Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
File: qEmcFnojbc9FXrmHHw3O0LoNwpE.mft (raw, json)
Hash identifier: 7zavaP8GV0bVWrtEGvMZL27cl6EjxYX4QtW6PhJC5q8=
Subject key identifier: 8B:23:A6:12:F6:FF:60:4D:B7:F1:43:A7:49:74:46:5F:B4:BF:E9:2B
Authority key identifier: A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
Certificate issuer: /CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Certificate serial: 019CAA8F625F1042FE8D866606C6C2CC692C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
Manifest number: 07CA
Signing time: Sun 01 Mar 2026 18:00:49 +0000
Manifest this update: Sun 01 Mar 2026 18:00:49 +0000
Manifest next update: Mon 02 Mar 2026 18:00:49 +0000
Files and hashes: 1: qEmcFnojbc9FXrmHHw3O0LoNwpE.crl (hash: tYuqfeTbV8rmPNaPHXd8YD2goGjz384SOfD2OWW188A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:62:5f:10:42:fe:8d:86:66:06:c6:c2:cc:69:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Validity
Not Before: Mar 1 18:00:49 2026 GMT
Not After : Mar 2 18:00:49 2026 GMT
Subject: CN=8b23a612f6ff604db7f143a74974465fb4bfe92b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:68:c3:66:d3:4f:19:d6:06:ce:08:60:df:d5:
f6:9f:c7:e4:10:1e:42:b9:ff:99:88:e3:f2:cb:5b:
c4:fc:5e:38:f7:36:cf:df:c4:87:ca:31:6f:fb:e0:
c2:bd:83:64:28:32:38:49:14:79:f7:e1:1e:0c:32:
cc:06:03:77:1b:8d:f8:78:38:c5:fd:5a:53:3c:46:
bf:19:d6:1c:17:44:c7:50:e3:29:12:da:16:a7:3d:
36:f9:0a:42:06:bf:95:7d:1b:78:1b:16:c3:48:53:
dd:fa:e0:b1:a0:54:54:9f:f7:ca:17:b9:93:de:95:
94:82:d8:9c:50:cb:f8:74:d6:91:f3:9f:1d:09:fd:
ce:30:b2:89:cf:74:18:80:99:da:97:88:67:8d:d5:
d7:84:f3:dc:d2:d7:e8:0b:28:1b:a6:97:11:7a:6e:
ec:23:69:f2:49:a2:3d:19:44:f1:de:73:7d:95:dc:
51:10:e6:66:35:a8:c2:2b:ea:19:5a:49:0f:06:1e:
ae:83:47:55:73:29:a8:94:c7:ee:0e:5f:f7:3b:82:
5d:d2:c3:d5:99:b1:8e:73:1f:1c:d3:bd:a0:dc:53:
bc:31:c8:b4:f6:89:b9:6b:5f:28:2e:c9:42:1c:81:
1e:c1:da:fa:3b:a5:ba:bf:65:56:02:a2:94:54:f8:
34:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:23:A6:12:F6:FF:60:4D:B7:F1:43:A7:49:74:46:5F:B4:BF:E9:2B
X509v3 Authority Key Identifier:
keyid:A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:61:ea:3f:c9:7f:45:5a:a1:d3:84:f6:55:39:41:4c:44:da:
a6:65:df:18:1f:b2:f7:a2:e1:df:8a:4e:2e:95:27:19:9c:5f:
d7:d2:d3:90:3d:97:d6:61:01:2e:f1:fe:76:45:cd:5e:05:65:
e0:5f:51:72:12:ce:35:d1:3e:de:41:7c:b5:b3:e1:90:81:1e:
24:35:4b:2b:65:e6:b3:4c:1e:ce:e3:dc:f5:3d:e3:e0:87:8e:
30:25:bc:3d:95:25:6d:e6:51:00:ab:07:9d:c0:9b:1b:b6:c4:
cf:d9:59:7d:92:eb:6e:4b:62:4f:f5:4b:91:58:36:50:c8:8f:
63:d3:51:aa:80:c5:43:9f:80:92:dc:8d:e6:02:61:ca:ee:3a:
02:79:be:b4:a4:df:94:69:73:5f:66:f7:0f:a4:dd:62:ab:88:
ec:5e:e8:e5:db:05:a3:f2:e4:df:68:2d:22:a6:91:ca:81:f1:
22:0d:3c:a4:18:bb:0c:15:ad:49:a7:02:7d:50:e9:3c:da:cc:
f9:c5:9b:d6:c5:ed:83:81:0b:c9:ea:cb:92:8d:80:f1:c1:43:
e7:c3:8f:14:c0:2b:a4:a3:34:44:9e:47:3a:66:2c:25:ba:70:
4b:a4:cf:d8:a4:dd:3e:81:15:cd:ec:f5:58:12:0e:30:54:9f:
28:08:bb:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:02:40 2026 by rpki-client