Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
File: qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft (raw, json)
Hash identifier: uMJZm9er5H1148xrGfXkEiIShLdNbWGZRohC4Km0Cr0=
Subject key identifier: A7:7A:F2:CF:9E:32:B5:EE:EC:A0:01:9A:8B:D7:BC:6A:A2:FE:5D:31
Authority key identifier: A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
Certificate issuer: /CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Certificate serial: 019D27E00B4227516B5896A9A1F1F4DFC484
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
Manifest number: 159C
Signing time: Thu 26 Mar 2026 02:01:27 +0000
Manifest this update: Thu 26 Mar 2026 02:01:27 +0000
Manifest next update: Fri 27 Mar 2026 02:01:27 +0000
Files and hashes: 1: qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl (hash: pC5uqEQl6NKHswAcb4x0NtYRzALpEEZULlALA7wKlEQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:0b:42:27:51:6b:58:96:a9:a1:f1:f4:df:c4:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Validity
Not Before: Mar 26 02:01:27 2026 GMT
Not After : Mar 27 02:01:27 2026 GMT
Subject: CN=a77af2cf9e32b5eeeca0019a8bd7bc6aa2fe5d31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:cb:4f:44:86:12:be:5d:cb:0f:b6:c1:bc:c2:
9c:cf:63:6e:a5:33:54:83:1a:1a:dd:e2:b3:45:12:
b6:13:2e:dd:a3:c0:87:d1:9a:48:4e:ed:de:7a:0d:
c7:b0:3b:ae:20:98:5c:12:eb:4c:bd:dc:f0:45:89:
b2:36:16:6c:d6:c1:9b:e4:b8:d6:fb:30:49:a7:16:
64:1f:30:17:cd:f9:33:23:52:a1:47:d3:cf:86:83:
76:1f:10:9c:bc:bc:16:88:a8:b5:56:05:8c:2d:9e:
2f:3e:83:3c:38:ae:1d:90:e1:eb:10:11:bd:8a:be:
da:e8:39:82:f3:dc:3d:f6:7c:e0:6e:5c:c8:d4:6e:
8d:b5:15:1d:ef:2e:0f:ab:59:4d:31:ed:dc:b3:08:
06:aa:1f:d7:5b:96:33:30:ea:0e:8b:13:51:21:bc:
fc:e3:fb:01:60:71:99:ac:f5:29:a0:b7:3d:b1:e8:
d4:f0:fe:42:a2:b9:af:19:98:83:11:f5:92:07:3f:
f5:fc:e5:84:a5:3d:15:15:e6:7a:55:7d:03:1e:14:
79:8f:fb:1e:1e:21:19:22:1f:59:98:ef:26:ba:21:
94:f3:0f:23:11:9d:38:18:3f:10:a3:0b:eb:45:35:
30:41:5b:c4:9c:1d:69:12:01:8b:5a:ce:ea:41:f1:
95:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:7A:F2:CF:9E:32:B5:EE:EC:A0:01:9A:8B:D7:BC:6A:A2:FE:5D:31
X509v3 Authority Key Identifier:
keyid:A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:4b:54:7e:7d:18:13:6a:6b:91:9b:6f:9e:3a:41:d8:2b:de:
e6:24:d6:83:47:07:91:35:c9:87:6b:b8:0a:12:6b:3a:90:17:
da:f5:54:9d:70:35:fd:74:99:1c:d0:ca:9e:c4:58:1f:cc:aa:
ca:b7:64:b3:ef:f1:25:4e:fc:2d:47:50:e8:97:a2:eb:e8:62:
b9:5e:7b:0e:79:82:70:18:ba:5b:c3:89:c0:92:6c:04:06:48:
5e:2e:ab:df:9a:85:46:12:32:94:e5:16:b3:31:15:8d:65:32:
8c:95:48:92:07:a4:8d:b9:d5:d4:7b:72:51:a4:24:ea:ad:aa:
be:d7:41:99:55:48:2a:2c:9a:47:b3:e9:41:93:1f:4e:d4:8d:
9e:48:99:ff:e4:d7:88:6a:bb:fb:c4:30:4c:1a:e3:43:01:a3:
fe:ad:41:e4:bc:6f:ee:7a:94:58:ad:50:b6:d3:d5:8b:b9:6c:
a5:7a:f8:85:02:36:31:79:b7:e3:fe:29:1e:2f:42:ec:50:46:
e0:41:4c:08:73:61:ba:73:e5:a3:bc:2d:6f:93:09:4a:c2:44:
44:45:fc:f3:b9:80:10:b5:33:f3:ef:8b:c6:fc:11:1d:97:48:
d6:b5:3a:d4:5f:1b:2d:ed:e8:9a:5a:43:77:56:2d:4c:aa:8b:
c6:82:13:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:58:58 2026 by rpki-client