Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
File: qWpTYQ2O9mShJ1txquq7KFEEwk8.mft (raw, json)
Hash identifier: 0DgO6WWRhRV9F2WIirvwqGAHuv72RiposXY7OQ9FT0w=
Subject key identifier: 94:E3:08:AC:1B:31:54:39:9C:43:2B:A8:3C:A8:6E:02:7F:4B:DE:8F
Authority key identifier: A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F
Certificate issuer: /CN=a96a53610d8ef664a1275b71aaeabb285104c24f
Certificate serial: 019D2704E7CD9405AD9B9D3D9D7648529A02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
Manifest number: 1882
Signing time: Wed 25 Mar 2026 22:02:05 +0000
Manifest this update: Wed 25 Mar 2026 22:02:05 +0000
Manifest next update: Thu 26 Mar 2026 22:02:05 +0000
Files and hashes: 1: qWpTYQ2O9mShJ1txquq7KFEEwk8.crl (hash: blwKDrIPYfBCxEQZQHOFSbejPfa717KqLzkMU4ykX9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:e7:cd:94:05:ad:9b:9d:3d:9d:76:48:52:9a:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a96a53610d8ef664a1275b71aaeabb285104c24f
Validity
Not Before: Mar 25 22:02:05 2026 GMT
Not After : Mar 26 22:02:05 2026 GMT
Subject: CN=94e308ac1b3154399c432ba83ca86e027f4bde8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ef:3d:0c:e7:09:02:e8:ce:64:22:aa:6e:91:
9a:30:0f:41:b4:58:21:bd:ce:b9:52:44:dc:73:aa:
f0:0b:e0:1a:95:22:6b:16:99:e1:e4:90:0b:5f:48:
7e:ec:2d:9a:12:66:31:7b:af:62:3f:ed:71:4f:f6:
32:b6:86:af:25:28:66:71:79:b6:76:1e:be:f8:8c:
65:2f:00:05:95:0f:52:fd:09:e2:cf:45:95:7b:da:
cb:89:f0:91:12:10:04:b3:63:1c:f5:7e:b6:37:d1:
f7:65:64:8d:d4:a5:09:ad:32:1a:f1:e3:49:4b:a4:
e7:0a:ab:78:3a:cc:08:a9:c9:b4:02:bb:e4:10:bf:
8b:8a:93:bb:f9:41:0c:bb:89:49:52:60:34:a8:40:
d9:89:9a:e3:0b:30:c8:eb:ff:67:33:6f:67:0c:c0:
65:af:64:39:7a:47:5c:3b:b1:9f:4f:05:12:86:31:
63:3b:f6:a9:76:c2:53:94:db:af:ca:28:d3:2a:e4:
50:6e:78:5f:c9:01:5e:60:1e:8d:d9:c8:9a:34:6e:
95:2a:4e:5e:6d:36:6e:3c:2c:c6:c8:e8:6b:a1:5a:
57:e8:0b:f0:06:5c:5c:26:fa:ab:44:2a:1f:b2:b4:
46:73:b2:29:8b:e3:77:87:e9:90:90:af:8e:a8:24:
1b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E3:08:AC:1B:31:54:39:9C:43:2B:A8:3C:A8:6E:02:7F:4B:DE:8F
X509v3 Authority Key Identifier:
keyid:A9:6A:53:61:0D:8E:F6:64:A1:27:5B:71:AA:EA:BB:28:51:04:C2:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qWpTYQ2O9mShJ1txquq7KFEEwk8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5a017c-a3dc-44cf-b80e-a211175c05e0/1/qWpTYQ2O9mShJ1txquq7KFEEwk8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:aa:cb:29:9c:17:2a:dd:59:c9:ad:e7:d9:b9:3a:85:70:10:
20:17:3a:7c:ef:1d:df:c6:72:c1:0e:db:8c:9a:b4:e9:bc:bb:
4f:00:f2:04:ea:84:8b:b6:3a:f3:4b:49:53:8c:0c:25:4a:e1:
b3:92:59:c6:bc:a2:1b:03:c7:5f:4f:88:3f:03:82:c3:43:54:
fb:4e:d1:d5:88:fe:db:91:81:9c:51:f2:11:fc:be:ec:b1:e6:
98:30:fd:22:3f:a0:93:74:ed:dd:77:b1:db:c1:f3:a2:29:dc:
2f:9d:59:47:3e:3d:31:57:b6:7f:a7:04:f1:f2:22:10:9a:8c:
4e:36:b0:2a:6d:c5:92:29:4b:e5:6a:75:df:a9:f3:a1:17:2a:
5e:d0:df:2c:31:71:06:39:f1:18:4e:5d:63:e7:10:4b:35:59:
20:ca:0f:13:de:a8:aa:8b:7d:cf:82:fb:66:57:1f:c6:38:e8:
63:e4:6b:39:61:d3:ee:e6:a7:9f:ec:05:ac:62:f2:83:5e:42:
d7:6a:65:28:ee:30:c2:52:f3:f3:05:93:af:55:73:db:48:3e:
3d:52:fc:17:25:e7:54:42:a7:e6:9c:aa:2a:8b:f1:b9:5c:17:
59:4e:ca:ed:cb:02:22:28:54:f1:1c:7e:6e:d4:2a:fe:c3:66:
6e:96:4f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:54:23 2026 by rpki-client