Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
File: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft (raw, json)
Hash identifier: 4Bi+NCsEucPmQ14b+RHEHxYlADVz7fLanXZyxqqJDWA=
Subject key identifier: D4:06:E5:F9:80:71:74:B7:78:EF:D5:79:44:B6:08:EE:73:60:7D:40
Authority key identifier: 43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
Certificate issuer: /CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Certificate serial: 019D25F1FC6DDA7B747C295BB76E058BAEEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
Manifest number: 1201
Signing time: Wed 25 Mar 2026 17:01:48 +0000
Manifest this update: Wed 25 Mar 2026 17:01:48 +0000
Manifest next update: Thu 26 Mar 2026 17:01:48 +0000
Files and hashes: 1: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl (hash: SAQomueFpoeOGqq7uQO5CohBaojifs8D9Jq83MwLU1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:fc:6d:da:7b:74:7c:29:5b:b7:6e:05:8b:ae:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Validity
Not Before: Mar 25 17:01:48 2026 GMT
Not After : Mar 26 17:01:48 2026 GMT
Subject: CN=d406e5f9807174b778efd57944b608ee73607d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:36:eb:69:c7:a4:8a:71:bc:ac:75:6b:ea:3e:
fa:53:46:15:9e:d5:9d:66:c8:6f:0c:f2:e0:e4:43:
be:2e:3f:0f:1e:e6:e5:02:b2:36:01:41:78:a8:c3:
07:81:64:81:8d:7b:b1:98:ff:44:9f:18:3f:1c:af:
8f:15:cb:f0:ef:ef:c9:16:78:7c:73:68:dc:d3:cd:
cf:e4:33:a4:3f:3c:79:a3:f3:ab:89:c1:b5:96:a2:
81:3d:4c:85:da:cc:d0:70:f3:1b:de:fc:a0:33:92:
b0:7a:57:ad:12:41:4b:68:42:26:6b:70:a2:14:29:
48:2a:ae:52:13:22:de:e0:7f:6f:80:db:df:67:2c:
15:4c:61:f1:13:e6:d1:ba:18:59:8c:26:1b:03:17:
ea:e2:ab:0e:6c:58:0f:0e:19:a3:a2:5b:b6:d4:74:
41:60:8d:2b:f6:00:f2:61:49:93:a1:d5:25:66:c1:
98:8f:a5:c6:f2:69:54:d4:60:89:86:c2:e8:67:c5:
ed:3c:0d:f4:b9:d1:81:3a:a8:76:d5:74:84:84:ca:
85:27:3e:c5:c8:66:72:71:65:14:53:b6:f1:9b:59:
39:09:a5:93:17:9f:d9:d1:22:e0:3f:cd:05:df:67:
00:c2:61:20:61:ca:d9:63:81:8f:25:4c:ce:61:c2:
4e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:06:E5:F9:80:71:74:B7:78:EF:D5:79:44:B6:08:EE:73:60:7D:40
X509v3 Authority Key Identifier:
keyid:43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:96:e0:d3:20:df:59:a9:6c:9b:24:06:d2:e8:be:db:8f:d4:
b6:cf:2c:62:c6:92:59:97:73:c3:5a:d4:0c:1e:c4:99:a4:17:
a1:f9:b7:b6:4f:55:08:23:37:32:12:cc:74:82:c9:25:72:13:
b4:6b:78:c5:7f:f6:aa:95:08:a1:a7:0b:d7:79:9e:d2:9b:dd:
2c:3d:fc:7b:52:c8:af:47:87:cb:56:54:16:77:2a:c2:81:6f:
07:94:76:48:5b:2f:69:43:14:0a:02:16:93:5c:15:bf:20:bb:
b4:84:fa:c8:16:5a:6b:27:11:ef:1f:81:23:52:1a:b1:7f:e1:
6f:da:ee:4a:35:4c:69:eb:b6:b1:e7:11:0e:c0:f8:06:fb:85:
04:53:7a:7a:f4:75:d5:1c:30:ee:8b:01:74:6c:e1:df:aa:08:
76:b2:a0:a1:20:68:7a:52:f2:a3:e2:b6:cf:0e:d0:d4:51:26:
46:55:e3:0e:c9:e4:b0:d4:44:b7:6d:13:e9:25:a0:2b:8e:93:
df:d6:7b:4e:c5:a7:49:4e:56:a7:6c:d4:3d:16:ff:5a:90:d0:
a2:bf:a6:a3:f4:fd:22:22:79:d8:bd:b9:d5:3c:81:cb:35:56:
22:23:82:5e:8d:e7:d9:c1:f4:eb:f0:6e:63:c7:be:73:a1:25:
3a:04:27:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:56 2026 by rpki-client