Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
File: q06x4MU6aA6qQLjHzT8hzJYEPoo.mft (raw, json)
Hash identifier: VSFePLLaMYYENRjB0+VQ1OgWYD3KebpsvXLmNUd6z8k=
Subject key identifier: FF:93:29:D9:02:66:7D:76:EC:6B:2C:F5:56:50:96:5A:24:11:0D:3A
Authority key identifier: AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A
Certificate issuer: /CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
Certificate serial: 019D2960D5A4B9FD8D2DD89856D0B7D33BD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
Manifest number: 1883
Signing time: Thu 26 Mar 2026 09:01:45 +0000
Manifest this update: Thu 26 Mar 2026 09:01:45 +0000
Manifest next update: Fri 27 Mar 2026 09:01:45 +0000
Files and hashes: 1: q06x4MU6aA6qQLjHzT8hzJYEPoo.crl (hash: 8AZOGSZXsmTG5O4yj4KhzJPM6Uj6UgNNpPkxUay58A0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:d5:a4:b9:fd:8d:2d:d8:98:56:d0:b7:d3:3b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
Validity
Not Before: Mar 26 09:01:45 2026 GMT
Not After : Mar 27 09:01:45 2026 GMT
Subject: CN=ff9329d902667d76ec6b2cf55650965a24110d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:8d:e9:9c:bf:db:05:14:9e:f7:f3:9e:ce:
aa:1b:db:2c:87:23:fc:c8:a9:20:74:e6:fb:80:7a:
f5:89:83:ba:50:b3:36:3e:fe:29:d2:0d:1f:ee:45:
43:3a:d4:b2:d2:04:9c:46:4d:60:ed:3e:12:25:61:
2e:b6:1d:75:ac:98:ab:73:f9:c3:0b:d2:1c:9a:69:
f9:f8:d4:c2:59:48:f8:29:cc:f9:94:cc:8e:77:3e:
c7:d8:42:d0:97:10:22:96:5b:6e:1d:64:64:10:a9:
72:40:66:20:53:6c:93:20:ac:ea:96:cc:4c:80:d3:
14:28:c6:c2:4f:1f:f8:ca:c3:83:a1:de:6d:a1:ff:
e9:b7:f2:2f:05:54:17:69:9b:50:f6:e5:f4:3b:b0:
7f:9b:02:26:36:82:18:a2:06:33:bf:22:a5:c2:44:
c5:ef:b6:ab:f2:89:86:bc:af:83:41:47:ae:45:79:
87:b9:26:8c:2c:71:cb:39:f2:c8:b2:81:d0:f9:b6:
f3:2f:00:62:a0:62:a6:c5:2b:38:ca:8b:92:46:59:
0f:fc:42:ce:09:17:ed:2f:d7:9f:59:d2:66:3c:6c:
73:36:67:43:fd:0f:f0:e8:97:7c:d0:9d:65:8e:e8:
7e:cc:79:d8:1c:13:bc:24:73:6a:ed:ce:d4:a2:0e:
e6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:93:29:D9:02:66:7D:76:EC:6B:2C:F5:56:50:96:5A:24:11:0D:3A
X509v3 Authority Key Identifier:
keyid:AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:1a:b3:fb:cd:ad:b3:e2:35:70:6a:19:24:ec:e3:9a:dc:75:
9e:c1:7d:3c:6c:fe:c8:84:ae:a4:34:46:14:c5:d9:90:42:69:
74:1b:ad:df:c9:77:43:af:56:8f:09:af:b8:3e:c1:87:e9:6f:
d6:32:d3:d6:31:a8:4c:8d:9c:23:73:2d:d1:d8:4c:7f:57:09:
91:72:50:9d:f4:93:c9:8c:b8:b6:1e:b8:ea:e8:b1:33:3a:34:
7e:a9:e5:46:9b:77:89:cc:59:b7:43:34:94:8c:3a:ee:13:71:
8c:7a:6b:fe:fd:42:c6:09:a3:31:0b:0b:28:e2:da:e3:a9:07:
ff:98:19:3a:32:4d:16:47:ff:5b:e1:e0:f7:b3:ef:65:e2:b1:
d3:a5:39:5d:2d:d9:24:e1:a5:5e:94:4c:75:9b:03:46:bb:e0:
32:eb:63:29:e0:bc:d7:7c:50:9c:a1:c3:20:b1:d1:37:7f:63:
9e:27:a9:5f:77:24:e4:a8:0b:fe:02:08:05:80:ec:9d:d1:6b:
64:f0:61:b3:27:8c:36:3b:09:d5:13:93:a4:05:7f:23:a9:f8:
c3:2b:81:5a:da:2e:47:86:ef:c1:6e:b5:e5:af:51:bc:1b:99:
d9:35:98:f6:f6:11:85:f5:d6:49:cb:9e:55:3e:1d:4d:28:c0:
09:59:11:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:13 2026 by rpki-client