Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
File: qX7j7USz26i4PY6heZrA5YPWQUw.mft (raw, json)
Hash identifier: NVSZcT50U+hacdjJG2ReJBkSXa9p2C73hBrUA/dErq4=
Subject key identifier: F4:9A:23:4F:86:C1:9C:DE:15:2A:F4:FC:B8:0C:B4:A8:C8:5F:3A:1C
Authority key identifier: A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
Certificate issuer: /CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Certificate serial: 019D25843BA98A64FBC2BA1D2A472AB746EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
Manifest number: 07D4
Signing time: Wed 25 Mar 2026 15:01:56 +0000
Manifest this update: Wed 25 Mar 2026 15:01:56 +0000
Manifest next update: Thu 26 Mar 2026 15:01:56 +0000
Files and hashes: 1: qX7j7USz26i4PY6heZrA5YPWQUw.crl (hash: BFJ7xWp9VAraTRq3vG+CNuFyl2z7o/Gw+oE6s01SJJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:3b:a9:8a:64:fb:c2:ba:1d:2a:47:2a:b7:46:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a97ee3ed44b3dba8b83d8ea1799ac0e583d6414c
Validity
Not Before: Mar 25 15:01:56 2026 GMT
Not After : Mar 26 15:01:56 2026 GMT
Subject: CN=f49a234f86c19cde152af4fcb80cb4a8c85f3a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ff:d5:4a:c5:ea:01:13:91:30:22:49:e7:46:
6e:e6:c9:fe:47:e3:b4:48:3b:d9:61:bb:94:b6:03:
39:52:c3:bc:d4:d1:4c:ff:e4:4d:c7:57:44:54:08:
f3:0f:a9:30:26:54:22:cf:c7:2e:79:88:58:b2:02:
e6:d5:5e:c3:2c:1b:5b:e1:8a:6f:13:d7:d9:98:56:
d7:0b:d0:ba:c8:d3:a5:8e:51:8c:72:1b:06:6b:cf:
2b:9a:ca:ca:82:bd:c8:16:f7:68:90:25:6f:50:61:
59:4b:85:40:5f:68:b0:10:6c:b2:2d:13:6e:75:a0:
97:d5:ae:4e:62:c8:97:38:55:85:6c:ac:9c:fe:11:
f0:bf:99:7d:64:09:85:56:1e:7e:b0:82:91:75:04:
a5:f5:ce:d7:65:6f:4c:1d:cb:05:c7:30:ee:00:79:
5a:4e:d6:71:4a:61:5f:7a:25:1c:d3:1e:c7:a7:c3:
a4:67:f8:ae:fb:21:b9:db:85:55:d6:8a:c5:df:87:
11:50:96:05:4e:4c:c4:16:7b:76:f9:f1:c2:f9:9b:
f4:4e:fd:e3:59:c9:db:24:26:c2:a4:85:68:5e:fe:
69:21:3c:d9:8f:23:dc:51:4a:d0:98:ca:18:6f:de:
3b:36:87:92:f7:50:03:31:3a:56:52:5d:8a:07:0b:
88:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:9A:23:4F:86:C1:9C:DE:15:2A:F4:FC:B8:0C:B4:A8:C8:5F:3A:1C
X509v3 Authority Key Identifier:
keyid:A9:7E:E3:ED:44:B3:DB:A8:B8:3D:8E:A1:79:9A:C0:E5:83:D6:41:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qX7j7USz26i4PY6heZrA5YPWQUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6b4c6c-49ee-4c5f-87f3-70e35b0f015b/1/qX7j7USz26i4PY6heZrA5YPWQUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:c4:17:24:5d:b6:10:23:e4:a9:a3:ea:bc:c9:87:31:a5:91:
42:51:7f:77:03:b9:54:b0:02:fc:13:97:dd:6c:62:82:9a:7b:
71:8d:e1:1c:70:f1:66:0b:a8:c9:50:b2:4b:07:26:7c:e7:b0:
dc:48:c6:ac:db:4a:99:a3:1e:69:a2:d8:7d:35:35:9c:45:a1:
f1:52:71:bf:ef:03:57:54:8e:e6:27:6f:8a:9a:2d:87:3d:fb:
b6:70:b3:22:a0:5d:34:2a:56:f0:a6:4e:3e:d3:16:cd:de:43:
9c:6f:6c:74:5a:83:31:59:b3:41:43:c1:52:81:31:c7:f9:b6:
d7:60:bd:ab:b2:49:fd:21:41:e5:f1:45:09:c5:40:8d:bd:09:
a4:cf:96:f4:07:48:4a:82:82:56:17:1b:2c:5b:15:11:d3:2e:
08:91:ec:1c:1b:29:2f:45:57:43:dc:e2:a1:cc:eb:80:fe:73:
5c:3d:15:db:21:27:31:33:dc:1c:4c:e9:7b:0d:1a:df:31:38:
6f:e7:a0:66:ee:96:e9:15:f3:cc:8f:16:dc:58:58:eb:4e:77:
f7:b0:50:06:70:ce:6d:2c:35:65:05:ae:56:00:aa:2e:9c:6a:
ae:f3:61:43:b1:6c:35:af:cb:bb:09:08:a2:76:75:81:cf:98:
b6:ac:52:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:27:56 2026 by rpki-client