Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
File: QucVYSpqaXFPXj8uTLxI_OhKb1I.mft (raw, json)
Hash identifier: kfCMmZXG5ma9dl5cEknATID2GrHcPvWbZ/L/1qHPdwo=
Subject key identifier: 28:3B:BB:32:E2:3E:9C:DA:62:E7:A5:7D:E6:B6:A8:C9:3D:F3:BB:36
Authority key identifier: 42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
Certificate issuer: /CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Certificate serial: 019D9962771AA4C4B8FAB64980C149B4C50E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 03:01:00 +0000
Manifest this update: Fri 17 Apr 2026 03:01:00 +0000
Manifest next update: Sat 18 Apr 2026 03:01:00 +0000
Files and hashes: 1: QucVYSpqaXFPXj8uTLxI_OhKb1I.crl (hash: 0+rZIRqlzh/YU3qFo9jyDuEaRwadB7QLvyrFmBgBIlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:77:1a:a4:c4:b8:fa:b6:49:80:c1:49:b4:c5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Validity
Not Before: Apr 17 03:01:00 2026 GMT
Not After : Apr 18 03:01:00 2026 GMT
Subject: CN=283bbb32e23e9cda62e7a57de6b6a8c93df3bb36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:df:9d:50:95:5b:4f:d6:61:f5:af:20:92:bf:
8b:3a:06:29:71:20:1a:5d:0f:99:05:dd:fa:f2:60:
c4:55:c7:a5:b0:19:b9:70:78:ac:94:cd:85:18:63:
fc:49:f9:88:61:a5:0b:e6:d2:f0:98:5b:47:3a:89:
be:38:14:59:25:10:be:38:65:77:aa:af:23:17:31:
da:54:68:b3:ad:94:e5:11:45:60:25:12:13:bd:01:
f1:4d:a6:d7:1e:ac:d6:28:b7:b4:1d:f7:29:7f:27:
83:19:8f:7f:e6:89:0b:27:2d:95:e8:3c:6e:10:ae:
9a:ed:c9:76:7f:b1:87:61:88:33:0e:5d:da:5e:f6:
f2:7e:4e:12:6a:bd:43:db:d9:82:f9:5f:6b:28:15:
d4:5f:79:00:0a:ca:eb:76:91:4f:00:0a:15:96:72:
e3:b7:f9:72:ed:1b:c7:30:83:eb:e6:f5:23:d9:be:
99:3d:ed:73:37:80:6f:5e:64:b9:6d:91:36:80:62:
92:9e:8d:83:8f:5e:ac:25:7c:94:31:70:16:51:fd:
72:29:f1:8d:b8:1a:63:95:6f:14:a9:f0:bd:65:d8:
b2:2e:5f:69:6e:f5:d0:0c:12:7e:3c:ee:90:20:17:
59:57:fa:77:ae:52:3d:bb:12:7d:00:e2:82:44:f7:
6e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:3B:BB:32:E2:3E:9C:DA:62:E7:A5:7D:E6:B6:A8:C9:3D:F3:BB:36
X509v3 Authority Key Identifier:
keyid:42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8a:87:74:43:9e:2c:b0:1a:f5:55:c4:e4:46:d0:98:a3:28:
ed:7b:80:16:b7:a9:53:03:51:bf:47:0a:08:83:7a:18:82:29:
45:87:0d:f5:d0:01:c2:7c:2e:33:5e:a2:b9:8d:1a:9a:81:66:
2b:a1:67:47:37:ab:ca:83:22:c5:88:12:c7:e2:f5:7b:bc:8e:
f0:63:99:89:cb:61:19:b4:e0:83:4d:45:58:c9:79:ec:e2:04:
e2:00:6c:02:3c:3b:d7:b0:60:41:00:55:01:00:fc:c0:3f:09:
8c:10:9f:47:88:76:eb:2c:14:fd:df:46:d5:29:e4:33:99:71:
60:ed:8b:75:af:d0:c6:ee:42:c5:a6:38:66:01:06:68:3b:ec:
15:38:36:16:5d:e1:b6:22:6c:51:65:7e:f9:d9:9f:2d:ca:8c:
5e:c4:9b:55:f9:49:6b:e6:46:0a:2b:40:07:8a:d2:78:05:27:
b1:a5:0b:15:ca:cf:75:6e:e0:d3:a8:cb:76:c2:39:0d:c9:05:
3c:48:86:5a:3c:15:99:de:e1:d1:d2:f0:d7:0f:84:1b:1d:e3:
47:e7:22:2d:84:be:61:ac:c6:94:97:82:71:ab:d2:64:56:20:
0b:c9:2b:5e:63:d2:43:ce:f4:7e:c2:39:e1:7d:26:21:5f:d4:
03:e1:43:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:45 2026 by rpki-client