Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
File: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft (raw, json)
Hash identifier: h/SQabIN+9hj1iVTyJXBUzLlP8JD781FM5f9nfdNQSo=
Subject key identifier: 35:24:EC:3D:50:E4:6E:F3:A2:83:74:4F:E0:48:73:03:E0:BB:D1:EF
Authority key identifier: A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
Certificate issuer: /CN=a86ee450deb3a708aee85b78238fa370f90457f9
Certificate serial: 019D98F4A211BE8CECE5594079C82A7D0F88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
Manifest number: 18BD
Signing time: Fri 17 Apr 2026 01:01:02 +0000
Manifest this update: Fri 17 Apr 2026 01:01:02 +0000
Manifest next update: Sat 18 Apr 2026 01:01:02 +0000
Files and hashes: 1: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl (hash: /SZkGsqSM54n7DzR7RI7ILTCjeVcf+kYYiqMDpj+F3Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:a2:11:be:8c:ec:e5:59:40:79:c8:2a:7d:0f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86ee450deb3a708aee85b78238fa370f90457f9
Validity
Not Before: Apr 17 01:01:02 2026 GMT
Not After : Apr 18 01:01:02 2026 GMT
Subject: CN=3524ec3d50e46ef3a283744fe0487303e0bbd1ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:a5:fc:b3:70:d6:67:6f:57:11:f5:bf:b1:
2d:75:02:9a:62:2e:14:29:89:1d:e9:55:fa:83:2c:
f5:d2:f3:f4:f1:4f:1f:88:83:af:53:c3:17:1b:cb:
a6:81:d8:9f:5e:f0:d8:4b:9f:b8:cd:9c:14:75:fd:
28:b7:bb:53:42:46:22:fb:4b:60:68:49:73:3f:64:
14:9a:a2:8b:6f:c4:97:9d:d1:5d:b5:40:10:20:ef:
34:4e:a7:bf:46:de:8b:b9:9f:3f:77:76:de:55:85:
02:94:c6:63:e0:55:04:ce:95:25:90:e6:1a:55:94:
a2:78:88:38:31:10:2b:81:42:71:da:84:d0:2d:05:
fc:05:d8:43:af:95:89:60:b2:6c:56:2e:b7:33:f7:
76:03:07:d7:c5:5a:69:0a:ee:39:61:5d:e1:89:ef:
80:c6:f2:21:36:a1:48:b8:d9:94:88:6a:6c:ea:10:
2d:e8:f9:e5:9e:47:59:51:b9:8a:86:cf:b1:5c:27:
6a:da:9e:25:50:e1:c3:ca:b6:cd:cb:20:07:cc:13:
47:a1:ac:f9:6c:54:f8:b4:5c:bc:2d:9b:e2:a0:96:
58:35:70:96:1b:ca:7a:16:61:9b:ba:9b:68:77:aa:
44:ec:5e:e5:4b:25:43:b8:5d:f0:32:c1:a0:ff:98:
a6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:24:EC:3D:50:E4:6E:F3:A2:83:74:4F:E0:48:73:03:E0:BB:D1:EF
X509v3 Authority Key Identifier:
keyid:A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:a9:a7:c6:9f:f1:f3:83:af:9b:12:a3:48:99:8f:56:ea:0d:
ec:58:26:8e:07:0b:28:f5:26:fe:d0:da:1c:d6:ae:89:8c:3f:
63:7e:06:ca:ea:10:88:d4:94:fa:ba:1b:95:fb:01:1e:dc:ea:
e4:e5:a5:30:d6:ad:f7:cf:f7:cc:98:d2:e9:0f:b9:79:55:b3:
49:64:63:97:71:9a:b6:c7:7e:15:83:6f:7c:55:5d:39:de:83:
78:27:43:dd:92:94:95:e3:73:89:59:a1:3f:61:ff:39:fb:83:
df:7c:92:e8:75:80:79:c7:a1:a8:87:6c:81:a8:39:1f:f2:a5:
96:1c:c2:5a:e7:e4:72:25:00:d7:13:a6:43:8c:4f:3e:8d:cd:
02:f6:64:e6:4c:ce:a1:1e:f0:0b:6d:56:0e:29:9b:3c:6a:12:
9e:5c:98:04:36:89:2f:b4:88:48:99:b6:9b:dc:ef:f3:09:f7:
4b:f0:9e:e5:d7:1f:da:4a:de:7f:9d:65:b4:83:39:26:7d:f3:
f8:9f:49:33:ea:24:59:ad:40:a4:26:3f:d9:1a:b4:ca:da:a4:
34:f4:e1:2b:ca:6e:de:0c:82:33:df:9c:c6:5c:04:bb:58:f2:
94:58:36:3c:b3:59:35:99:7c:87:e9:25:59:ed:88:78:90:5b:
cd:52:86:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:20 2026 by rpki-client