Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
File: fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft (raw, json)
Hash identifier: JBQaXCa5UJEfEPreYE3yJQl4WAKUzRNZyUWiL3NijA4=
Subject key identifier: B8:9B:E8:CB:93:D8:D9:A2:6A:72:29:C8:A0:27:F9:45:B7:58:81:B2
Authority key identifier: 7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
Certificate issuer: /CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Certificate serial: 019D37531C1D6503FA8EBCC68F9094207B5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
Manifest number: 181E
Signing time: Sun 29 Mar 2026 02:01:26 +0000
Manifest this update: Sun 29 Mar 2026 02:01:26 +0000
Manifest next update: Mon 30 Mar 2026 02:01:26 +0000
Files and hashes: 1: fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl (hash: e0mJQxIEtGe3/dVV8tWRvbyavdDxjEk6sLCiEUdd+Q0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:53:1c:1d:65:03:fa:8e:bc:c6:8f:90:94:20:7b:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d0bcabec4379f2d3b94187410d2e6e031a74171
Validity
Not Before: Mar 29 02:01:26 2026 GMT
Not After : Mar 30 02:01:26 2026 GMT
Subject: CN=b89be8cb93d8d9a26a7229c8a027f945b75881b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:40:c4:17:e5:e4:62:07:b6:54:bb:5e:9f:3f:
34:1e:f3:bc:fb:5e:cb:c5:fb:ab:8f:68:fc:77:ab:
93:ff:12:96:9c:d0:f3:6c:14:03:d0:2c:17:df:dd:
80:d1:d9:80:0e:5d:54:08:a2:ba:5d:bb:b8:fb:53:
9c:82:4f:04:e4:f4:80:4b:57:56:1a:9f:a0:1f:de:
fb:a9:a7:22:91:93:2e:30:60:ea:55:74:e7:c2:60:
40:5c:bc:c1:c5:28:cf:5c:cf:99:bf:5c:86:f4:63:
cf:28:26:a6:16:be:3b:da:7b:5e:38:f5:26:53:e2:
78:3e:0b:48:e4:80:1d:9e:34:5b:82:d2:f6:16:ad:
35:06:74:d4:7c:68:a0:1e:e0:d2:bd:dc:4b:9f:88:
59:c0:01:5d:84:90:f7:e1:54:3c:f7:61:3a:68:a8:
8e:32:96:10:d6:81:91:38:32:4e:d8:cc:a0:ce:eb:
20:ed:82:c3:62:07:75:2c:48:ad:9b:0a:d3:0f:e4:
f0:f6:02:cc:82:38:b9:e4:99:76:a3:2d:21:06:81:
d7:e3:22:f5:85:ef:0c:4e:0f:e8:e8:9e:cb:2e:3a:
5f:0e:92:da:d7:ca:80:d5:3c:11:dc:a4:16:e0:0d:
9b:1a:bb:f8:2f:f8:0f:cd:f8:9d:74:46:ad:b2:96:
54:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:9B:E8:CB:93:D8:D9:A2:6A:72:29:C8:A0:27:F9:45:B7:58:81:B2
X509v3 Authority Key Identifier:
keyid:7D:0B:CA:BE:C4:37:9F:2D:3B:94:18:74:10:D2:E6:E0:31:A7:41:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQvKvsQ3ny07lBh0ENLm4DGnQXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/741dc3-226d-47fb-8ff2-9715cd698e32/1/fQvKvsQ3ny07lBh0ENLm4DGnQXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:8d:8f:b0:04:7a:0b:79:36:54:e9:4b:14:55:73:6b:d7:4d:
e5:a3:13:d2:12:1f:f1:be:7f:52:31:7d:e6:dc:a9:9e:a2:a2:
c1:84:64:90:90:ed:c7:d6:33:6d:95:a4:09:a4:59:09:4a:a3:
e2:5e:f1:0a:8a:e2:4a:41:db:88:cb:cd:ef:a7:1e:b7:83:d0:
2a:4c:92:72:54:58:31:58:ad:0e:2c:61:7e:e8:2c:16:62:46:
9d:88:5f:75:8e:c5:d3:a0:3f:f0:06:17:e5:67:93:a6:00:35:
d7:df:f0:4c:b3:3f:b0:85:62:28:59:4b:3a:5b:2c:9f:fa:07:
89:5d:e4:44:dd:27:7b:a4:30:75:44:59:b7:f3:2f:a6:cb:93:
62:a9:ed:6c:dc:20:21:a2:05:41:51:f1:33:0b:b2:e1:5d:3f:
ce:04:18:df:39:d7:af:3f:58:f9:35:d1:e9:eb:de:7b:94:1c:
19:67:cd:90:31:57:91:b0:43:1c:e3:46:6a:73:30:f2:5d:ed:
b4:75:27:a1:d9:7c:07:61:dd:9b:52:3f:9f:01:02:39:de:8a:
03:68:77:67:50:82:1c:06:bf:2a:bd:24:48:7f:7e:27:74:49:
00:a8:f9:cc:a6:30:66:51:ca:a3:38:05:d8:52:4e:b4:6a:e0:
e9:5c:64:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:08 2026 by rpki-client