Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
File: qX7j7USz26i4PY6heZrA5YPWQUw.mft (raw, json)
Hash identifier: SlJFuCw1V+fi/02CcJQJEiQZQLnwOKCMoHUi7XgFRMo=
Subject key identifier: 0A:0E:8B:C9:7B:09:0B:91:C6:CC:CC:F1:C8:93:FE:22:B6:38:65:7C
Authority key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
Certificate issuer: /CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Certificate serial: 019CABD9872BFFC28E2F0900B23FE1CE45A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
Manifest number: 0795
Signing time: Mon 02 Mar 2026 00:01:25 +0000
Manifest this update: Mon 02 Mar 2026 00:01:25 +0000
Manifest next update: Tue 03 Mar 2026 00:01:25 +0000
Files and hashes: 1: qX7j7USz26i4PY6heZrA5YPWQUw.crl (hash: hsKJ11abkSgtUvtCRb2+etOjrt8yw1kuXlc+iPRWWYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:87:2b:ff:c2:8e:2f:09:00:b2:3f:e1:ce:45:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Validity
Not Before: Mar 2 00:01:25 2026 GMT
Not After : Mar 3 00:01:25 2026 GMT
Subject: CN=0a0e8bc97b090b91c6ccccf1c893fe22b638657c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ac:06:a5:73:e7:41:a3:d8:d2:27:06:5e:7e:
2a:dd:07:bb:9f:d7:9f:35:d8:17:b6:4b:1c:c1:ee:
8c:f4:45:4d:82:2c:3a:c4:d3:5b:17:bb:97:f7:d5:
d1:ea:2c:9f:08:d0:bd:7a:ae:b2:c3:7f:44:8f:6d:
a8:dd:83:a0:d9:ef:08:e7:44:d5:44:a2:f6:f0:02:
f6:1e:17:4a:de:b4:38:50:03:af:83:45:2b:e2:13:
ef:04:69:89:f0:66:54:d0:b0:9f:a3:65:13:84:bd:
8f:1e:08:45:98:ca:23:88:da:da:07:43:f2:96:5c:
c2:2d:e9:ae:16:cc:2e:59:2a:b5:12:76:5c:4c:47:
54:64:27:47:a5:ee:8e:15:6f:fc:a0:8b:07:ac:39:
81:93:0d:08:3c:2d:fa:53:71:6d:2b:f5:a2:ab:bf:
1f:0f:33:b8:bb:bb:d9:35:35:33:38:10:83:75:6a:
95:b4:49:62:79:eb:d5:33:99:e6:f4:88:f0:ba:59:
af:d3:59:b8:aa:dc:72:fc:bd:b3:95:dc:e4:0c:6c:
a2:53:a6:a2:57:ae:58:c9:3f:f0:21:6b:b3:10:09:
13:20:5d:72:10:23:be:d0:46:8e:b4:30:eb:7f:9c:
bb:97:c0:52:14:a9:8c:17:ea:92:60:af:2a:38:70:
40:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:0E:8B:C9:7B:09:0B:91:C6:CC:CC:F1:C8:93:FE:22:B6:38:65:7C
X509v3 Authority Key Identifier:
keyid:A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:e8:21:45:08:39:52:cc:78:88:a9:ef:42:45:9e:77:df:bc:
88:d8:00:1e:ae:a7:bc:ab:9e:0e:76:9c:e5:93:c5:7a:20:47:
0e:2d:6c:6b:b6:24:c1:a6:d9:c3:7b:34:1f:dc:e5:b8:25:1e:
87:6f:49:11:af:01:11:c7:49:85:90:f5:90:9b:94:fe:d5:ab:
22:c5:d1:38:a6:3d:ad:7f:0d:5a:a6:84:64:89:b0:b3:3f:c7:
68:15:b2:51:41:78:96:c4:e4:d4:7c:ad:8b:7f:fb:a7:0f:db:
70:2b:6a:16:a7:fb:f1:41:cf:1c:3e:3a:b9:6b:1a:1e:f5:da:
53:1e:8f:be:03:f1:43:71:79:c5:92:5f:18:18:54:a6:de:51:
44:de:8a:87:90:47:68:36:e0:b5:ff:9c:56:b7:ec:11:ad:42:
35:72:8c:ff:7d:05:ab:c2:d6:f4:ed:11:08:c3:4f:be:d6:b1:
bf:79:2e:64:8c:cd:26:ac:f2:8b:3e:fc:eb:56:a8:3d:82:d4:
5a:c1:c8:f0:8d:62:ed:49:1b:96:8b:4c:68:f9:f3:8e:1c:3b:
05:5b:57:be:c2:30:f4:89:68:28:fd:86:14:a9:15:1b:75:4f:
4b:36:e7:c3:86:e2:ab:bf:e9:e8:1e:67:f8:ff:07:8d:a2:2c:
0b:16:60:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:56:04 2026 by rpki-client