Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
File: qS6nWOQVWUqAN__beY9ruRjBXmQ.mft (raw, json)
Hash identifier: N/VzzmPMvR5ijzTYWjU2oB5sYwdYlO4VPm/botIEZMg=
Subject key identifier: C5:2D:20:69:A3:88:2C:72:96:62:4E:10:EC:9F:48:CD:CF:53:C6:D5
Authority key identifier: A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
Certificate issuer: /CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Certificate serial: 019D265F6416D991F0E700A62E4F557A694D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
Manifest number: 16C2
Signing time: Wed 25 Mar 2026 19:01:18 +0000
Manifest this update: Wed 25 Mar 2026 19:01:18 +0000
Manifest next update: Thu 26 Mar 2026 19:01:18 +0000
Files and hashes: 1: qS6nWOQVWUqAN__beY9ruRjBXmQ.crl (hash: Hzi5uPnCvhqXg2c5t3HqEmMDHdhExCkxAOzzJ0Fzg/8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:64:16:d9:91:f0:e7:00:a6:2e:4f:55:7a:69:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Validity
Not Before: Mar 25 19:01:18 2026 GMT
Not After : Mar 26 19:01:18 2026 GMT
Subject: CN=c52d2069a3882c7296624e10ec9f48cdcf53c6d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:14:f1:56:9d:fc:fb:49:f2:db:6c:25:9a:a5:
00:6c:4d:df:51:4e:e5:14:5e:02:21:c0:e9:f6:6a:
fe:ff:2a:72:93:82:95:b2:c6:59:cf:e6:c4:ba:2f:
5a:08:33:4e:a1:55:24:ab:fe:a3:43:2e:18:7a:8f:
67:ee:b4:27:a0:4a:17:a0:2b:09:61:d0:69:7f:ef:
3d:c9:5d:5d:62:1f:e4:8d:7f:fb:ff:9a:f2:ea:5f:
32:b5:2c:3c:b7:6c:dc:1c:f7:40:d6:b1:89:f5:4c:
e2:43:80:19:59:62:4d:bc:c0:04:dd:b1:00:a3:bd:
70:ba:01:c0:43:05:c3:59:cd:b4:86:d5:39:28:2e:
2d:52:d9:d5:81:8c:dd:27:c8:8f:be:ad:43:4f:21:
77:08:5d:38:4a:ec:08:01:ac:26:fc:a6:a0:44:0f:
ab:68:e6:ae:ae:5f:50:da:b5:59:1b:30:ba:ef:d1:
a7:a9:2d:8a:aa:41:30:36:a6:bf:89:02:fd:16:60:
75:84:2e:d4:33:ca:65:91:6e:e6:2f:55:c2:89:57:
69:3d:7e:1f:9b:56:da:08:7b:a2:6a:e0:58:c5:d4:
b0:61:be:83:ec:6f:79:36:07:68:97:ad:b0:02:0e:
f0:7e:dc:00:99:46:7d:d9:c6:07:9e:cd:bc:51:a5:
a2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2D:20:69:A3:88:2C:72:96:62:4E:10:EC:9F:48:CD:CF:53:C6:D5
X509v3 Authority Key Identifier:
keyid:A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:aa:08:85:70:c0:22:55:c9:dd:c2:89:a2:3d:f9:f4:7c:85:
12:1e:00:ef:60:50:8d:cd:28:a5:ee:f4:35:89:02:b2:f2:e2:
1c:e0:c2:b4:02:62:28:b0:f1:18:89:2a:37:ae:db:7c:d0:8d:
c0:79:de:d1:d4:04:c3:10:d7:d4:9a:fb:e8:e7:96:86:29:8b:
65:59:68:5b:01:6f:dc:3f:42:60:40:1b:90:31:2d:3c:b9:94:
12:a0:25:f0:d8:7f:1a:2e:8c:3f:f1:01:1e:60:a4:35:ad:91:
7d:38:18:c2:ba:e4:be:59:64:a4:cb:8a:a2:81:4b:60:51:2b:
10:aa:42:67:3e:e7:49:59:fc:0b:e3:eb:e7:86:ab:26:15:05:
ef:cc:f1:6b:8b:d0:de:6c:c1:1e:12:ad:84:09:0d:8b:52:62:
37:13:98:8e:64:2a:3f:55:d8:15:2d:79:05:ed:9b:ad:2b:50:
a0:fd:06:7f:2c:c6:13:74:e8:fb:b6:26:2e:9e:5f:4a:bc:6b:
16:93:39:ad:c6:6b:00:9f:98:8e:99:96:a2:0d:e4:f8:7c:9a:
00:59:bd:ea:4b:2c:39:40:a5:e0:af:8b:0c:bf:2b:6a:43:7f:
f9:f3:49:ed:cb:69:0b:5a:3b:7c:26:16:c2:e9:9d:c0:b7:53:
ab:77:da:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:56:19 2026 by rpki-client