:82:bd:01:93:94:
76:9e:e9:90:4f:ac:0d:42:99:8e:46:a5:49:12:8b:
16:ba:fa:40:71:a3:6f:20:bd:97:f1:26:b8:4b:62:
9d:f2:06:1a:f5:df:15:e2:45:31:f1:74:14:a0:7b:
ba:23:56:c4:c1:e9:ae:89:13:ab:2a:67:0f:0a:6b:
48:1b:15:1f:f1:0e:3b:35:d1:ef:19:cf:1e:d0:0a:
b3:46:25:17:11:c0:23:31:89:cc:5c:7c:c2:d5:7e:
cc:6e:6a:1a:0c:db:3d:5b:f2:26:7b:04:5f:49:a1:
58:5e:5f:3e:75:95:4a:9c:8e:dd:9b:19:17:14:af:
3c:7d:61:08:4d:a4:58:e6:a5:4a:e6:84:94:9f:bb:
c1:b7:70:86:8b:27:e4:92:52:5b:19:db:bd:fc:79:
b4:03:12:bb:70:df:28:a5:70:9d:e8:32:0e:30:97:
60:39:00:3a:49:e3:f5:2c:10:62:0c:ad:f2:38:2e:
5d:79:8f:83:bb:08:62:7b:07:16:58:33:e5:41:de:
71:bc:67:cb:42:b8:b8:92:92:d2:31:36:ab:b3:1d:
3c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:5C:A1:3D:5A:63:E6:5E:AB:38:A1:0B:21:0A:13:1D:5E:F4:6A:57
X509v3 Authority Key Identifier:
keyid:A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f8:aa:ea:51:0f:01:73:6c:86:ea:e2:62:78:cc:55:d6:ac:
4d:19:92:c1:dc:8a:d2:c4:23:5f:d1:7f:6e:f9:f2:d4:58:63:
e3:4c:84:32:dd:af:3c:cf:23:b9:fd:54:48:71:e8:e7:bf:23:
dd:dc:aa:e4:b9:3c:c6:af:e9:f3:25:0d:af:c1:69:c0:2e:3e:
7f:1b:3b:17:94:6e:4b:b9:fa:6d:7b:55:b4:b0:7f:6b:f1:89:
c4:d8:14:b9:1d:28:cf:06:28:fc:78:8a:c3:02:01:fd:56:49:
2a:f1:22:1e:66:77:e0:e2:c7:28:4a:e4:d3:b6:d2:4f:51:81:
d7:56:23:57:dc:e2:e1:c1:41:94:f4:24:ef:c1:b1:fc:1e:0c:
cf:02:25:15:a4:15:0b:fd:d0:3d:a2:f4:c0:0a:5c:34:1d:7c:
03:e9:85:a3:3b:83:7e:cc:73:d6:70:0e:d4:12:03:93:f9:27:
cd:e7:c5:b9:0a:bb:9f:49:00:ed:cc:8c:c6:b7:eb:69:a7:a3:
a1:99:6a:83:81:d8:9a:f6:3f:50:c3:5a:7d:70:6e:ed:1a:ff:
57:b4:13:73:a8:57:f3:32:4d:f4:3c:b2:ec:e2:0f:29:60:29:
42:95:28:76:6c:84:35:4d:8b:f5:64:8c:d0:10:9c:48:98:64:
b0:37:2b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:14:20 2026 by rpki-client