Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
File: qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft (raw, json)
Hash identifier: GTPqtysHdFi/NNdmqXz4OeKpOwmWl2hS0pIc+wxwwDQ=
Subject key identifier: 02:2F:2F:ED:80:0D:AB:F4:49:0D:9F:60:A3:D7:91:32:6F:38:37:F3
Authority key identifier: A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
Certificate issuer: /CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Certificate serial: 019D9850A9590CBC0FFD76F1A5536ED453C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
Manifest number: 13AE
Signing time: Thu 16 Apr 2026 22:01:56 +0000
Manifest this update: Thu 16 Apr 2026 22:01:56 +0000
Manifest next update: Fri 17 Apr 2026 22:01:56 +0000
Files and hashes: 1: qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl (hash: A8TM+dfVsQuSZXCfn2yyQ8/v0uGwYokrIh4qD4FnImM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:a9:59:0c:bc:0f:fd:76:f1:a5:53:6e:d4:53:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Validity
Not Before: Apr 16 22:01:56 2026 GMT
Not After : Apr 17 22:01:56 2026 GMT
Subject: CN=022f2fed800dabf4490d9f60a3d791326f3837f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:47:a0:fa:33:bb:5b:11:2c:18:ba:1c:4d:d0:
4a:48:e8:7c:7a:6a:37:20:c9:ce:5f:9d:aa:94:94:
fc:e2:f1:0f:d4:35:66:f7:0a:e5:80:47:29:84:ea:
0a:81:29:94:b6:a2:23:c1:bc:86:67:4a:36:96:49:
c9:cd:bf:39:8b:55:69:44:58:48:14:8b:69:9a:24:
3a:f1:78:27:18:fd:59:27:0b:ef:83:70:a1:de:1f:
81:ed:43:21:47:27:c8:67:ae:db:13:2b:8a:a7:17:
d0:2c:93:f8:65:d0:72:12:eb:77:f8:46:68:e1:45:
8c:4f:70:69:fb:79:9f:d8:db:9e:73:ee:8c:71:b0:
63:a4:71:62:99:c7:2a:0d:c6:8c:63:3c:3c:87:4e:
bc:b6:40:93:2f:0f:39:da:bc:22:c2:01:16:99:c7:
8f:78:53:84:0e:a1:73:c5:c4:69:52:26:7b:74:ae:
47:66:a2:72:f9:b4:a8:de:a9:52:7b:d0:1b:d7:ce:
80:7a:7e:aa:e0:52:11:d7:9a:37:3b:d3:9b:79:44:
00:78:6e:b1:a4:24:f3:ac:c8:f0:cc:a0:d1:66:ec:
1e:60:83:f5:68:f5:ee:06:d6:83:21:d6:b9:61:b0:
67:b1:78:1f:21:18:17:5b:0c:dc:bd:18:89:f3:8f:
d8:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:2F:2F:ED:80:0D:AB:F4:49:0D:9F:60:A3:D7:91:32:6F:38:37:F3
X509v3 Authority Key Identifier:
keyid:A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:13:9f:b2:29:2c:57:d0:b4:ef:d5:1b:e7:61:a0:71:a6:46:
02:98:3f:a6:3f:d7:d8:10:56:1e:c2:74:d3:61:91:ae:e7:c2:
e0:5b:e2:b2:c5:cf:95:40:68:f0:58:cb:aa:a2:04:05:43:95:
7f:1b:db:86:9d:74:8d:e5:0f:6e:11:55:59:ca:23:9f:a6:53:
7b:73:69:31:1f:ff:7b:4f:04:85:61:04:5d:54:6f:0e:37:a8:
64:e6:8f:aa:0d:35:03:0c:42:55:e3:b6:17:7e:38:63:8b:e2:
ba:95:3e:30:df:0d:74:1c:a4:db:7d:fc:dc:ca:ac:b5:aa:3e:
02:84:57:a5:1b:f3:50:fd:1f:5b:f0:ec:c7:ad:23:e9:f4:b6:
85:19:b9:0c:0d:ad:3b:6c:77:d6:19:ed:b9:79:3a:22:e5:13:
65:92:0d:70:31:32:c5:3b:8f:41:96:3e:ad:98:ce:84:d3:bc:
10:cc:be:a8:9d:54:3e:01:bc:59:2f:ab:e2:ab:d6:e9:ad:b2:
9e:3f:c1:8a:ee:e5:3e:e7:f7:da:5a:2c:c7:75:c4:e9:9b:cb:
cc:69:2a:74:c3:6b:3a:a8:a2:b5:ae:88:14:12:5f:e4:f5:61:
68:6c:b2:a7:c4:c0:52:eb:f8:0b:b4:36:64:f5:73:86:46:57:
e7:c5:1c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:33:27 2026 by rpki-client