Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
File: qEmcFnojbc9FXrmHHw3O0LoNwpE.mft (raw, json)
Hash identifier: Lr/GeQjhCBfSzZY9B9h38cY0zx3xqD3GhgJ3UkGrZCE=
Subject key identifier: B4:B8:9F:8C:0C:80:C4:59:5F:E7:0A:77:C1:A7:4C:B6:98:6E:C6:22
Authority key identifier: A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
Certificate issuer: /CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Certificate serial: 019D981874BA19784EC9E130466267F665CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
Manifest number: 0845
Signing time: Thu 16 Apr 2026 21:00:32 +0000
Manifest this update: Thu 16 Apr 2026 21:00:32 +0000
Manifest next update: Fri 17 Apr 2026 21:00:32 +0000
Files and hashes: 1: qEmcFnojbc9FXrmHHw3O0LoNwpE.crl (hash: grNRPwjd7KmaUxz2i6cgPVB9FPBpiLKSPgWK20V+rW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:74:ba:19:78:4e:c9:e1:30:46:62:67:f6:65:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Validity
Not Before: Apr 16 21:00:32 2026 GMT
Not After : Apr 17 21:00:32 2026 GMT
Subject: CN=b4b89f8c0c80c4595fe70a77c1a74cb6986ec622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2f:c9:dc:31:0f:6f:f9:12:e6:19:ca:87:c3:
4d:ab:86:97:f8:ed:92:79:91:fe:bb:ac:c4:e2:cf:
18:98:86:a1:6e:e7:6c:ad:dc:e9:33:de:3f:a4:0f:
06:a0:f5:58:38:51:b3:d2:dd:c2:e9:50:80:82:b5:
19:43:74:e7:80:77:09:f8:6f:83:59:3f:2d:38:9e:
67:cd:55:4e:b8:ca:23:ed:76:98:3c:e2:c7:19:50:
0f:6e:34:9c:f3:22:40:bb:5a:d2:2e:ab:af:e5:ae:
1e:d8:52:93:4c:bf:fc:c7:01:36:74:ae:b8:1f:61:
e7:ba:a1:7a:7f:0c:c4:d9:29:77:78:a6:17:2e:2b:
72:19:62:1c:04:8a:c2:1d:cb:b5:85:8d:d1:53:7d:
16:29:86:7a:7b:1d:ee:05:1b:6a:c8:f4:2a:4d:cf:
47:59:7d:9b:5e:80:c8:38:5e:2b:c8:da:96:48:56:
03:96:68:3e:9e:33:c7:08:63:57:92:f7:67:1e:df:
1e:27:99:8d:63:d7:7a:7b:33:1c:66:06:b6:28:63:
b6:86:a7:94:4a:b4:8e:40:29:4b:88:09:e1:81:af:
aa:e5:32:42:a2:74:c6:8f:9c:16:f0:09:31:57:2f:
d6:ae:e9:3d:16:96:d7:97:f8:73:74:16:80:34:fe:
30:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B8:9F:8C:0C:80:C4:59:5F:E7:0A:77:C1:A7:4C:B6:98:6E:C6:22
X509v3 Authority Key Identifier:
keyid:A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5f:db:18:77:cf:7b:f6:ae:ca:de:e8:20:7f:3e:36:77:69:
00:42:55:47:4b:75:d7:12:15:b4:ba:93:bb:60:09:66:27:fa:
16:ce:9a:9b:40:bc:ed:b6:03:48:85:12:d7:21:ca:86:be:c1:
8b:95:e6:1a:42:9c:0c:54:f9:fe:22:9b:3a:69:3c:3c:46:c1:
d1:dc:d2:ad:fa:7b:6e:71:63:7d:8d:06:e6:1c:f7:c5:1c:c1:
3c:82:18:ab:bd:d1:97:65:7d:94:55:2f:f0:b5:a4:b2:c2:c2:
ca:fe:ed:4e:96:13:48:95:39:dc:ff:b6:b0:eb:70:b7:4d:b3:
2a:eb:15:5a:d8:bc:32:13:1c:a6:1d:c9:b3:52:2e:05:1c:a4:
45:59:65:8e:f5:ac:c4:d2:6f:fa:91:89:03:fd:6f:23:0f:84:
7a:fa:fd:b6:69:d6:a8:00:e8:48:08:c7:46:1a:01:dc:8c:50:
32:4e:55:70:0d:e1:ef:d8:c8:cd:9c:04:3e:9d:05:08:4c:e8:
6e:a8:de:bd:86:52:d1:31:6b:27:ad:4a:1d:c9:0d:69:90:ac:
c0:59:58:72:63:5e:40:65:a0:f9:ec:ef:78:20:ca:14:e7:e3:
02:0b:ff:a2:a5:9e:05:bb:dc:a4:ac:ee:b3:0a:37:ce:fb:36:
27:2d:8e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:14 2026 by rpki-client