Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
File: qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft (raw, json)
Hash identifier: WaEUT/EtnJQzafDZFy/AT/cvHc1PsHwqPok5V2c4ZrU=
Subject key identifier: CE:53:25:34:2D:FF:97:43:A6:1A:DA:45:0D:92:E7:E7:64:46:A8:5B
Authority key identifier: A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
Certificate issuer: /CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Certificate serial: 019D284E6F9DE0AF721D29643C81EE035F35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
Manifest number: 1374
Signing time: Thu 26 Mar 2026 04:02:02 +0000
Manifest this update: Thu 26 Mar 2026 04:02:02 +0000
Manifest next update: Fri 27 Mar 2026 04:02:02 +0000
Files and hashes: 1: qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl (hash: yyIYtAK4FAViRnq2D5Q8cc07fs/mUVthtqxaG3V87tE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:6f:9d:e0:af:72:1d:29:64:3c:81:ee:03:5f:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Validity
Not Before: Mar 26 04:02:02 2026 GMT
Not After : Mar 27 04:02:02 2026 GMT
Subject: CN=ce5325342dff9743a61ada450d92e7e76446a85b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:50:1f:ce:6d:08:f4:dd:91:81:23:11:8f:47:
34:4f:3a:3c:f6:5a:1d:f8:df:49:68:c0:0a:79:83:
bf:01:1e:e5:7a:67:d0:49:98:6e:89:80:37:53:d0:
7d:6e:43:37:4f:6f:11:95:a3:37:79:ed:f6:d5:ea:
6c:e7:ed:22:c1:ca:7b:93:e3:74:5d:51:aa:b0:e0:
d4:33:e7:7c:3a:62:92:73:84:9b:b0:ce:1a:d7:f7:
8b:68:f6:f1:9d:27:06:73:cb:55:00:4e:f5:94:0f:
08:d6:21:07:aa:f7:87:1d:7e:d9:aa:9d:b7:4d:9e:
76:7f:34:28:fc:e3:58:29:ed:27:47:94:20:fe:08:
17:95:9b:23:90:d6:c7:d7:c2:45:61:ad:6d:a8:c3:
78:d0:ae:b1:09:0b:34:85:c1:ec:d4:0f:b5:2a:2c:
82:cc:a8:00:0e:49:a6:87:1a:b1:42:2a:a8:fc:ea:
2d:cd:ca:9a:3e:96:35:24:7e:b1:58:46:8f:ec:44:
b1:78:15:b5:e8:fb:81:75:18:d1:a3:82:03:16:d0:
d2:3b:68:d8:7d:4b:6a:0b:79:14:04:7f:59:e3:43:
18:ef:22:dd:3f:61:aa:15:d5:66:55:ec:91:ef:bd:
da:4a:8c:8d:e3:ab:d1:6f:d3:27:72:7c:33:56:6c:
10:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:53:25:34:2D:FF:97:43:A6:1A:DA:45:0D:92:E7:E7:64:46:A8:5B
X509v3 Authority Key Identifier:
keyid:A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:27:ab:fb:23:64:1c:69:1b:f4:0d:e9:b6:e7:a0:1f:44:4d:
d0:97:a0:36:3b:d0:34:cb:72:19:fe:38:16:2e:ca:7a:ab:82:
f4:e9:23:ce:e3:d1:d6:54:e7:60:76:5c:81:ba:ee:5c:ca:14:
f1:d7:0e:e4:23:c7:55:4b:bb:eb:46:3e:ce:39:35:6b:a6:07:
9b:a0:8b:e1:9e:ff:70:5d:7d:5b:1e:28:eb:fe:9f:8c:21:23:
d0:ab:61:5e:dd:ab:4a:34:41:99:56:2d:17:d3:2c:07:90:10:
c1:cc:3d:7d:b1:f7:75:f6:d2:95:8f:1a:65:5d:c6:22:53:af:
85:73:2c:47:77:94:1c:50:f2:5f:e2:1d:c2:f4:42:4d:63:5e:
93:c8:11:d3:9c:74:41:20:a2:5c:44:91:32:b0:cd:a1:1f:c5:
df:85:65:0d:ae:68:1b:7f:d7:1e:39:37:bc:b9:1c:69:ee:69:
e9:38:b8:16:0f:fd:ae:0c:30:3b:27:a7:b0:e7:8b:62:92:76:
24:b2:34:4a:ff:b5:83:71:e5:a6:51:bc:4b:58:7f:7f:53:aa:
fb:83:ae:e2:73:d1:79:27:aa:30:e4:f7:44:3e:4c:16:f0:55:
2d:90:11:dc:59:59:65:02:eb:0d:fd:58:42:6b:60:18:15:94:
9f:21:2e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:08:29 2026 by rpki-client