Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/851a00-595a-4fb8-ac2c-9261626a48c5/1/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.mft
File: Q_aHvzg-MgRbwCfcyuqtzzbI5xU.mft (raw, json)
Hash identifier: aooU7tYlZk8UpJBL6IFgYeUYIu1nzUJ7T5a5ku+NpRs=
Subject key identifier: 85:41:64:B0:42:D3:77:72:90:5F:11:FB:E1:AC:64:98:10:DC:A3:3B
Authority key identifier: 43:F6:87:BF:38:3E:32:04:5B:C0:27:DC:CA:EA:AD:CF:36:C8:E7:15
Certificate issuer: /CN=43f687bf383e32045bc027dccaeaadcf36c8e715
Certificate serial: 019D26CCF9D805B484A174CD6D6C942C6E8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/851a00-595a-4fb8-ac2c-9261626a48c5/1/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.mft
Manifest number: 0172
Signing time: Wed 25 Mar 2026 21:01:00 +0000
Manifest this update: Wed 25 Mar 2026 21:01:00 +0000
Manifest next update: Thu 26 Mar 2026 21:01:00 +0000
Files and hashes: 1: Q_aHvzg-MgRbwCfcyuqtzzbI5xU.crl (hash: n8YP6ZbFgA3uEP2l7ICdGNDhpro3oDk8gU8QGVe8wV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/851a00-595a-4fb8-ac2c-9261626a48c5/1/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/851a00-595a-4fb8-ac2c-9261626a48c5/1/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cc:f9:d8:05:b4:84:a1:74:cd:6d:6c:94:2c:6e:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43f687bf383e32045bc027dccaeaadcf36c8e715
Validity
Not Before: Mar 25 21:01:00 2026 GMT
Not After : Mar 26 21:01:00 2026 GMT
Subject: CN=854164b042d37772905f11fbe1ac649810dca33b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a3:49:eb:34:e4:18:cc:8e:ba:31:b3:9b:ce:
3a:25:1b:17:89:1c:8a:c1:19:39:15:5a:4f:bb:72:
60:c3:35:06:95:f2:71:93:3d:8b:b5:50:b5:2f:8d:
14:fc:f9:5e:d4:70:10:3e:fe:87:da:1b:b4:f8:95:
88:36:bb:a4:ad:be:ce:88:78:91:31:e1:a3:18:36:
2b:75:4c:cb:02:28:64:6e:a5:72:f6:57:11:5e:f8:
2a:6b:7b:26:65:9f:0d:53:ba:e3:df:f3:d9:b4:ac:
c6:c6:d3:06:f2:45:be:f8:14:e3:96:72:a4:1b:60:
f7:e6:eb:21:0f:3b:ca:4d:0b:80:dd:d2:f3:b4:06:
46:6f:ea:c1:35:e5:ca:d1:cb:b2:d6:a6:78:cd:73:
00:a7:6d:97:c1:73:46:75:85:92:d7:3d:b2:95:d5:
23:ef:78:9f:0c:b7:e1:48:7b:d0:94:ef:e4:0f:0c:
20:3a:47:c6:a1:53:d1:3e:36:f3:a0:c2:8d:3b:eb:
19:6f:33:e8:cd:af:7a:7a:a4:9a:89:9b:17:f2:21:
fb:b8:38:dc:c2:43:1f:e6:63:50:12:c7:62:f3:82:
16:89:17:4e:e9:e0:bf:96:29:38:9b:c9:2b:09:8f:
34:29:05:c0:2a:f5:d8:88:a0:e0:bf:51:12:18:3b:
f3:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:41:64:B0:42:D3:77:72:90:5F:11:FB:E1:AC:64:98:10:DC:A3:3B
X509v3 Authority Key Identifier:
keyid:43:F6:87:BF:38:3E:32:04:5B:C0:27:DC:CA:EA:AD:CF:36:C8:E7:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/851a00-595a-4fb8-ac2c-9261626a48c5/1/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/851a00-595a-4fb8-ac2c-9261626a48c5/1/Q_aHvzg-MgRbwCfcyuqtzzbI5xU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a5:0d:99:04:c2:70:96:67:4e:13:ec:4b:36:88:35:84:92:
90:54:4c:30:92:ed:40:52:77:1f:e0:c8:a6:21:df:c5:92:e9:
b8:86:47:11:9f:65:bd:a3:34:85:97:a2:f6:6a:5d:82:df:db:
35:f0:1d:64:78:7f:29:ce:d6:1a:3d:fa:fd:d4:9a:62:8f:46:
fb:46:d3:2b:67:bf:78:2d:f2:65:60:3c:87:1d:a6:6c:5b:78:
84:47:df:5f:e8:73:2d:9e:ff:92:0e:6f:eb:5c:45:1f:48:0a:
22:4e:f8:f5:b9:1d:83:4a:1e:e8:d6:1a:60:bf:4e:8b:53:01:
b7:06:70:6c:70:e2:dc:a6:4f:22:fc:72:37:ed:5a:11:a3:c9:
8f:a3:4b:4c:8d:b0:b3:f4:ca:ed:e1:a0:0e:7a:68:96:bb:c0:
64:42:18:bd:77:df:98:a5:63:49:ac:a1:e8:a0:d7:66:4c:78:
41:aa:f3:49:af:fb:bb:19:ca:0c:b9:09:1e:56:85:0f:9e:da:
e3:1b:0e:1e:3d:c3:e1:06:78:83:48:ec:2d:2a:6c:f3:08:75:
60:5b:64:69:3d:31:8b:be:11:0d:64:1e:72:cf:69:90:c2:01:
96:1e:34:48:bc:6c:28:e9:be:67:d9:39:ae:3a:88:b1:61:96:
13:ab:80:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:54:30 2026 by rpki-client