Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
File: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft (raw, json)
Hash identifier: Hyq2ibE8Yz3jYtptID2/CAetT9ZrkCmRJEyxKNOY/VE=
Subject key identifier: F2:3F:94:14:D5:92:B2:F2:A3:BA:B2:00:47:0D:6B:5E:C9:A4:3E:5D
Authority key identifier: 43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
Certificate issuer: /CN=43a3517606989eb352f699976f219faec8e350e7
Certificate serial: 019D9AE2BDC39A81204A907417A298592EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 10:00:44 +0000
Manifest this update: Fri 17 Apr 2026 10:00:44 +0000
Manifest next update: Sat 18 Apr 2026 10:00:44 +0000
Files and hashes: 1: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl (hash: eecmW4xcH0o5GsoxukVhzXDafapFtscEa8QOUzNpHXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:bd:c3:9a:81:20:4a:90:74:17:a2:98:59:2e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a3517606989eb352f699976f219faec8e350e7
Validity
Not Before: Apr 17 10:00:44 2026 GMT
Not After : Apr 18 10:00:44 2026 GMT
Subject: CN=f23f9414d592b2f2a3bab200470d6b5ec9a43e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cc:0c:21:29:8a:77:9e:45:06:90:78:5a:f8:
b4:19:43:6d:17:2d:45:fc:db:f0:63:0d:2e:c6:21:
ff:47:bd:d6:ad:01:27:c0:f3:7a:82:52:7a:d6:58:
c6:81:0c:34:8e:90:00:95:ec:30:f4:4f:9b:b7:0a:
a5:7c:20:ad:e0:1f:1f:2b:00:9e:7c:08:9a:94:ad:
06:af:a2:20:f9:7f:6e:46:33:33:89:72:c7:ea:1d:
d3:4c:f0:1b:1d:61:e2:78:fd:f0:a0:bb:8b:98:5a:
3e:d3:62:ca:10:87:58:67:89:e6:e8:14:89:4b:46:
40:ad:48:12:c5:f3:2a:42:b6:53:37:1d:9f:7b:ed:
e9:8d:9e:f2:89:fa:45:43:25:8c:c7:ef:37:78:82:
ca:2c:b9:2f:bf:26:69:af:5b:2e:87:e7:71:e4:b0:
f3:bf:ac:79:8c:21:ab:03:00:0a:97:b0:61:cd:e2:
58:28:f3:97:93:97:91:ff:43:82:2e:5c:f0:d2:83:
9d:ef:fe:b4:82:3c:5a:27:5d:a5:94:11:f8:b7:9b:
17:82:87:92:03:01:c0:c9:a8:61:0b:c3:79:61:15:
a7:46:c9:36:fe:3d:3b:b7:64:02:7e:39:7b:74:90:
86:71:5c:3c:b8:14:66:c1:65:f8:16:29:5e:80:ff:
a5:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:3F:94:14:D5:92:B2:F2:A3:BA:B2:00:47:0D:6B:5E:C9:A4:3E:5D
X509v3 Authority Key Identifier:
keyid:43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:71:8e:bf:fa:70:02:f0:77:58:71:6f:70:b7:ec:1b:4f:ba:
d3:4b:d0:70:0a:0d:88:54:08:23:f0:ef:ac:6a:5a:0b:df:31:
16:ca:dd:d2:59:b9:cb:75:0e:50:27:c7:6f:00:32:bb:5a:7d:
05:f5:b8:b2:18:10:b4:5f:5d:32:f2:0e:cb:33:f2:6e:5e:d2:
f6:bd:e6:e7:3d:ca:f0:7b:e7:b3:c0:a7:fe:2f:d9:ba:2f:19:
bc:36:00:24:4f:42:ec:e7:53:77:21:b0:1c:0b:4d:df:dd:c1:
3a:4b:22:c1:2c:54:91:df:8a:02:45:13:83:7e:3b:2b:1d:a2:
fa:eb:a0:58:e5:04:58:f8:04:ec:3b:a4:ba:b3:f9:bb:50:2d:
07:a5:36:40:26:d5:13:df:c7:24:21:73:a2:87:b7:5d:2f:28:
cf:29:ae:1b:4f:4c:c6:55:c5:f1:f4:aa:ad:cf:97:58:c3:04:
f6:e4:be:b7:85:24:9a:21:84:84:1c:1c:e7:23:b6:3a:68:ea:
86:2d:87:73:b9:25:c1:35:02:07:ae:42:ef:0f:37:a3:8d:7b:
68:6b:c5:9d:e8:82:23:d2:5a:00:1c:0b:ac:f4:3e:3b:6b:1a:
d5:00:f7:cc:85:fe:33:0b:cf:02:1a:07:93:ae:30:2a:be:ef:
73:54:0b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:19:56 2026 by rpki-client