Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
File: qWpTYQ2O9mShJ1txquq7KFEEwk8.mft (raw, json)
Hash identifier: ZXM96PTLz+JaMSWXmv4Cvtw8QSd02kcqPR8T4+wwtlE=
Subject key identifier: 87:83:6E:DA:3C:1D:FE:2D:F2:F5:96:DC:6A:6C:E1:C0:3C:74:E3:50
Authority key identifier: A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F
Certificate issuer: /CN=a96a53610d8ef664a1275b71aaeabb285104c24f
Certificate serial: 019CA97CF5B358FEDF10805FA8D1302FC452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
Manifest number: 1841
Signing time: Sun 01 Mar 2026 13:01:04 +0000
Manifest this update: Sun 01 Mar 2026 13:01:04 +0000
Manifest next update: Mon 02 Mar 2026 13:01:04 +0000
Files and hashes: 1: qWpTYQ2O9mShJ1txquq7KFEEwk8.crl (hash: qmqhlnMU98eaFeGbfjWv6qql1SMDM7pbuOgpTcgAJPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:7c:f5:b3:58:fe:df:10:80:5f:a8:d1:30:2f:c4:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96a53610d8ef664a1275b71aaeabb285104c24f
Validity
Not Before: Mar 1 13:01:04 2026 GMT
Not After : Mar 2 13:01:04 2026 GMT
Subject: CN=87836eda3c1dfe2df2f596dc6a6ce1c03c74e350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:51:97:1f:cd:5f:20:bd:cd:1e:40:5f:2b:
10:6d:c6:bd:c8:c5:18:94:03:1a:99:7b:36:65:a8:
f7:9a:1e:ac:9f:7b:93:7b:1a:d5:f5:3b:da:d5:c2:
1c:e4:33:c4:e5:2e:96:ad:0c:63:1f:a3:e6:25:cf:
1e:e3:f6:58:e1:ff:7c:62:94:6e:fa:f3:80:0a:c0:
78:38:76:a3:12:08:69:d9:c4:9a:26:4a:1b:ef:de:
28:fa:bf:e6:26:6e:b4:fc:5d:f3:9d:b4:ca:3f:3b:
0f:79:e2:3a:bb:9a:3b:63:5f:00:71:03:e3:ad:3e:
46:16:05:52:41:76:41:90:b0:d7:7e:f7:7f:38:2d:
80:66:85:4e:55:24:32:88:ff:89:3e:b1:76:fb:9b:
63:45:fc:e8:61:c1:aa:42:f0:7d:70:db:91:f2:1b:
2b:45:8d:d1:43:49:89:95:83:20:0c:6c:17:77:8b:
c1:85:af:83:fc:91:95:76:7c:b8:c0:ed:66:99:97:
cc:48:da:d7:fd:2e:6d:96:3e:58:3c:55:a4:72:a3:
12:9a:da:e7:ed:f8:36:01:05:2e:ad:53:28:a2:0a:
9a:4a:79:f4:68:5b:10:98:f8:ad:1b:77:4a:a5:03:
87:4d:32:3e:af:2b:fd:95:64:9c:38:1e:fb:16:1b:
dc:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:83:6E:DA:3C:1D:FE:2D:F2:F5:96:DC:6A:6C:E1:C0:3C:74:E3:50
X509v3 Authority Key Identifier:
keyid:A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0a:9b:6a:2e:a6:c1:d1:aa:b3:8e:7a:d4:71:b0:21:d5:ea:
3c:3d:e2:7e:2e:5c:e6:c7:fb:1a:f1:b2:3b:43:8c:d5:48:19:
41:f0:d8:5e:97:93:5e:92:4a:bb:25:79:f5:00:0b:92:e9:8f:
fc:c0:94:51:aa:39:0d:a5:86:2a:9d:d8:5f:1e:7b:3b:1a:55:
ed:95:06:95:82:46:fb:cd:87:b5:88:f1:00:3b:b8:f0:c3:fa:
97:d3:e9:4f:03:67:98:d8:4b:83:4a:c9:c6:76:3b:b3:da:4c:
95:cd:45:19:53:ce:6b:88:44:5d:c6:b4:91:ca:ec:b7:7d:10:
05:ac:93:9d:8e:1c:84:8c:6b:76:1c:99:79:be:83:51:51:dd:
83:c2:c4:ab:2c:cb:44:f1:fd:f1:24:7c:10:bc:9e:6d:17:bc:
9c:09:f4:ec:17:51:11:3b:e5:4b:97:e6:ff:16:eb:a9:df:0c:
a0:44:5c:87:5e:ce:c6:5f:69:1b:ce:36:43:4a:b1:c6:d4:f6:
2b:93:7c:26:b7:3a:8a:29:1c:f1:4c:64:62:35:b7:36:97:7c:
fb:27:ab:47:f5:2f:b9:10:a9:a9:d3:96:94:a6:9b:ee:07:dd:
63:8a:55:cf:2c:d7:ee:40:30:08:66:ec:ee:e2:f8:2b:f6:dc:
50:17:11:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:41 2026 by rpki-client