Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
File: qQ_wEQVOz-aKitx94mit5sCCdxE.mft (raw, json)
Hash identifier: GY+AqDn1se2OyzqPrGEmObmo6ybMF8nXP0oGDgvnQwg=
Subject key identifier: F7:7C:3D:8E:99:F5:A7:AD:4B:40:0F:63:8A:59:3B:37:4B:BD:40:83
Authority key identifier: A9:0F:F0:11:05:4E:CF:E6:8A:8A:DC:7D:E2:68:AD:E6:C0:82:77:11
Certificate issuer: /CN=a90ff011054ecfe68a8adc7de268ade6c0827711
Certificate serial: 019CAB6B4C89B2FBC55803AFC462E2FBFF12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:01 +0000
Manifest this update: Sun 01 Mar 2026 22:01:01 +0000
Manifest next update: Mon 02 Mar 2026 22:01:01 +0000
Files and hashes: 1: qQ_wEQVOz-aKitx94mit5sCCdxE.crl (hash: RcnXjcVeqdxpYVNTMut53PWYHDPUT/Y+AkHAfhtLq/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:4c:89:b2:fb:c5:58:03:af:c4:62:e2:fb:ff:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90ff011054ecfe68a8adc7de268ade6c0827711
Validity
Not Before: Mar 1 22:01:01 2026 GMT
Not After : Mar 2 22:01:01 2026 GMT
Subject: CN=f77c3d8e99f5a7ad4b400f638a593b374bbd4083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:61:3c:7f:c4:56:3a:29:6b:2c:ab:87:50:36:
5b:13:32:bd:53:b6:1a:c1:94:97:77:9b:51:c7:b7:
f4:cc:f0:31:e8:30:4a:9c:45:8d:97:e1:4d:33:aa:
11:e1:bc:d1:18:09:76:2c:37:35:05:fe:f4:11:a9:
ac:4f:f5:20:76:de:21:5b:3a:24:7c:a5:93:24:a5:
59:79:d8:af:cc:ab:5d:14:07:be:15:4c:26:81:2e:
43:f3:60:ce:60:98:55:2e:ce:9d:e6:a1:a9:78:a2:
b5:f3:0a:8f:4a:0a:46:1c:39:67:63:d1:74:ab:a7:
f7:17:fa:fa:0b:c9:e5:ee:79:04:e4:24:52:40:25:
96:6b:99:2f:5f:e3:f1:64:83:3c:12:86:49:85:bd:
b2:58:33:04:c2:f8:2e:a2:82:09:d7:54:b0:7c:ce:
8b:59:44:fe:fc:3a:5f:71:58:ae:cd:a3:ed:dc:a3:
e7:49:61:60:b8:9b:07:8e:e6:4c:8a:59:04:6d:16:
a5:48:50:b0:93:7d:01:40:70:ad:ca:e3:28:39:c6:
ee:c7:a8:60:98:36:f5:aa:61:49:18:a2:fe:0d:8b:
a2:c7:58:91:3c:fc:f8:75:72:9d:ee:af:6b:de:66:
f1:b0:05:88:13:56:52:30:66:2d:e7:19:c2:02:87:
ea:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:7C:3D:8E:99:F5:A7:AD:4B:40:0F:63:8A:59:3B:37:4B:BD:40:83
X509v3 Authority Key Identifier:
keyid:A9:0F:F0:11:05:4E:CF:E6:8A:8A:DC:7D:E2:68:AD:E6:C0:82:77:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQ_wEQVOz-aKitx94mit5sCCdxE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ba73a2-f0e6-476f-8133-e99277037a43/1/qQ_wEQVOz-aKitx94mit5sCCdxE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:80:11:b4:8b:b5:a1:12:45:40:70:0e:ed:dc:0a:fd:c1:b6:
16:cb:35:d5:95:f2:0e:59:ed:f9:f7:cd:0c:47:1c:b1:c5:24:
bb:d9:7d:0b:7d:79:c3:40:93:36:b7:8e:b8:fb:02:2c:b2:0f:
9d:9f:75:cc:2d:67:81:89:99:b5:3c:ce:f3:ab:63:84:77:ad:
82:28:ed:6c:c8:76:8d:4f:95:fc:56:76:0b:dd:5b:ee:23:f8:
10:08:5d:54:48:4b:01:49:d0:89:83:e5:50:36:46:dd:0f:c7:
45:d8:46:73:7b:7e:ec:dd:6d:ed:00:0f:ca:1e:a1:cf:1d:e7:
d0:e8:7e:00:b1:69:17:df:fd:05:b2:ab:c0:fb:cc:c8:90:f7:
a6:46:60:38:10:cb:c3:f0:c4:d7:39:1f:66:8b:94:f4:60:b9:
3d:0b:0e:dd:82:27:6e:a5:9c:46:93:89:3e:21:24:2f:3c:79:
57:6b:a1:0a:cf:f3:38:d1:bf:ad:16:db:e8:6b:4b:56:d2:2a:
84:d7:77:c3:50:cb:8b:4d:08:b7:f7:f4:83:e5:69:0c:96:47:
ef:e6:9d:37:ce:15:87:d8:04:d9:b2:c8:b7:e2:e3:14:fd:b7:
53:c2:4f:1d:06:65:b8:39:db:5f:de:2a:c3:50:ba:fb:7d:73:
dc:51:ca:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:12:45 2026 by rpki-client