Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft
File: Q5OKPegDvWyR8UrZZ71BQbigKK8.mft (raw, json)
Hash identifier: hIjr30edJS+yAtL9bW8KxYCUED5ES8GQhdXgywasknQ=
Subject key identifier: 96:FF:CE:69:7C:14:A0:F3:91:AA:B5:AE:37:00:CC:1D:C2:F4:B4:C1
Authority key identifier: 43:93:8A:3D:E8:03:BD:6C:91:F1:4A:D9:67:BD:41:41:B8:A0:28:AF
Certificate issuer: /CN=43938a3de803bd6c91f14ad967bd4141b8a028af
Certificate serial: 019D27E07191CC997DBE658D9DD26C0E0763
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5OKPegDvWyR8UrZZ71BQbigKK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft
Manifest number: 15A7
Signing time: Thu 26 Mar 2026 02:01:53 +0000
Manifest this update: Thu 26 Mar 2026 02:01:53 +0000
Manifest next update: Fri 27 Mar 2026 02:01:53 +0000
Files and hashes: 1: Q5OKPegDvWyR8UrZZ71BQbigKK8.crl (hash: Ifus8JvwrWsHCw0CWCft5sjJk8wskKBVY8T+bbOI/Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5OKPegDvWyR8UrZZ71BQbigKK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:71:91:cc:99:7d:be:65:8d:9d:d2:6c:0e:07:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43938a3de803bd6c91f14ad967bd4141b8a028af
Validity
Not Before: Mar 26 02:01:53 2026 GMT
Not After : Mar 27 02:01:53 2026 GMT
Subject: CN=96ffce697c14a0f391aab5ae3700cc1dc2f4b4c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:41:dc:e1:86:5b:47:b9:ef:f3:44:ac:84:7d:
52:59:70:fb:93:b9:50:bf:5c:d9:21:12:42:97:90:
83:10:7c:bf:be:6e:a4:4d:9b:d5:31:bf:7d:0d:ca:
97:6d:75:be:11:04:1b:bf:b9:4e:cb:10:4a:3f:79:
e8:2a:9f:cc:08:a4:52:2f:e0:f3:b6:24:6d:53:9e:
70:ae:dc:38:ef:87:ea:5e:30:f5:f8:43:2d:6a:30:
f6:90:a4:92:f6:14:98:2a:7b:fb:ea:d0:62:71:69:
cb:48:67:03:0b:1d:64:f0:d9:e4:29:07:a9:7c:e3:
e2:d7:65:f5:0a:dc:f5:0a:47:72:d7:c9:f1:1c:df:
33:24:e7:d2:19:1a:53:e8:7f:7f:23:68:0f:be:e5:
f6:96:52:6a:dc:76:b7:2b:a9:18:46:2f:3a:a5:f4:
6a:70:75:77:4f:36:d9:84:da:69:e9:54:17:02:09:
2a:7f:47:be:78:35:21:7d:a8:33:7d:6c:bf:8d:88:
3b:fd:b8:3c:9c:9b:a1:9c:b8:20:59:13:34:92:9f:
d5:ae:38:ea:94:90:9b:d3:e0:f6:b4:02:70:57:d7:
fc:58:d3:a1:15:f4:15:a8:10:ac:60:05:7a:17:a7:
ee:c5:4d:a3:34:9e:90:38:de:01:22:51:7d:3f:82:
be:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:FF:CE:69:7C:14:A0:F3:91:AA:B5:AE:37:00:CC:1D:C2:F4:B4:C1
X509v3 Authority Key Identifier:
keyid:43:93:8A:3D:E8:03:BD:6C:91:F1:4A:D9:67:BD:41:41:B8:A0:28:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5OKPegDvWyR8UrZZ71BQbigKK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ecda24-d7c3-446a-af36-fe5634c17cc9/1/Q5OKPegDvWyR8UrZZ71BQbigKK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e9:a1:11:38:19:fc:e5:b4:85:87:7d:d0:6c:19:cb:9c:c9:
8e:2e:13:dd:c7:04:0a:cc:37:23:11:1f:31:4e:30:5d:ee:c0:
2e:b7:94:a5:3f:59:f5:b7:bf:61:a7:3a:d1:11:e3:ad:b6:01:
10:c1:95:b5:4a:e7:4d:06:05:0d:18:72:a7:01:68:20:75:88:
6c:16:93:21:84:02:6b:0d:70:b7:e4:5c:ef:a2:38:fb:51:62:
7f:98:7c:34:31:0c:f9:34:a9:21:20:24:69:c3:be:1c:b8:17:
49:45:05:c4:57:d2:99:7e:cd:30:a6:be:16:a9:32:88:9b:04:
bc:a8:c0:22:9b:ad:d7:d8:45:1e:18:35:69:6e:a3:1e:60:39:
b0:2c:de:27:71:1e:52:e5:e2:48:b9:43:07:a3:66:63:c2:18:
ec:b8:27:9c:b0:a7:4b:d5:57:14:bb:be:d1:48:8a:f0:b0:b0:
85:f8:9c:97:0b:a3:64:74:a3:11:51:da:86:b0:03:42:5c:56:
ef:18:0e:a1:c4:e0:67:95:5e:5e:77:96:48:c0:43:5e:57:48:
0e:21:b2:57:81:b0:20:2b:f0:84:a2:0c:95:85:b7:92:29:d0:
46:d4:24:61:c0:a9:8b:05:24:ad:31:2e:2f:a9:8b:3e:ca:80:
06:18:ed:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:45:31 2026 by rpki-client