Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
File: QX7IKFpWXfUpSjs7YD_fkZTm760.mft (raw, json)
Hash identifier: u1hYBqWmvWRZn7bVhKLis3sArOm+avl3It4DP7HezJ0=
Subject key identifier: 17:F6:69:C5:E7:D4:DD:B3:CC:89:FC:B0:0B:E8:07:13:5C:3C:E5:7B
Authority key identifier: 41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
Certificate issuer: /CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Certificate serial: 019D265FB50B6F330CC1026CA8AA708284F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
Manifest number: 066A
Signing time: Wed 25 Mar 2026 19:01:39 +0000
Manifest this update: Wed 25 Mar 2026 19:01:39 +0000
Manifest next update: Thu 26 Mar 2026 19:01:39 +0000
Files and hashes: 1: QX7IKFpWXfUpSjs7YD_fkZTm760.crl (hash: pLj7Fu6aqYS/gB7maOHQYqd9MdhMjZS7fD9Ybiy7nXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b5:0b:6f:33:0c:c1:02:6c:a8:aa:70:82:84:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=417ec8285a565df5294a3b3b603fdf9194e6efad
Validity
Not Before: Mar 25 19:01:39 2026 GMT
Not After : Mar 26 19:01:39 2026 GMT
Subject: CN=17f669c5e7d4ddb3cc89fcb00be807135c3ce57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:8b:44:0e:77:43:ea:fe:39:f3:c5:46:ad:
35:24:c1:c0:ca:0e:71:f0:63:26:c9:f4:f7:e6:6b:
90:b6:32:fb:86:4d:9d:53:66:2e:fa:f6:cd:2d:a7:
18:b4:0f:37:2d:fe:4f:73:69:ac:5a:31:02:3e:ff:
45:e4:da:ec:b4:59:a3:86:3a:0b:08:c7:28:58:e8:
cb:3b:f4:d0:e8:1d:d4:64:a0:7b:97:0e:8c:4d:64:
3c:91:ae:05:84:f5:90:85:9b:21:b3:0d:3b:7d:74:
ca:8c:f6:25:18:55:e1:bd:04:73:5a:0c:d7:ac:64:
46:64:df:77:17:da:39:2d:e2:27:fd:6f:fa:03:44:
63:7c:a6:70:7d:e6:1d:de:87:dc:d1:71:91:11:cb:
a7:b6:9a:9e:5d:ba:cd:da:96:54:4d:34:5f:ab:6b:
d5:35:b8:86:aa:3e:eb:cf:d2:b3:b3:c2:c9:4f:42:
b5:43:f6:18:ae:da:c0:44:cd:fb:81:8d:d9:25:d1:
e8:60:2d:72:e1:48:65:d0:36:02:c4:64:14:f9:c1:
37:e1:4e:3c:e3:2d:ab:33:72:65:11:37:61:e4:64:
99:6b:87:df:cf:60:40:bd:fd:b2:29:70:cd:41:ef:
f8:57:19:19:34:45:0f:c1:37:4f:dd:e9:f0:b0:31:
8a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F6:69:C5:E7:D4:DD:B3:CC:89:FC:B0:0B:E8:07:13:5C:3C:E5:7B
X509v3 Authority Key Identifier:
keyid:41:7E:C8:28:5A:56:5D:F5:29:4A:3B:3B:60:3F:DF:91:94:E6:EF:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QX7IKFpWXfUpSjs7YD_fkZTm760.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/75c4e5-9958-4217-b553-775f022fd064/1/QX7IKFpWXfUpSjs7YD_fkZTm760.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:02:db:53:bf:32:41:4f:05:1f:71:3c:30:be:90:ff:25:ba:
7e:e3:a6:18:a5:d4:9f:3f:0c:5d:be:98:90:fa:be:3e:f0:c4:
34:8f:71:34:33:67:de:1e:a3:a2:ad:91:65:e8:f4:7b:77:3d:
aa:17:19:d2:90:8a:af:ba:1a:00:f1:60:9c:08:1d:de:dc:ab:
d8:2e:0d:25:87:9e:a7:09:58:91:5b:60:46:9f:10:2f:93:a2:
27:19:df:e7:2f:8b:3f:ba:66:e1:76:82:d6:12:55:bf:55:a8:
cc:97:8c:e0:4a:a5:00:de:5e:78:d5:12:3a:53:61:8b:4d:ca:
05:48:a1:fd:d8:63:35:f2:5b:7b:2b:6b:f0:e1:19:4f:81:aa:
15:cc:ce:4f:f4:8d:90:df:e6:b1:c3:9c:62:96:44:98:99:a5:
64:e3:38:dd:ef:26:49:ae:12:65:6b:bd:a5:a6:3c:29:85:82:
06:ec:97:ba:2a:97:30:f2:c2:57:f3:7b:a3:3c:ff:02:aa:f4:
58:fa:85:fb:b5:41:ac:99:ed:74:a2:66:97:9f:10:e4:1c:82:
55:a7:27:26:5a:2f:98:f0:d3:bf:09:9c:3d:06:84:3b:66:77:
f5:1b:c5:06:9a:2e:83:d6:16:51:38:46:e7:04:fe:2d:34:55:
ad:4c:fa:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:55:40 2026 by rpki-client