Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.mft
File: q-KqqfiJDkQV40HAd9hnvuJaodE.mft (raw, json)
Hash identifier: aQrANlc4h0k7KTeu5zZlq2cntiwHf/RIYFTlHm5kTW4=
Subject key identifier: 0A:51:46:7D:C2:EB:07:55:A2:58:B3:B3:9C:A2:A4:47:A2:B1:24:ED
Authority key identifier: AB:E2:AA:A9:F8:89:0E:44:15:E3:41:C0:77:D8:67:BE:E2:5A:A1:D1
Certificate issuer: /CN=abe2aaa9f8890e4415e341c077d867bee25aa1d1
Certificate serial: 019D27A889F2D8E0D95BDC8EA349E20DEB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q-KqqfiJDkQV40HAd9hnvuJaodE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.mft
Manifest number: 02DD
Signing time: Thu 26 Mar 2026 01:00:49 +0000
Manifest this update: Thu 26 Mar 2026 01:00:49 +0000
Manifest next update: Fri 27 Mar 2026 01:00:49 +0000
Files and hashes: 1: q-KqqfiJDkQV40HAd9hnvuJaodE.crl (hash: jWLpunWgmpYAvnUKUgDqQS7bjsBBndQ1oMkCZcCjSbc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.mft
rsync://rpki.ripe.net/repository/DEFAULT/q-KqqfiJDkQV40HAd9hnvuJaodE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:89:f2:d8:e0:d9:5b:dc:8e:a3:49:e2:0d:eb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abe2aaa9f8890e4415e341c077d867bee25aa1d1
Validity
Not Before: Mar 26 01:00:49 2026 GMT
Not After : Mar 27 01:00:49 2026 GMT
Subject: CN=0a51467dc2eb0755a258b3b39ca2a447a2b124ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:98:f1:d5:7b:55:2f:72:ed:94:51:5f:c4:0c:
34:e1:c8:89:0b:38:56:4e:bd:5f:13:a5:07:3b:70:
a1:4c:a4:44:4f:15:6f:eb:3e:be:0c:33:25:00:9b:
23:72:b9:26:b3:2b:29:d5:c2:ee:50:92:bb:4b:96:
ee:a4:92:9f:84:4e:24:9d:0c:2d:fd:ef:81:42:36:
2d:37:9a:a3:e5:b0:73:c0:13:06:e8:20:11:38:7d:
f4:14:33:6b:8a:50:08:62:cd:57:fb:2d:46:c8:4a:
7a:0b:03:37:6a:ce:64:f3:3b:38:e6:02:8e:6f:d0:
20:e5:f0:70:94:0e:d6:d7:12:99:6f:93:11:c1:16:
6e:e5:40:17:36:40:a9:31:68:ab:33:f0:dd:62:12:
73:65:ed:53:d1:16:f1:97:9e:a1:7f:4b:f0:9f:4c:
35:0f:ad:3f:17:b4:5b:87:dc:40:e9:8c:75:ff:e1:
55:86:70:27:d4:60:f5:ad:4e:8d:c0:37:de:7b:0b:
02:db:75:61:d0:ca:f0:71:09:d0:8b:76:c6:f8:c3:
31:7e:20:fb:74:77:9a:0c:07:ea:71:d0:50:84:70:
03:ba:b6:06:1b:c9:49:39:83:2d:a8:43:1a:e8:1b:
d3:8d:9c:93:70:39:5e:61:cf:b5:54:82:91:35:e5:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:51:46:7D:C2:EB:07:55:A2:58:B3:B3:9C:A2:A4:47:A2:B1:24:ED
X509v3 Authority Key Identifier:
keyid:AB:E2:AA:A9:F8:89:0E:44:15:E3:41:C0:77:D8:67:BE:E2:5A:A1:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q-KqqfiJDkQV40HAd9hnvuJaodE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/87ab16-b4de-4ccf-ac49-461a6eccfc47/1/q-KqqfiJDkQV40HAd9hnvuJaodE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:1b:1d:60:1d:5b:40:8d:ce:5d:63:b0:37:9d:f1:10:6c:8c:
2c:d0:85:c7:bd:f3:e5:e5:f4:9e:fd:bd:75:bd:f1:8b:92:a5:
32:b5:28:37:50:b5:98:5a:36:3b:45:37:71:be:9f:e1:18:b8:
b2:8b:82:02:ca:e7:9a:b6:68:da:09:a4:e4:d8:df:58:12:1b:
1a:03:02:93:5e:c9:2b:be:16:ce:05:0a:45:d6:a4:97:14:32:
c1:b9:86:bb:aa:ff:77:32:39:77:07:17:72:c1:19:5b:8c:8c:
60:ca:d4:af:bd:ee:85:2e:09:b5:d7:06:80:da:ad:c0:3e:22:
e3:d1:dd:c3:46:0f:b3:94:7c:32:c7:13:79:96:fb:04:84:35:
bc:47:f0:02:8c:88:e8:ea:33:d2:28:12:1d:02:c3:c8:79:ef:
76:c2:75:22:62:f7:59:66:c5:41:6e:83:0d:0f:56:66:42:96:
24:39:3b:03:c3:c4:93:c7:1c:c4:6c:30:76:04:71:fe:2e:2f:
56:f0:33:7e:c8:e3:0a:c5:9b:ba:71:1e:32:fb:d8:88:b9:8b:
05:87:e5:0d:15:38:14:15:8a:5b:d9:d6:f4:18:3f:fe:ba:e1:
50:af:ae:a5:c0:96:86:78:50:c5:94:24:24:7e:34:25:5d:42:
68:c7:3d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:35:46 2026 by rpki-client