Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/5285e1-2f01-4587-b67d-15702c964613/1/q_eat-fJp1Pv8S6RRIS6rF5CPhA.mft
File: q_eat-fJp1Pv8S6RRIS6rF5CPhA.mft (raw, json)
Hash identifier: 0fEC3k0ZVxiUpzQNCJCyxST4QJZzqg9jTClebU4C9Ns=
Subject key identifier: 87:29:6F:35:16:31:4A:28:76:F9:B4:E6:03:1C:C4:6B:A7:B8:2F:BA
Authority key identifier: AB:F7:9A:B7:E7:C9:A7:53:EF:F1:2E:91:44:84:BA:AC:5E:42:3E:10
Certificate issuer: /CN=abf79ab7e7c9a753eff12e914484baac5e423e10
Certificate serial: 019D389BAFD42B53A3051B9ECF973375428F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q_eat-fJp1Pv8S6RRIS6rF5CPhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/5285e1-2f01-4587-b67d-15702c964613/1/q_eat-fJp1Pv8S6RRIS6rF5CPhA.mft
Manifest number: 66
Signing time: Sun 29 Mar 2026 08:00:20 +0000
Manifest this update: Sun 29 Mar 2026 08:00:20 +0000
Manifest next update: Mon 30 Mar 2026 08:00:20 +0000
Files and hashes: 1: q_eat-fJp1Pv8S6RRIS6rF5CPhA.crl (hash: LH2IT5mZ58lf/Pb+30fcF+0gTUsYCtRD8Q9ZGvPkwt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/5285e1-2f01-4587-b67d-15702c964613/1/q_eat-fJp1Pv8S6RRIS6rF5CPhA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/5285e1-2f01-4587-b67d-15702c964613/1/q_eat-fJp1Pv8S6RRIS6rF5CPhA.mft
rsync://rpki.ripe.net/repository/DEFAULT/q_eat-fJp1Pv8S6RRIS6rF5CPhA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:af:d4:2b:53:a3:05:1b:9e:cf:97:33:75:42:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abf79ab7e7c9a753eff12e914484baac5e423e10
Validity
Not Before: Mar 29 08:00:20 2026 GMT
Not After : Mar 30 08:00:20 2026 GMT
Subject: CN=87296f3516314a2876f9b4e6031cc46ba7b82fba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:11:51:58:87:d5:c3:fc:97:7f:e9:5b:17:08:
4a:fb:3c:40:33:3d:9c:63:86:7c:ef:6d:2a:0a:40:
56:cc:1c:7c:06:fc:b4:3e:00:ff:b0:45:51:41:f3:
54:fd:47:6b:c9:d8:eb:15:8e:a2:2e:cc:ea:6e:75:
f7:2f:2b:08:22:35:5b:5d:2d:d5:7f:d9:62:68:1e:
b0:43:4e:f6:1e:95:c9:be:00:79:0a:44:cc:12:95:
9f:86:44:e0:98:e1:fe:45:c2:24:b4:ca:cc:28:1b:
5d:4c:a1:19:1c:95:7b:ca:5f:6f:cb:64:f2:12:c9:
5c:06:c0:05:5a:88:68:e9:f3:16:75:36:4f:b2:8f:
c5:40:67:2c:c3:73:19:a8:63:52:70:f0:81:ea:82:
b7:e5:b4:59:cd:ab:ab:5f:99:ba:a4:13:e6:76:7a:
6d:3b:ae:7e:18:53:db:18:b8:65:5b:d9:97:7e:a3:
d5:92:2b:87:98:30:9d:6a:81:66:97:21:8b:b8:15:
83:9b:c0:1f:07:e5:fd:21:51:7d:80:b1:4e:1e:9a:
28:79:29:45:34:cc:c6:be:50:6e:77:af:19:b0:6b:
cd:b1:66:a8:68:b4:78:f6:b4:e9:1d:87:18:5c:bb:
1f:ef:71:be:85:41:b5:3b:f4:48:35:bf:b9:95:a0:
9e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:29:6F:35:16:31:4A:28:76:F9:B4:E6:03:1C:C4:6B:A7:B8:2F:BA
X509v3 Authority Key Identifier:
keyid:AB:F7:9A:B7:E7:C9:A7:53:EF:F1:2E:91:44:84:BA:AC:5E:42:3E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q_eat-fJp1Pv8S6RRIS6rF5CPhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5285e1-2f01-4587-b67d-15702c964613/1/q_eat-fJp1Pv8S6RRIS6rF5CPhA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/5285e1-2f01-4587-b67d-15702c964613/1/q_eat-fJp1Pv8S6RRIS6rF5CPhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:aa:e0:14:20:5c:98:a2:78:f2:db:6d:83:22:9c:7d:e8:41:
38:e5:a1:c6:15:e6:f4:89:ce:ae:76:dd:03:8b:2b:f5:1d:e3:
b5:88:66:96:61:f7:1c:1f:05:65:ba:87:09:57:88:fb:7b:a9:
c0:39:d7:06:c2:e2:e5:ab:96:34:15:8a:a3:be:c5:47:6e:dc:
dd:3d:17:92:cd:84:00:b4:28:36:7a:12:c9:d4:b5:51:fb:7c:
f5:a2:b4:f7:87:c7:ed:f2:5b:f8:16:77:10:6b:cc:03:e8:64:
b4:0f:48:ba:4a:78:64:85:34:bb:fb:83:62:9d:cd:08:ff:86:
12:c8:d4:df:96:74:92:83:8a:03:a6:88:3b:bc:27:20:35:7f:
68:01:94:14:49:58:74:82:af:25:51:af:9d:af:a5:e0:bf:c5:
93:e2:18:92:18:a6:fd:b4:55:3a:8b:0a:fd:cf:ec:41:85:3c:
03:7e:e9:25:34:af:81:4e:a5:f5:c7:c1:63:4e:b4:2b:2b:f9:
df:32:5c:b9:02:17:7f:ce:92:d9:46:74:0b:db:63:ce:67:36:
7c:65:39:79:a2:1f:f6:51:34:1b:96:f7:98:51:51:78:8a:8a:
c4:01:c2:e5:96:68:4b:58:c8:e2:17:c6:88:fa:d6:23:a9:8d:
85:3d:c5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:07:09 2026 by rpki-client