Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
File: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft (raw, json)
Hash identifier: Z0W1rVM04tdqgGqKNQYmorUkJ4M7mtVf+KQ7zLfYppM=
Subject key identifier: 61:BF:14:D4:71:F2:4B:97:87:E4:19:AF:84:5F:E9:0E:62:EE:11:CC
Authority key identifier: A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
Certificate issuer: /CN=a86ee450deb3a708aee85b78238fa370f90457f9
Certificate serial: 019CAB6B7704001B1CCEF257FFC3FD8B95E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
Manifest number: 1842
Signing time: Sun 01 Mar 2026 22:01:12 +0000
Manifest this update: Sun 01 Mar 2026 22:01:12 +0000
Manifest next update: Mon 02 Mar 2026 22:01:12 +0000
Files and hashes: 1: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl (hash: /een1GIu04Aiv3OKzQwz6UwUijksqMcS1PhdMFsy6Sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:77:04:00:1b:1c:ce:f2:57:ff:c3:fd:8b:95:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86ee450deb3a708aee85b78238fa370f90457f9
Validity
Not Before: Mar 1 22:01:12 2026 GMT
Not After : Mar 2 22:01:12 2026 GMT
Subject: CN=61bf14d471f24b9787e419af845fe90e62ee11cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:73:08:66:11:b8:ba:c7:22:fe:1e:44:84:0e:
d1:d8:a8:74:84:91:a7:f6:28:b9:24:88:80:74:62:
b5:f8:de:3f:ca:41:b3:27:8a:47:9f:f1:fc:9e:f7:
01:6c:9c:c5:32:f1:ed:9a:50:50:3b:37:a1:87:14:
76:51:2d:c3:7e:00:6a:2f:63:36:51:12:80:16:0d:
09:6a:40:cf:86:bb:de:01:76:8e:5f:38:50:45:6e:
e4:d7:59:2f:d8:ed:86:f4:a1:3a:fb:1d:8e:c7:a1:
16:fe:16:60:0c:73:30:8d:09:74:f0:1a:4d:21:9e:
2b:9d:78:4b:93:e9:8d:40:8b:35:0d:c2:d6:e5:6c:
91:f1:5b:cf:c7:76:1a:b5:f6:12:25:08:56:36:95:
6a:6c:4c:8d:02:e5:66:21:05:80:57:ca:b0:97:27:
24:a6:b7:88:04:a4:44:27:65:19:0f:df:0f:45:c4:
e1:a7:3f:10:2b:f7:29:b0:83:c9:9c:61:75:55:a3:
84:67:e2:02:e9:bb:d4:90:57:c7:ba:b3:f1:5b:83:
5c:0f:2c:a4:cf:32:e5:5a:3b:51:f2:73:b2:0f:c6:
c4:3d:6e:7d:60:09:ac:44:ff:8e:a3:da:42:e9:94:
f3:70:37:0b:c0:b1:1d:ef:69:f2:11:22:f7:be:2a:
fd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:BF:14:D4:71:F2:4B:97:87:E4:19:AF:84:5F:E9:0E:62:EE:11:CC
X509v3 Authority Key Identifier:
keyid:A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:25:66:6e:fc:c9:18:22:63:df:d5:9e:32:d4:ca:65:48:e4:
d1:1d:00:ea:88:5b:82:e1:13:75:8e:b3:f4:2f:95:52:22:01:
cd:89:c1:47:39:b1:e9:37:0c:7c:2b:04:ef:b1:a7:03:76:6b:
c2:d5:63:1c:b4:c7:bf:b0:42:0d:54:bb:b9:cd:00:84:46:ff:
02:c5:89:ca:43:04:bf:d4:25:e8:d9:45:1b:0e:8f:a7:eb:0b:
5b:0f:79:15:2c:a5:e3:30:51:73:f6:ff:e8:53:ac:e5:6e:8a:
18:af:0e:ae:55:ab:12:c7:48:7c:68:5e:c0:08:9e:b8:40:3e:
97:41:2e:43:0c:3b:ad:1c:7f:a9:05:98:bb:86:88:c8:3b:53:
5f:1b:f7:92:35:9f:06:e8:df:e2:f7:f4:4e:5d:3e:07:30:58:
87:4b:63:0c:c6:20:b9:89:2b:ef:f1:6d:21:61:ad:ad:d6:78:
25:07:1d:69:df:16:2c:a8:2d:2e:b3:55:98:bc:92:0c:ff:f9:
75:ff:d9:d0:f6:c2:3d:41:18:c6:b9:7f:f6:d6:d6:d8:5f:db:
64:a7:ea:54:8c:bc:5c:6b:d9:58:61:00:8a:09:1c:68:ad:28:
11:92:76:ed:fd:04:17:92:44:2e:be:55:ae:a0:90:1f:6c:43:
b4:13:d9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:46 2026 by rpki-client