Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
File: qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft (raw, json)
Hash identifier: yzC2SstXNg+jBPSiiHgTd9oOfIIFZXdysEgvep+hC3s=
Subject key identifier: 45:96:42:DD:70:95:32:DF:3B:36:2F:48:39:96:F2:27:13:23:36:0E
Authority key identifier: A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
Certificate issuer: /CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Certificate serial: 019CAAC6424E9C0E139196987BB836D57031
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
Manifest number: 1333
Signing time: Sun 01 Mar 2026 19:00:45 +0000
Manifest this update: Sun 01 Mar 2026 19:00:45 +0000
Manifest next update: Mon 02 Mar 2026 19:00:45 +0000
Files and hashes: 1: qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl (hash: K40p/YOWVLmmk/N5DWdyxVdBMbOadozlFMeY+fynDEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:42:4e:9c:0e:13:91:96:98:7b:b8:36:d5:70:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Validity
Not Before: Mar 1 19:00:45 2026 GMT
Not After : Mar 2 19:00:45 2026 GMT
Subject: CN=459642dd709532df3b362f483996f2271323360e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:2a:6c:63:ad:b9:dd:42:1b:8a:68:95:ce:3b:
81:79:43:1b:b4:30:be:b9:93:12:a8:63:a8:d1:92:
c6:33:8b:2d:8e:84:c4:14:20:fd:a8:18:ed:b1:f4:
70:c7:b6:e1:4b:ef:ea:e6:25:f1:56:15:50:10:a9:
bb:27:37:7d:d2:18:55:25:50:e9:2f:0e:2a:5a:1b:
3b:e8:46:72:18:cf:1d:2d:fd:99:db:73:8e:dd:a7:
6b:ea:3c:ae:87:3e:27:2c:81:0a:88:30:77:8e:83:
af:97:dd:7c:c8:ee:c5:50:9b:fa:bb:c6:5e:27:4d:
0a:aa:01:d9:dc:80:c7:c0:45:4c:c3:0f:da:90:d1:
8e:89:3c:56:f5:16:5c:84:9f:0c:cc:d2:e9:27:f9:
a1:a0:13:a8:1a:be:12:94:81:ed:00:72:44:c5:d1:
a4:99:74:6e:26:7e:d9:a7:c1:e4:da:90:c3:89:9c:
52:3f:6a:92:7b:eb:7c:a8:4a:16:36:bc:0b:14:87:
02:41:44:22:7a:33:19:56:1a:c8:3f:9b:0d:1f:d4:
55:52:63:0a:c3:0f:91:1d:3a:43:29:1a:aa:08:2d:
89:92:ac:a7:51:a9:40:ec:59:ff:0e:f3:9f:37:3c:
ce:ff:3a:bb:98:ba:b6:40:43:36:67:0c:6b:d5:50:
15:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:96:42:DD:70:95:32:DF:3B:36:2F:48:39:96:F2:27:13:23:36:0E
X509v3 Authority Key Identifier:
keyid:A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:34:3c:32:a8:5f:23:7c:00:63:31:72:ca:f5:28:8a:25:e0:
3c:67:97:06:e8:27:7b:42:cf:5d:c1:2e:e1:d0:6c:31:20:85:
15:e3:f6:a8:4a:f9:8b:74:17:df:33:18:2e:69:3b:7a:79:fe:
d8:4f:aa:41:86:20:24:ec:55:cb:f2:ab:d4:0e:58:c7:b4:7f:
ed:f3:72:b3:1c:89:10:4a:07:32:7c:26:04:cb:77:1b:30:45:
b9:96:f9:bf:2d:41:45:57:96:ae:ef:e5:ac:86:e0:6c:8c:f4:
ce:84:e9:7a:68:c1:44:74:1f:c6:a7:9d:27:88:ec:90:6d:6b:
12:da:1f:8a:8d:20:2a:9d:2a:8e:9f:88:c7:d1:db:d7:31:7c:
af:82:df:8a:3c:29:91:b8:74:9d:13:c3:d2:65:1b:b0:3b:94:
3f:48:e2:56:33:67:64:55:30:d3:c8:f3:7d:a4:20:c1:13:cc:
0d:20:b2:1e:50:d1:2a:30:1a:09:9a:1f:16:e9:19:49:c3:03:
4d:3a:8c:de:c4:30:cc:46:79:cb:91:c9:84:6d:bc:99:8a:0f:
a6:77:26:e2:6d:9f:19:00:e4:1e:ef:6a:10:4c:12:6b:fe:96:
6a:e9:c0:b7:9a:1e:0e:11:e2:a5:f5:1e:2f:26:8e:3b:51:98:
a4:47:07:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:20 2026 by rpki-client