Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
File: fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft (raw, json)
Hash identifier: XU+l2whe2bB/yFUzeMF9uNeDhgC9bFMwgaC72EYu6yA=
Subject key identifier: 6F:0F:1E:39:93:71:AB:37:FB:25:94:66:39:84:42:F5:50:AB:1D:3E
Authority key identifier: 7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
Certificate issuer: /CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Certificate serial: 019D27DFFEBC3A48DC028AEDD0837EA2BC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
Manifest number: 1816
Signing time: Thu 26 Mar 2026 02:01:24 +0000
Manifest this update: Thu 26 Mar 2026 02:01:24 +0000
Manifest next update: Fri 27 Mar 2026 02:01:24 +0000
Files and hashes: 1: fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl (hash: 2vetx5m6nCQ0vt+HguT7xZe5ufuWP6Dn4OaQrCLKtIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:fe:bc:3a:48:dc:02:8a:ed:d0:83:7e:a2:bc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Validity
Not Before: Mar 26 02:01:24 2026 GMT
Not After : Mar 27 02:01:24 2026 GMT
Subject: CN=6f0f1e399371ab37fb259466398442f550ab1d3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:a9:21:48:52:b2:63:56:95:60:95:44:28:24:
d5:77:d6:f5:9f:c7:d7:05:a6:b0:33:78:9e:fe:ec:
b3:08:ac:7a:f4:aa:de:54:af:20:e5:6e:ef:13:21:
39:57:cf:55:b2:f0:dd:36:d4:69:2a:e3:7e:7f:5c:
21:61:2f:2f:75:6c:bc:c2:f4:d5:ae:d4:8f:d1:f8:
b6:f2:fb:de:bc:70:38:de:4f:11:9f:d5:fd:15:3b:
9a:7c:0b:ab:b2:1c:cd:49:50:58:71:00:32:95:fa:
de:0d:a2:2a:d7:d6:c7:4f:3d:f3:bf:d1:fc:1c:8a:
6e:de:91:59:7f:e7:a1:17:15:b3:53:36:be:b6:c4:
ca:7b:c9:e0:83:21:bb:91:06:44:9f:1c:fa:21:89:
5c:e9:0e:2d:de:c6:75:ef:db:7b:8a:ba:55:f4:56:
3a:cf:34:5e:bc:6a:92:da:9a:b3:2e:9a:8d:af:cf:
8c:f7:bb:6c:e1:76:47:83:39:a1:27:33:2b:9d:0c:
37:12:00:8a:c2:de:54:ea:e0:5a:4f:45:c9:2a:9a:
03:c9:03:c7:72:83:12:de:fe:a1:b4:17:a0:2e:35:
d6:14:7c:90:09:bc:7a:17:30:11:89:7f:bb:42:4f:
e0:b3:9f:d1:ec:c7:ae:70:a3:ea:22:3d:a6:bf:71:
cb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0F:1E:39:93:71:AB:37:FB:25:94:66:39:84:42:F5:50:AB:1D:3E
X509v3 Authority Key Identifier:
keyid:7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:99:14:ab:42:1e:78:6b:0f:03:50:d9:e9:7f:e4:4e:c3:45:
3f:0d:31:af:3b:46:1f:39:72:85:21:28:09:dd:e3:6f:bd:ad:
c3:94:4f:05:fa:ea:c5:d9:03:1b:de:66:fd:16:e2:84:d0:4b:
57:a1:d8:64:a3:06:02:72:01:ed:5f:ca:a8:e5:a1:eb:ca:19:
b2:04:15:04:31:8f:ae:81:95:f8:3e:4f:07:84:e7:cb:08:5e:
90:27:d0:a2:d6:b1:c4:ab:6f:c9:24:98:da:e0:33:07:b5:24:
31:b3:73:74:7d:56:64:4b:2b:a3:c4:27:67:43:7b:9f:ef:4f:
e9:dc:d6:8e:6d:60:f2:62:fc:5d:a5:08:89:59:e4:3e:00:ca:
24:8a:24:64:3d:72:fb:28:53:66:6d:56:4d:af:26:00:72:07:
8c:39:7a:0a:32:c6:58:22:ce:20:00:22:59:b3:e2:19:ff:59:
51:6b:ef:00:ae:98:ea:aa:0a:7a:58:4e:e3:26:1c:fc:d8:60:
fd:8f:99:16:56:78:21:28:83:0e:54:10:6f:f0:b7:e1:5c:73:
55:47:db:b7:bd:01:e7:8a:d7:79:c0:ab:6d:50:70:9e:4d:47:
13:e2:ae:5d:e6:0a:1f:d1:81:48:34:f3:92:7e:f7:8c:f4:a7:
a0:7a:c0:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:37:16 2026 by rpki-client