Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
File: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft (raw, json)
Hash identifier: FbHArwyFZcuN273OVPEMfZbzOjxFNJP9kkK28Q+95Sk=
Subject key identifier: 4F:0D:AB:25:F3:F0:FB:2E:B8:DD:02:35:39:0A:53:63:35:00:A0:21
Authority key identifier: A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
Certificate issuer: /CN=a86ee450deb3a708aee85b78238fa370f90457f9
Certificate serial: 019D2AE112AA131B371828C4D5FCBAE221A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
Manifest number: 1884
Signing time: Thu 26 Mar 2026 16:01:26 +0000
Manifest this update: Thu 26 Mar 2026 16:01:26 +0000
Manifest next update: Fri 27 Mar 2026 16:01:26 +0000
Files and hashes: 1: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl (hash: J143khgHiIJRpr9g80ErvNHlqu1MZj5v7OZcvLUKJdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:e1:12:aa:13:1b:37:18:28:c4:d5:fc:ba:e2:21:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86ee450deb3a708aee85b78238fa370f90457f9
Validity
Not Before: Mar 26 16:01:26 2026 GMT
Not After : Mar 27 16:01:26 2026 GMT
Subject: CN=4f0dab25f3f0fb2eb8dd0235390a53633500a021
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:82:93:d8:b0:90:4a:18:5b:57:7f:b8:29:f4:
88:8d:de:ff:44:b6:d1:12:1a:2e:1f:5b:3a:60:d3:
63:c6:f8:a2:1c:39:98:fe:0c:4e:01:3f:dc:1e:f7:
34:53:c2:30:76:08:6c:67:ea:05:77:9f:0d:08:3b:
e2:d6:07:b3:be:44:10:4f:44:1d:b5:fb:12:e3:40:
e0:a5:d5:cd:c5:3b:fc:ad:7a:04:9c:bb:ee:b1:c6:
a7:39:8f:08:ea:7e:64:8e:44:34:86:9c:6a:d7:40:
20:69:2d:1e:91:80:fe:1f:28:d8:a0:c2:c5:33:cf:
ed:db:20:08:27:aa:b9:24:65:f3:b1:bb:0a:99:d4:
3d:5b:bb:84:e8:b5:0e:2a:2c:07:21:c3:89:ef:c9:
2d:77:00:b7:b7:b0:f5:45:62:86:52:0e:fa:41:b4:
38:1e:43:af:82:9c:3f:c1:82:98:37:35:df:34:86:
7f:cc:2b:b3:1f:02:6d:72:19:a8:4d:76:dd:17:41:
a2:f1:17:57:85:ca:fc:4f:8b:e7:e0:92:97:83:95:
f3:ee:0f:f4:72:60:e4:19:54:cf:1d:3e:72:f3:bc:
c9:1d:a9:b0:cb:d1:46:9d:37:ec:39:0d:c1:af:8d:
28:85:6d:4d:ea:6f:ab:d0:1a:61:45:49:5e:33:d9:
0e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0D:AB:25:F3:F0:FB:2E:B8:DD:02:35:39:0A:53:63:35:00:A0:21
X509v3 Authority Key Identifier:
keyid:A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:c9:a1:aa:b6:a3:78:8a:e0:f9:f0:c7:96:2f:4b:2f:ec:de:
af:01:4b:97:28:a0:da:05:00:00:d1:3c:6b:64:91:69:b6:92:
86:c5:32:d4:57:69:a2:e9:1c:ae:ac:6b:f4:6e:a9:42:49:40:
39:26:c6:da:a4:30:76:72:86:ce:70:a1:78:0e:47:2c:33:2a:
87:4c:53:9f:47:0b:12:89:e0:d8:3b:6c:67:bc:83:4f:60:6d:
12:1c:02:80:ea:24:33:1e:d9:35:83:7c:93:ae:8f:3d:dd:19:
8f:84:ea:b3:cf:55:c4:9d:a7:34:70:1c:88:b1:72:0c:42:dd:
f8:e8:8f:60:20:9a:e7:b2:20:30:58:56:07:78:8e:cf:a0:00:
8f:28:83:1b:8d:80:56:23:71:91:9a:e0:58:2c:7d:45:10:d8:
7a:28:b1:21:21:7f:3c:66:84:61:bd:67:56:b3:50:a5:3e:26:
78:7d:7f:92:30:2c:fc:51:93:98:99:11:2d:ed:d1:8a:53:83:
00:d9:6b:0a:dc:64:27:56:38:c9:d2:42:2a:95:0b:40:d9:81:
8b:50:2f:fe:2e:f0:41:53:fd:3e:d5:7a:37:a8:bc:73:4d:b0:
2a:9c:47:be:57:fd:b4:83:6a:0a:ef:89:e0:fb:04:f3:7e:31:
88:a3:7d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:23:34 2026 by rpki-client