Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
File: qK9MCjctAUVV99TXyJz5lvBRQvU.mft (raw, json)
Hash identifier: AsToFhCHfW/BTyaNVcMfyrf8b+CBFuETvJgGwyAyJ7M=
Subject key identifier: 2D:A7:21:6D:39:96:1C:52:29:4B:B4:91:B7:7D:01:BF:F2:AE:0D:66
Authority key identifier: A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
Certificate issuer: /CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Certificate serial: 019D2AE06301C7350C7F763FD0B5FC19CB00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
Manifest number: 061B
Signing time: Thu 26 Mar 2026 16:00:41 +0000
Manifest this update: Thu 26 Mar 2026 16:00:41 +0000
Manifest next update: Fri 27 Mar 2026 16:00:41 +0000
Files and hashes: 1: qK9MCjctAUVV99TXyJz5lvBRQvU.crl (hash: X2+yS3CO5b/Fy/tzfAPi8y/K0+OeAmzyn+hG9xWjwzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e0:63:01:c7:35:0c:7f:76:3f:d0:b5:fc:19:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8af4c0a372d014555f7d4d7c89cf996f05142f5
Validity
Not Before: Mar 26 16:00:41 2026 GMT
Not After : Mar 27 16:00:41 2026 GMT
Subject: CN=2da7216d39961c52294bb491b77d01bff2ae0d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:76:9a:ae:e6:30:c1:1a:8e:fa:55:25:fc:fe:
ac:94:fd:64:81:7a:01:ff:b0:c4:d7:73:fc:3f:64:
47:01:9a:4c:b5:74:01:37:33:97:19:85:1a:67:15:
05:d8:44:3b:31:af:48:01:13:e7:e2:25:67:e4:2b:
22:16:95:fe:5d:63:4e:c7:c8:14:a6:27:27:e4:aa:
58:38:a3:65:b0:6e:f4:18:4a:6e:f8:bd:1f:a7:8a:
45:ad:de:8f:df:ad:eb:a6:3c:9b:04:f9:ec:fa:3e:
3c:91:44:8c:cc:d9:99:da:fe:5c:44:9d:e9:a0:83:
49:6d:ad:26:be:d8:aa:4d:c9:ab:af:39:aa:5c:bf:
ae:c2:1f:e7:09:26:d4:be:56:8f:66:ed:b2:24:bc:
73:73:e8:98:e4:d9:fa:53:5d:c6:e5:05:33:0c:b4:
12:41:65:6a:b0:2a:59:36:2f:5f:73:1d:89:fe:57:
e4:dd:45:2e:1a:08:ab:52:6f:32:99:0e:b6:65:c4:
bd:51:67:ab:26:14:ae:65:d4:c3:48:5f:36:45:2b:
a3:92:9d:7f:de:86:9f:b9:cf:68:60:5c:95:bc:74:
f4:62:45:d3:eb:78:17:24:2b:4a:a1:db:3e:a8:de:
b1:0f:67:e0:2d:9c:61:ee:7c:05:97:ed:ec:ee:01:
66:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A7:21:6D:39:96:1C:52:29:4B:B4:91:B7:7D:01:BF:F2:AE:0D:66
X509v3 Authority Key Identifier:
keyid:A8:AF:4C:0A:37:2D:01:45:55:F7:D4:D7:C8:9C:F9:96:F0:51:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qK9MCjctAUVV99TXyJz5lvBRQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/8b2bbd-af12-46ae-a50f-dab38fd3c786/1/qK9MCjctAUVV99TXyJz5lvBRQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:64:62:e7:20:5c:f8:ae:79:95:25:0a:3a:2a:90:bc:8d:3e:
ee:76:8e:18:a8:c7:d9:22:b5:28:3f:7e:83:94:b8:ea:21:2c:
f4:37:74:e4:1e:09:f3:ce:d0:42:70:28:40:c2:ed:7d:d9:18:
21:55:71:b8:31:28:ee:07:39:0d:78:9e:b9:77:f4:b2:57:af:
fb:e1:91:0f:c5:b8:9c:7b:c0:91:f0:6c:3e:a0:c0:a6:b1:a9:
2e:2d:00:bb:e9:6c:af:cd:b9:3e:99:72:71:54:9c:2c:c5:46:
62:34:67:27:8c:80:bf:b6:aa:29:72:b2:02:1c:82:91:82:54:
4f:68:22:e4:63:28:d0:4c:ee:f3:ba:e5:67:86:f2:8c:08:ad:
f0:44:7e:80:8d:ee:5c:7e:9a:aa:fc:13:69:5a:87:70:c2:58:
e4:14:22:25:a8:1f:cc:50:86:2a:d0:a4:be:c9:c3:a6:64:df:
06:9c:56:63:bc:14:95:a6:73:c0:d9:35:57:b2:ad:78:87:55:
0b:b6:7a:22:2d:76:b6:e9:13:69:1e:c9:bf:10:d8:72:a5:9c:
4e:5b:5b:ab:0f:71:dd:c6:08:4a:34:d7:86:79:80:dc:60:7c:
0d:f5:45:ce:0e:55:16:bc:e1:b2:02:0d:22:bc:2f:d5:1f:68:
2a:19:a7:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:58:40 2026 by rpki-client