Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft
File: dqIj-utMXd95nTyiqWDAbB1tHZY.mft (raw, json)
Hash identifier: ijxymMYT/y+gjs57gfjlGxPKl+ARbQr7L8ednUC6ag8=
Subject key identifier: 63:E3:6C:1A:60:FE:02:D0:BC:DB:EF:D1:BF:B4:A0:1B:81:8B:62:7E
Authority key identifier: 76:A2:23:FA:EB:4C:5D:DF:79:9D:3C:A2:A9:60:C0:6C:1D:6D:1D:96
Certificate issuer: /CN=76a223faeb4c5ddf799d3ca2a960c06c1d6d1d96
Certificate serial: 019D9A06B246EDE1D8FFB0CA11E1707AAC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dqIj-utMXd95nTyiqWDAbB1tHZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft
Manifest number: 0E70
Signing time: Fri 17 Apr 2026 06:00:23 +0000
Manifest this update: Fri 17 Apr 2026 06:00:23 +0000
Manifest next update: Sat 18 Apr 2026 06:00:23 +0000
Files and hashes: 1: dqIj-utMXd95nTyiqWDAbB1tHZY.crl (hash: 8dY+/9epSz4KY16m2VL1wOYEjohlWqcviqwkH4c2AUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dqIj-utMXd95nTyiqWDAbB1tHZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:b2:46:ed:e1:d8:ff:b0:ca:11:e1:70:7a:ac:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76a223faeb4c5ddf799d3ca2a960c06c1d6d1d96
Validity
Not Before: Apr 17 06:00:23 2026 GMT
Not After : Apr 18 06:00:23 2026 GMT
Subject: CN=63e36c1a60fe02d0bcdbefd1bfb4a01b818b627e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e8:c6:62:24:bb:96:95:d5:0d:d8:9e:01:2b:
04:f4:59:9f:c0:68:53:b6:d3:67:f5:14:f0:bc:c9:
00:9b:c6:52:e7:34:cc:16:f3:46:39:b9:72:3c:49:
94:5f:57:c5:d2:42:e2:28:99:99:d2:84:d4:8e:49:
05:56:59:5d:e2:17:77:60:b4:a7:24:40:15:eb:e4:
d8:e7:64:13:4a:c9:08:0c:1c:b5:10:c4:a6:34:84:
30:40:6f:00:90:a6:e8:35:b1:71:cd:96:c5:84:56:
0c:d2:b2:64:be:1a:40:19:cf:72:4a:a5:5b:cc:4d:
b8:50:ad:03:21:de:7a:79:ee:ac:4a:48:8c:b7:41:
cb:85:f2:4e:8c:00:19:b1:25:56:ba:26:95:32:59:
49:7a:b4:0f:3f:0a:86:c2:d4:41:39:89:81:4d:55:
53:b7:26:34:ec:a7:ca:e1:64:ca:95:b8:0c:2b:aa:
81:06:49:5b:7b:60:f6:d9:94:6a:03:23:7c:8d:df:
86:a3:7c:ad:0c:98:dc:db:65:f0:2f:bb:dd:02:86:
a8:a5:d0:18:d7:43:42:db:65:6b:d1:6b:b3:1b:78:
c2:b0:ba:be:33:69:2f:0b:a1:8d:9a:d3:bf:d3:22:
eb:0d:97:65:ba:a8:e2:54:b7:8a:6e:b1:55:88:c7:
8c:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E3:6C:1A:60:FE:02:D0:BC:DB:EF:D1:BF:B4:A0:1B:81:8B:62:7E
X509v3 Authority Key Identifier:
keyid:76:A2:23:FA:EB:4C:5D:DF:79:9D:3C:A2:A9:60:C0:6C:1D:6D:1D:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dqIj-utMXd95nTyiqWDAbB1tHZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/5f0ab1-235c-4cda-b538-1ddee855cdf8/1/dqIj-utMXd95nTyiqWDAbB1tHZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:3d:65:85:4e:a9:56:3e:c3:26:25:93:04:73:be:78:eb:ca:
d9:8a:56:53:d3:6d:00:92:09:2a:b1:b6:85:f7:f1:49:6f:c9:
27:5a:d0:1f:16:74:74:76:4a:43:b3:b2:99:70:2f:7e:6c:ac:
55:2c:7f:5d:4f:82:a0:a2:75:a3:e1:93:eb:ee:d4:eb:80:b8:
56:24:50:99:f9:1d:41:cb:30:fe:cc:a8:91:36:21:3d:cb:78:
a2:82:a0:c6:2f:13:c6:16:d8:d9:9b:4e:02:96:5d:e1:b0:ce:
a9:f8:52:94:be:db:b3:7f:b7:12:27:f3:86:65:b4:8f:14:16:
5a:7e:6d:e9:41:e7:3d:57:96:d2:1e:b6:38:0f:a7:e0:38:8c:
b0:7c:be:c5:aa:5e:82:4a:19:46:51:83:7b:e3:1c:fd:0c:86:
35:55:10:46:fe:50:62:98:45:2b:c1:3b:4a:88:d9:d8:52:53:
b0:2b:fd:91:22:20:5b:3b:3e:85:a4:27:87:ca:17:b4:6d:af:
c2:3f:14:ae:17:3e:cb:71:07:42:60:a5:15:91:12:11:f7:15:
25:07:66:89:09:fb:52:df:80:b8:2e:f4:22:eb:eb:64:2e:6f:
47:a8:99:b1:e0:a2:85:0f:75:01:c7:d1:1f:d5:e5:b5:a1:06:
72:68:d2:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:00:43 2026 by rpki-client