Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
File: qX7j7USz26i4PY6heZrA5YPWQUw.mft (raw, json)
Hash identifier: 3O0XeORycLf9kXbgkuD8iIHSlX5AMVheTor0CGYGFWM=
Subject key identifier: A6:DD:65:88:0B:69:90:92:13:8F:51:D0:4A:E9:FD:98:56:80:9C:91
Authority key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
Certificate issuer: /CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Certificate serial: 019D996286F56636AC01981F9C40441AA622
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
Manifest number: 0810
Signing time: Fri 17 Apr 2026 03:01:04 +0000
Manifest this update: Fri 17 Apr 2026 03:01:04 +0000
Manifest next update: Sat 18 Apr 2026 03:01:04 +0000
Files and hashes: 1: qX7j7USz26i4PY6heZrA5YPWQUw.crl (hash: xqwhcrK09duCrlKeCh0ofD3tBwukoCMwkqpieFejJhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:86:f5:66:36:ac:01:98:1f:9c:40:44:1a:a6:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Validity
Not Before: Apr 17 03:01:04 2026 GMT
Not After : Apr 18 03:01:04 2026 GMT
Subject: CN=a6dd65880b699092138f51d04ae9fd9856809c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:04:b2:5e:35:99:5f:31:24:b4:a8:fa:f4:86:
3c:c1:f5:87:1e:26:1a:70:1b:b7:c4:c1:76:78:fe:
8e:a0:d9:12:c4:fc:90:e8:dc:44:bb:6f:35:83:54:
9d:b1:1c:d3:b6:3a:14:2a:a0:ae:75:5e:0e:95:8f:
9a:6c:d5:cc:cf:68:81:bc:fa:30:7e:24:4b:59:7b:
ef:bb:12:4c:e1:32:42:cd:33:ef:ac:df:19:fa:4e:
04:7c:01:c8:41:06:27:08:ac:70:d7:ff:66:57:36:
aa:70:ab:7f:27:d6:a1:ee:88:dc:5b:67:ec:3e:19:
95:ec:bf:40:b1:12:37:a5:31:0c:45:9e:76:a6:09:
a5:1e:28:4d:ec:c6:19:a5:74:82:80:60:98:18:5e:
d5:21:9e:c8:6f:76:b1:a7:72:9a:d7:80:4e:05:0b:
40:d6:0f:96:84:fa:d8:54:a3:02:5f:2d:1a:95:04:
05:0f:6a:aa:4b:dc:f5:96:b2:db:aa:86:17:c5:b0:
d5:ac:ab:7a:d9:25:08:e0:d4:2a:d5:96:93:15:48:
6c:f2:91:18:fc:35:7e:f6:8f:52:12:4f:d3:01:39:
71:35:1c:13:a1:47:3c:26:64:ab:6c:b2:2e:2e:6f:
90:de:33:f8:de:5e:3e:d3:70:5f:22:02:6b:a3:76:
5c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:DD:65:88:0B:69:90:92:13:8F:51:D0:4A:E9:FD:98:56:80:9C:91
X509v3 Authority Key Identifier:
keyid:A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:85:04:99:3a:60:c0:f7:9c:42:25:a5:b1:c5:1d:ae:4f:1c:
73:af:a7:80:f0:13:7e:01:4a:d9:42:ea:e4:48:4b:16:65:09:
88:1a:85:d2:c2:a9:91:d7:3a:ac:c1:7a:55:e6:4e:d8:99:a2:
6c:99:f5:45:e2:0d:26:6a:c5:57:f0:bf:9f:d8:7f:ff:47:98:
5d:5a:4c:10:3c:00:72:7a:94:88:2a:1c:8e:6a:01:dd:53:4c:
86:d5:4f:7f:82:9b:50:27:8c:53:44:de:d2:56:1c:b2:49:20:
2b:8a:89:83:e0:94:28:02:6d:0c:34:cc:0d:0e:09:e2:24:e0:
14:e2:8f:8f:1d:28:67:40:de:3c:8e:10:7c:14:76:98:02:0a:
60:1d:37:5c:a4:2a:f1:5b:91:9d:5e:d1:fe:8b:4e:b4:16:95:
ec:35:50:b0:3b:dc:40:ae:0d:6a:42:b3:f9:36:51:04:1d:82:
4c:80:44:fb:ad:64:12:d9:fe:b3:62:4c:3f:ba:81:d7:52:9f:
23:8c:9d:26:aa:1b:89:eb:e3:d2:bf:29:5a:28:4c:a1:5d:cf:
dc:ce:a1:f5:29:06:90:06:cb:22:85:d4:57:65:cf:c7:51:04:
a0:9a:10:8f:ed:ec:6f:b3:47:f4:f3:2f:31:17:06:c9:4e:77:
59:bc:de:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:27:26 2026 by rpki-client