Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
File: qhC-mR89uJUJcQwgZ233qKS_4bQ.mft (raw, json)
Hash identifier: DCH/T4EU1XVznBShUfbwTQegMH14TigVb6SzPUnYvLo=
Subject key identifier: F3:81:DC:5D:C9:CD:8B:FB:0C:03:97:2C:23:EB:60:A8:6F:B7:1D:33
Authority key identifier: AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
Certificate issuer: /CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Certificate serial: 019D9BBE7DB4AF6B7C9C72EE42776C751993
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
Manifest number: 0CCF
Signing time: Fri 17 Apr 2026 14:00:45 +0000
Manifest this update: Fri 17 Apr 2026 14:00:45 +0000
Manifest next update: Sat 18 Apr 2026 14:00:45 +0000
Files and hashes: 1: qhC-mR89uJUJcQwgZ233qKS_4bQ.crl (hash: PCScLdCEHUVAKxOmOET3y1CLKYqiXAZI1tmgXXSuT9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:7d:b4:af:6b:7c:9c:72:ee:42:77:6c:75:19:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Validity
Not Before: Apr 17 14:00:45 2026 GMT
Not After : Apr 18 14:00:45 2026 GMT
Subject: CN=f381dc5dc9cd8bfb0c03972c23eb60a86fb71d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:23:d2:bc:03:2c:2d:f8:99:8b:dc:a8:8c:9a:
53:e0:47:b8:e0:c3:7f:35:03:d8:fd:a6:ba:1d:75:
66:f0:eb:1f:e7:dc:5d:80:24:7f:f3:2c:f3:cd:5d:
f1:99:76:3b:07:0a:d3:cb:8c:6c:13:bc:29:a5:83:
fc:2f:af:fc:80:51:6b:d3:c4:61:43:ac:6c:a3:1c:
a4:37:65:09:9e:a8:96:47:58:34:a2:a1:83:1b:23:
fb:9f:8c:24:03:3c:54:ae:79:a8:f7:bc:fd:c0:3d:
db:78:f9:e3:b5:9d:e5:69:67:bd:d4:13:db:0c:8d:
1d:c6:df:a3:69:64:01:53:2a:31:5f:ef:69:c8:69:
10:b0:d4:65:24:d0:c9:35:de:98:97:05:d2:2f:10:
8d:b1:2d:5f:4c:20:9b:dd:25:c8:18:9b:91:83:2e:
18:8a:ca:7a:2c:02:9a:65:50:f7:b6:19:c9:e9:55:
15:38:64:18:e1:df:53:20:74:8b:ff:63:17:d5:63:
ec:21:51:2a:c7:6d:f6:45:c8:a7:d1:34:87:35:e4:
8e:41:09:30:2e:a1:c4:8f:72:29:02:e2:48:ea:db:
99:cd:62:bc:b5:94:9c:8d:a3:5c:11:05:bf:6f:35:
26:ab:e0:3a:59:8c:26:3a:d0:53:bf:ee:80:cd:e0:
fb:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:81:DC:5D:C9:CD:8B:FB:0C:03:97:2C:23:EB:60:A8:6F:B7:1D:33
X509v3 Authority Key Identifier:
keyid:AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:c1:d3:33:d0:ca:74:51:df:bc:bc:e9:d0:75:1f:13:f9:35:
e9:33:45:cb:88:ea:a2:25:b0:e5:a8:88:c8:5a:18:c3:78:da:
f2:70:2b:61:a0:0c:a2:40:df:09:81:8f:02:56:db:18:3a:94:
66:9e:05:be:b4:24:ee:c0:e8:91:90:d5:41:8d:ff:91:4f:00:
d3:24:02:db:44:23:40:34:7f:be:cb:d7:81:65:23:06:63:99:
5d:00:f9:6b:f7:0e:85:c7:f6:d4:4f:d0:26:46:3f:8a:34:a6:
f1:66:a6:4a:be:f9:98:fe:49:1e:50:cf:f5:69:24:c6:25:f7:
92:61:10:f5:ef:90:83:cd:5f:95:eb:9f:06:46:bd:7c:af:45:
86:c4:d3:e6:54:8e:d8:42:b2:02:58:92:73:0f:8e:12:7e:85:
df:16:ba:ed:bc:18:dc:c2:f3:d5:35:22:42:01:13:a5:22:24:
92:94:ab:be:40:13:16:02:ac:52:1d:05:14:6b:44:0e:17:8b:
f8:b0:c1:a6:68:24:6b:2b:4f:a5:4f:46:69:0e:a6:90:6f:0b:
99:6a:af:94:16:79:11:fc:4e:71:33:ab:73:bc:7e:61:f7:88:
bb:47:04:f0:44:60:83:28:0c:25:be:e6:d6:b0:fc:85:1f:c1:
3a:12:18:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:38:12 2026 by rpki-client