Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
File: cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft (raw, json)
Hash identifier: hk1Lm5obGz6XSpW1G8nyCTB08/zHGKn0SyAy9p8T3vI=
Subject key identifier: F8:16:50:EE:40:B7:7D:0C:FA:D4:05:C0:45:7F:E4:28:AD:1B:EC:33
Authority key identifier: 70:B4:13:FA:78:2A:30:42:83:0D:A2:3A:A3:F3:59:4A:7D:5E:A2:F4
Certificate issuer: /CN=70b413fa782a3042830da23aa3f3594a7d5ea2f4
Certificate serial: 019CABD8E752F469A15C62AFD3B785110D02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 00:00:44 +0000
Manifest this update: Mon 02 Mar 2026 00:00:44 +0000
Manifest next update: Tue 03 Mar 2026 00:00:44 +0000
Files and hashes: 1: cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl (hash: usSj00JykjOwpg4Y4IVBxCznbOL3ZhSvO8M/vHcjTmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d8:e7:52:f4:69:a1:5c:62:af:d3:b7:85:11:0d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70b413fa782a3042830da23aa3f3594a7d5ea2f4
Validity
Not Before: Mar 2 00:00:44 2026 GMT
Not After : Mar 3 00:00:44 2026 GMT
Subject: CN=f81650ee40b77d0cfad405c0457fe428ad1bec33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:26:69:60:c1:47:08:bd:e1:62:28:0a:96:68:
7b:2e:6e:e0:53:3f:92:c0:28:42:0c:a3:7a:8f:93:
f1:82:97:e7:08:af:1f:cd:a2:23:51:61:12:6d:25:
63:f2:9b:ba:3b:2f:06:e0:ef:0d:7e:24:88:35:12:
04:2b:f4:d0:32:2e:e8:03:5b:69:bb:a5:7c:5c:01:
4f:8f:3a:04:a6:ba:07:b3:41:e2:59:0c:b6:f0:4c:
5d:b4:25:29:b1:a3:12:aa:5b:55:62:e1:bb:a7:f7:
6f:c3:e7:97:3f:c3:af:51:66:71:e4:49:6f:c4:9c:
da:73:4b:06:c3:27:1a:09:4f:7a:d2:09:3e:88:8f:
82:e7:ff:b8:22:fa:8c:46:75:e5:e0:9f:8a:5e:66:
51:ba:97:dd:2b:22:6e:2b:03:a1:1e:7c:0c:99:ed:
8b:ed:da:15:70:a5:d8:03:3e:05:64:a5:9c:6c:21:
16:d6:6c:4e:0e:b1:31:a7:1e:49:3f:92:88:a2:e9:
7c:e8:50:a1:d4:c5:18:03:7c:93:4b:c6:d1:1c:c8:
2a:97:a9:e3:fa:59:98:10:6a:56:c4:4b:06:c8:db:
72:8b:f6:3e:e0:c4:60:17:a0:63:67:24:3d:ab:c2:
96:8d:02:98:85:8d:19:1e:0b:f9:9d:5f:82:9f:ff:
6d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:16:50:EE:40:B7:7D:0C:FA:D4:05:C0:45:7F:E4:28:AD:1B:EC:33
X509v3 Authority Key Identifier:
keyid:70:B4:13:FA:78:2A:30:42:83:0D:A2:3A:A3:F3:59:4A:7D:5E:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cLQT-ngqMEKDDaI6o_NZSn1eovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/8cf1f5-2095-48fa-8c3a-a3137bc83d0a/1/cLQT-ngqMEKDDaI6o_NZSn1eovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:30:5f:9b:5e:f9:d7:01:6e:12:7a:03:0b:72:cd:d3:2e:ca:
48:ae:06:50:f4:35:af:40:df:ce:e7:bd:1e:74:81:d1:26:63:
d6:05:7e:db:5d:cd:8e:2e:eb:ec:d0:10:b7:b7:c2:04:92:d8:
8e:77:51:72:c8:a2:61:0f:dc:94:69:38:18:d1:0c:6b:c7:5e:
ab:60:32:d4:31:7f:bd:37:65:d9:13:ee:a8:35:e1:35:45:74:
b6:4f:c1:13:8a:06:9b:cf:4f:86:91:da:9d:e9:a8:cd:f6:b1:
ba:99:69:19:2e:84:d1:9d:6c:ec:6e:74:33:31:77:32:08:82:
ff:df:d4:5f:08:4c:2e:a6:ab:1e:6d:4d:ba:26:ad:6a:ea:cf:
41:88:38:a1:0a:14:88:f2:6e:25:b4:4a:22:ad:fe:e4:77:11:
d7:5a:9b:16:d8:00:c5:70:2e:53:6a:42:0d:9a:40:06:19:cc:
99:5d:86:ef:33:4c:92:f2:d4:a5:d3:1a:ce:81:c0:0c:03:83:
04:b3:78:b2:4e:09:cc:d3:6b:f7:2d:8b:a1:6f:74:9b:b2:d6:
a7:d9:fd:c6:ff:04:21:77:5f:9e:4f:52:20:d0:93:4e:00:73:
b1:c1:8d:c8:d5:95:14:c5:1a:b6:df:15:18:90:8d:45:7a:fc:
5c:ae:2e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:07:43 2026 by rpki-client