Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
File: qQcj6hJVTVL0ZzoaSHifPQWniaA.mft (raw, json)
Hash identifier: 1R9HU/hENRb1Vyg7qtX7EbdZPLeWDsHYG4cEckn2Oco=
Subject key identifier: D8:AC:7B:71:C1:C8:16:2F:BF:6F:00:07:C0:9A:1D:4D:21:84:2B:B8
Authority key identifier: A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
Certificate issuer: /CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Certificate serial: 019D25F1FE95A2B2E5914E434CA2371227A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
Manifest number: 1516
Signing time: Wed 25 Mar 2026 17:01:49 +0000
Manifest this update: Wed 25 Mar 2026 17:01:49 +0000
Manifest next update: Thu 26 Mar 2026 17:01:49 +0000
Files and hashes: 1: qQcj6hJVTVL0ZzoaSHifPQWniaA.crl (hash: vFi+CPxW88MMiM4kDxH6ujaFDmE7IASrxkzlzTBmCiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:fe:95:a2:b2:e5:91:4e:43:4c:a2:37:12:27:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a90723ea12554d52f4673a1a48789f3d05a789a0
Validity
Not Before: Mar 25 17:01:49 2026 GMT
Not After : Mar 26 17:01:49 2026 GMT
Subject: CN=d8ac7b71c1c8162fbf6f0007c09a1d4d21842bb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3b:d6:de:46:2e:b6:7d:63:da:02:b5:ea:ca:
b0:f7:de:66:18:84:df:ae:2e:4b:f2:f1:28:97:bd:
36:14:1e:4b:d7:b5:d3:bb:99:ad:b4:0e:ba:48:7c:
7f:1e:d4:8f:de:f4:b1:78:c0:d3:a7:0b:9e:5b:bb:
b1:de:15:32:31:39:21:cf:bd:b2:21:4a:30:aa:b5:
92:a6:de:02:e4:86:3c:c6:92:fc:5f:d9:c2:63:72:
a1:6a:6c:c3:ca:ac:bd:ee:13:f0:b5:24:d0:56:c4:
28:db:f2:c6:0a:a0:6f:a5:d3:10:ea:4b:5c:48:fc:
03:63:01:dc:4e:10:9d:96:7e:b6:98:c0:ee:3f:e5:
72:78:65:b3:3b:e8:74:1d:37:76:ef:bf:d0:0e:aa:
9d:da:1b:ba:74:24:50:35:d8:8c:43:51:bb:8f:1b:
8c:1d:8a:f3:99:e8:fc:99:8b:2e:c4:b0:52:81:02:
29:0e:74:ee:85:56:95:ab:e1:d3:ca:49:2d:1d:83:
a9:2b:12:34:95:ae:60:53:b3:b6:ce:5e:82:1a:1c:
88:23:1d:e9:09:0a:62:d0:d6:a0:94:f4:3f:7d:01:
bf:52:f8:05:d5:9f:e8:40:0f:30:7a:7e:79:8d:64:
06:00:d7:9a:e5:f9:93:6d:9c:56:7c:cd:ba:0b:2e:
55:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:AC:7B:71:C1:C8:16:2F:BF:6F:00:07:C0:9A:1D:4D:21:84:2B:B8
X509v3 Authority Key Identifier:
keyid:A9:07:23:EA:12:55:4D:52:F4:67:3A:1A:48:78:9F:3D:05:A7:89:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qQcj6hJVTVL0ZzoaSHifPQWniaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/4d315d-63a8-44b0-b8a3-b774c3ea9dbb/1/qQcj6hJVTVL0ZzoaSHifPQWniaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:27:0b:8a:08:46:37:c3:c3:72:ce:16:2a:ee:64:58:99:40:
4d:5b:41:38:d9:92:c6:3e:9c:1e:7a:86:0e:d6:f1:75:75:f5:
af:a4:18:d0:9f:29:42:53:67:0e:44:68:b5:b4:c3:40:d6:da:
c2:6f:48:7c:56:3c:a3:bc:f2:3c:a1:0f:3e:03:f4:d3:db:54:
c9:a4:01:52:10:3f:34:78:be:4a:3c:51:8c:06:6a:a1:2d:6c:
69:83:3a:cb:2c:7c:59:f4:02:37:38:04:da:5d:9f:f3:cb:64:
8c:31:2d:69:a5:74:b9:77:ce:f1:9f:f9:6f:22:a6:35:9f:53:
28:67:be:38:e3:51:4a:c4:03:e9:ed:77:9e:87:b7:80:98:cc:
65:f5:a6:47:ff:a5:75:91:a5:81:6e:05:10:4b:a5:02:7c:8c:
59:a2:1d:99:ce:99:99:9e:f0:d3:1d:c0:5c:9f:36:55:8c:a4:
1a:d6:bf:e2:d3:a1:55:06:65:16:f8:5c:e7:cf:ee:53:eb:28:
17:40:53:5a:ea:1f:c3:08:cd:b6:37:d2:ac:ab:85:52:8e:3f:
14:30:e8:83:b1:72:1f:c4:06:d6:6d:f9:4e:10:07:09:fd:10:
32:46:76:33:ac:94:f2:2b:6f:e6:05:4b:9d:85:20:fd:a9:76:
73:34:d6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:58:07 2026 by rpki-client