Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
File: qTThBr5Thu0QZ17g3jNtx34gDVk.mft (raw, json)
Hash identifier: YpERc5+ZZljbLW/+zpAdCPTbUrmLJsq3OuDH/4kizpQ=
Subject key identifier: F4:E8:78:A8:07:9A:D7:65:A9:63:44:4D:3E:FE:A9:20:EA:6F:FA:4B
Authority key identifier: A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
Certificate issuer: /CN=a934e106be5386ed10675ee0de336dc77e200d59
Certificate serial: 019D2A3B649C6A5B5357C2097724B290C005
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
Manifest number: 06D9
Signing time: Thu 26 Mar 2026 13:00:28 +0000
Manifest this update: Thu 26 Mar 2026 13:00:28 +0000
Manifest next update: Fri 27 Mar 2026 13:00:28 +0000
Files and hashes: 1: qTThBr5Thu0QZ17g3jNtx34gDVk.crl (hash: vPUPl6P9IFyJ/JqqNzOKAuSqfux9sIVN0101TWiLIBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:64:9c:6a:5b:53:57:c2:09:77:24:b2:90:c0:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a934e106be5386ed10675ee0de336dc77e200d59
Validity
Not Before: Mar 26 13:00:28 2026 GMT
Not After : Mar 27 13:00:28 2026 GMT
Subject: CN=f4e878a8079ad765a963444d3efea920ea6ffa4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:bb:a7:05:15:c8:8b:5d:8b:c2:79:6a:05:77:
a3:62:64:47:6f:7d:98:2c:56:2f:af:48:2c:8e:bc:
b2:0e:d9:cd:26:08:91:44:32:11:da:84:99:bc:5b:
35:d5:5c:fb:71:a5:a4:a3:5b:ba:a1:8f:9d:43:d5:
2d:fc:2b:15:85:3c:8d:05:19:7f:1f:92:67:69:26:
3c:31:ed:b0:43:35:56:68:46:8d:38:aa:a2:5c:c7:
27:3b:2a:59:c8:b8:02:5f:b7:c9:fc:84:79:30:74:
64:bd:a4:85:fc:17:cf:3f:e4:48:eb:be:b8:ea:a7:
79:6f:06:2b:b0:e6:f0:e4:2b:7c:7d:13:4e:80:23:
b4:f6:55:0f:66:9d:07:32:42:91:96:69:42:1a:ce:
bf:d2:15:71:7c:4b:5f:93:d3:d8:90:81:1a:0c:13:
4e:c0:d1:e9:19:af:95:c6:03:5c:0e:2b:ac:46:02:
53:2e:06:0b:01:10:5e:88:e5:a9:26:15:7a:82:9b:
4c:94:9c:47:67:f0:aa:34:c0:b6:d5:17:f9:bb:77:
06:61:65:3e:fc:f0:80:a2:82:9e:37:e2:70:27:b2:
0a:d6:9b:57:0b:66:95:70:9b:b8:c5:28:c4:0f:92:
b6:2e:36:16:e1:be:a5:1a:71:c7:e4:a1:a8:cc:a7:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E8:78:A8:07:9A:D7:65:A9:63:44:4D:3E:FE:A9:20:EA:6F:FA:4B
X509v3 Authority Key Identifier:
keyid:A9:34:E1:06:BE:53:86:ED:10:67:5E:E0:DE:33:6D:C7:7E:20:0D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTThBr5Thu0QZ17g3jNtx34gDVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/14dfd9-5914-4d20-a176-0a6bf2df9d62/1/qTThBr5Thu0QZ17g3jNtx34gDVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9d:b5:a4:82:e2:f5:5e:03:4d:8e:30:f0:52:0b:52:a9:6f:
e5:da:a0:e6:9e:84:91:16:ce:38:29:bc:59:01:df:12:17:ae:
3f:4e:b9:9c:5b:e8:f9:8b:2e:da:88:4d:c7:31:b5:b2:e8:8c:
a5:35:5b:cb:bf:63:79:8c:ac:d8:7e:be:10:96:fa:4d:51:51:
88:e6:0d:dd:5e:22:ce:7e:13:af:17:23:d2:e0:b8:fb:b6:ee:
10:b5:9d:4a:01:ed:d6:c7:a8:80:3b:b2:b9:d5:d0:3c:55:3a:
76:73:1c:f5:4d:b6:c8:c2:fa:b0:35:8a:50:d7:fb:c3:84:71:
68:eb:42:7f:29:54:12:76:0e:46:9a:0f:db:cd:ce:5f:c1:65:
56:7b:ae:bb:1b:d3:db:f3:4f:97:17:12:ef:21:d4:16:24:bc:
94:e8:91:ee:44:bc:fc:3d:89:29:c1:28:fb:83:5f:7c:5b:f3:
1a:1b:44:28:5b:fc:bf:d5:39:04:9e:46:9f:3a:73:c9:54:b9:
60:7c:90:b2:78:04:d3:36:46:a5:4d:4d:3c:37:47:72:94:59:
1b:63:2d:c9:68:b9:a2:dd:6e:be:c5:58:17:b3:f5:bf:f1:dc:
08:f7:09:ff:2e:4d:e9:35:25:f6:d7:d7:ea:77:92:0b:1f:20:
a6:ed:7f:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:00 2026 by rpki-client