Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
File: rqVXfKLwuifftTsIjifG2Uty7_c.mft (raw, json)
Hash identifier: Xpm3GnHSiq60ttwZ4ctgFNlfBTfs9KB2ICyOdODLfSc=
Subject key identifier: 57:E6:AA:CC:3D:C3:41:48:55:F9:19:0D:3D:6A:7D:B4:C0:49:87:3B
Authority key identifier: AE:A5:57:7C:A2:F0:BA:27:DF:B5:3B:08:8E:27:C6:D9:4B:72:EF:F7
Certificate issuer: /CN=aea5577ca2f0ba27dfb53b088e27c6d94b72eff7
Certificate serial: 019D9AABC27C3C5B53B446C96D78C474C7EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
Manifest number: 0FB6
Signing time: Fri 17 Apr 2026 09:00:40 +0000
Manifest this update: Fri 17 Apr 2026 09:00:40 +0000
Manifest next update: Sat 18 Apr 2026 09:00:40 +0000
Files and hashes: 1: rqVXfKLwuifftTsIjifG2Uty7_c.crl (hash: lSJtaiCYnBAPAMIHbCx7fPtFtgbx+GqtJnK6Ow1uroc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:c2:7c:3c:5b:53:b4:46:c9:6d:78:c4:74:c7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aea5577ca2f0ba27dfb53b088e27c6d94b72eff7
Validity
Not Before: Apr 17 09:00:40 2026 GMT
Not After : Apr 18 09:00:40 2026 GMT
Subject: CN=57e6aacc3dc3414855f9190d3d6a7db4c049873b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:75:e6:67:9e:30:17:87:20:a4:50:1a:3c:b4:
9e:f4:7c:6c:85:c2:92:21:8a:da:d7:ac:8d:f2:93:
6d:20:f5:58:1f:e0:8b:7c:4a:bc:67:88:ad:18:b7:
92:6e:ad:dd:ab:86:5c:8b:f1:13:7a:41:2b:dd:44:
9f:a0:14:e9:13:5a:40:45:1f:6b:8d:9f:69:12:d9:
ec:f5:9f:e1:28:e7:73:2d:c6:54:b4:16:05:e7:8d:
e5:a1:7c:91:67:45:bf:52:f8:a2:53:26:07:32:c9:
f7:86:a5:23:7d:56:0b:91:5b:53:a0:df:61:b7:93:
a7:92:cf:ae:3a:65:5c:72:01:4a:be:60:64:8a:80:
0f:96:91:ea:a1:51:12:fe:91:bb:14:7c:4d:7e:f6:
dc:f6:53:30:d5:ad:11:05:a7:38:95:e8:e5:1f:51:
6f:33:b2:7d:6c:3e:38:40:d8:6d:2f:f8:35:63:05:
48:34:86:52:3c:86:45:c8:a6:31:8e:61:0f:a5:9c:
c1:a7:21:d2:6c:3b:fa:7c:10:7a:7a:b6:06:61:e9:
b9:5b:e6:19:89:06:50:db:9b:ba:f5:9d:78:74:b1:
3a:ec:b2:4f:24:36:6c:e8:f6:ed:c3:b0:ce:43:36:
7f:0f:d7:5c:72:23:2f:95:5a:d5:1b:b3:ce:7d:e1:
e8:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:E6:AA:CC:3D:C3:41:48:55:F9:19:0D:3D:6A:7D:B4:C0:49:87:3B
X509v3 Authority Key Identifier:
keyid:AE:A5:57:7C:A2:F0:BA:27:DF:B5:3B:08:8E:27:C6:D9:4B:72:EF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rqVXfKLwuifftTsIjifG2Uty7_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/63e627-6181-47f0-93bb-2395b683b185/1/rqVXfKLwuifftTsIjifG2Uty7_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c2:65:26:a6:ab:37:65:39:8d:d8:64:05:ef:39:32:44:fe:
2f:3c:3c:44:e7:fd:eb:9d:4d:6d:86:33:96:e9:ea:e2:0b:44:
b6:df:16:7d:04:22:90:b9:28:02:72:82:c3:22:12:59:69:11:
91:18:a4:ad:9d:02:91:c6:ab:07:82:5f:76:ab:79:5b:af:98:
d6:3e:0a:a3:be:33:3e:8d:74:47:e4:6c:de:17:af:b1:11:5e:
8e:9e:04:87:d5:91:70:0e:de:7b:f1:bd:ef:42:d1:59:79:c9:
ed:0b:9d:62:50:c0:8a:37:1d:53:23:66:c8:d7:3e:f4:ad:79:
40:6b:73:ea:cd:18:08:cc:3f:f0:78:4f:ae:47:0c:26:ad:03:
a3:6e:5e:bd:29:d1:0b:53:6b:52:01:b4:8e:87:2e:e5:0a:91:
73:f5:a2:64:96:c4:e7:a9:ba:fc:c0:3c:3c:14:cd:b2:68:e5:
45:35:81:ee:fb:15:96:56:47:e0:0b:cd:43:a6:5d:80:c4:a7:
43:04:a5:32:da:81:5e:e1:c2:61:51:d9:39:cb:d2:c6:d0:1f:
d8:c2:18:17:8f:79:2d:c7:72:36:40:f5:2b:e2:22:fc:f8:35:
ea:68:89:a8:f0:22:ee:b3:bc:e9:38:b7:c7:6b:95:27:af:d8:
58:bf:1f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:53 2026 by rpki-client