Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
File: qEmcFnojbc9FXrmHHw3O0LoNwpE.mft (raw, json)
Hash identifier: u8uPSU1kntdao+19QRjpct2yqE6NShbL3QDqUYBSgtY=
Subject key identifier: 62:42:AA:53:36:D6:AA:5B:71:52:E7:BE:DF:E6:BD:1C:0A:B6:86:0F
Authority key identifier: A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
Certificate issuer: /CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Certificate serial: 019D26283130A06BC6F384A5A13DCCF4B92F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
Manifest number: 080A
Signing time: Wed 25 Mar 2026 18:01:01 +0000
Manifest this update: Wed 25 Mar 2026 18:01:01 +0000
Manifest next update: Thu 26 Mar 2026 18:01:01 +0000
Files and hashes: 1: qEmcFnojbc9FXrmHHw3O0LoNwpE.crl (hash: NO514kRSr7570ZJUFajZn/3NWwGEsXdxc0MRNOuEGkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:28:31:30:a0:6b:c6:f3:84:a5:a1:3d:cc:f4:b9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Validity
Not Before: Mar 25 18:01:01 2026 GMT
Not After : Mar 26 18:01:01 2026 GMT
Subject: CN=6242aa5336d6aa5b7152e7bedfe6bd1c0ab6860f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ef:ae:e5:1d:89:1f:4f:7d:5e:a9:03:2c:86:
59:83:ec:9d:df:30:a2:2d:9f:73:15:c4:ad:bc:8b:
5f:f6:18:4a:78:99:3b:b0:34:0a:ff:db:29:8b:6a:
06:5a:a6:b9:3e:a4:94:0f:37:f5:d6:a0:94:fd:aa:
22:57:50:49:bc:e0:04:cd:85:9f:cc:32:73:e0:e8:
99:db:a3:94:af:77:a7:d0:24:39:40:da:af:d6:77:
ee:38:1c:c6:0b:70:2c:dc:34:46:67:3b:12:f5:c9:
7f:58:fd:c0:88:3a:4a:83:73:b8:7d:4b:f6:63:f9:
70:4e:ae:e7:10:46:a7:93:10:14:c4:67:c4:38:da:
91:36:c9:a6:62:e2:42:24:30:3f:2c:79:51:3a:b5:
ee:0b:51:54:7d:60:20:e8:75:6c:d6:94:f6:37:9b:
a1:e4:d7:17:58:50:3c:e6:92:9a:31:be:31:9f:2b:
e9:15:5b:cd:c2:6c:14:63:c9:2f:40:90:a2:c5:21:
c5:f4:e2:ac:5e:51:98:df:5c:59:46:c9:f8:1f:2c:
10:42:86:1b:7c:c7:24:ab:83:7d:79:0e:8e:20:44:
05:01:cc:ea:8d:e1:ae:e3:b0:1c:22:2a:e5:b9:bc:
d8:44:e4:ed:fa:8a:8b:16:3d:8b:ed:8e:0a:0e:a5:
66:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:42:AA:53:36:D6:AA:5B:71:52:E7:BE:DF:E6:BD:1C:0A:B6:86:0F
X509v3 Authority Key Identifier:
keyid:A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ab:e9:39:de:a5:e1:f3:8f:6e:ed:75:d9:e9:0e:35:60:58:
85:fc:a4:1d:73:8f:cb:16:db:08:b6:55:ca:16:a3:eb:90:f8:
8b:2d:93:73:24:b3:1b:08:86:d4:a1:6d:b5:fd:af:2d:bd:36:
d1:b0:84:9f:4d:8d:36:17:3e:22:ca:be:4f:85:ad:d9:b8:69:
d6:1f:8d:95:69:30:65:98:d6:73:5b:88:55:7e:72:26:49:f8:
6d:80:1c:9b:a8:53:02:36:e9:c4:ca:0e:d5:9d:45:98:49:1f:
e3:ba:78:f7:20:8d:0f:f6:19:0d:b8:f9:4a:cd:06:72:05:50:
b3:69:97:2b:48:ec:ea:c1:a6:4a:33:9a:ea:65:ee:03:7d:64:
ce:45:3e:cd:27:0c:4d:de:69:bd:82:ee:15:14:49:b0:2c:ae:
ec:e1:8a:9a:80:c4:c8:5d:80:d0:7a:56:c2:fc:aa:fd:43:b5:
04:33:2a:92:6b:89:23:79:b8:75:88:c3:f6:e5:05:c3:c9:2e:
25:4c:9e:16:25:81:bc:8e:83:86:fb:df:1f:6d:32:99:d1:32:
ae:2c:d6:2d:22:46:c5:73:70:a6:e6:6d:6f:b5:57:ae:04:a4:
c4:d6:fd:6f:28:59:93:f4:86:76:fb:cc:0a:4b:f4:41:2f:36:
f0:11:88:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:20:05 2026 by rpki-client