Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
File: qYI63d9sNfBbfByuB5BL_58vass.mft (raw, json)
Hash identifier: y7OObFXxIIDJZxvSmahBTPcZTNl+4HwcpXj9Ftpa9Js=
Subject key identifier: 6F:3E:4C:3A:59:D5:53:C6:BD:A0:A1:DC:43:9D:73:4D:F1:31:03:2B
Authority key identifier: A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
Certificate issuer: /CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Certificate serial: 019D38D3286918C3BFC77D9D2B19EFEADD9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
Manifest number: 0D05
Signing time: Sun 29 Mar 2026 09:00:55 +0000
Manifest this update: Sun 29 Mar 2026 09:00:55 +0000
Manifest next update: Mon 30 Mar 2026 09:00:55 +0000
Files and hashes: 1: qYI63d9sNfBbfByuB5BL_58vass.crl (hash: OT1qetWwk6k2eWxJnujv+o3jhRk9D73C7yua8unUMjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:28:69:18:c3:bf:c7:7d:9d:2b:19:ef:ea:dd:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9823adddf6c35f05b7c1cae07904bff9f2f6acb
Validity
Not Before: Mar 29 09:00:55 2026 GMT
Not After : Mar 30 09:00:55 2026 GMT
Subject: CN=6f3e4c3a59d553c6bda0a1dc439d734df131032b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a5:ea:19:76:73:a2:80:d7:e9:e2:0e:af:15:
9b:1d:97:6a:e6:c5:c1:d7:e4:9b:00:5e:74:9a:03:
86:0b:2c:7f:1a:7d:cf:16:75:eb:71:9f:c5:8e:be:
df:5f:2d:3c:c5:0d:36:df:60:82:e9:99:0e:6f:9d:
d4:70:48:e7:08:15:8f:0f:ff:73:d0:ab:3c:76:a4:
5c:ba:9a:2a:00:58:76:1f:53:da:fc:26:e5:f3:70:
78:ef:cd:2b:6f:ac:73:2c:a2:3b:d7:da:d1:6d:10:
66:a4:2c:34:69:89:3e:ae:54:9c:73:0c:7b:be:59:
57:db:a0:75:9f:88:5c:6d:e2:6a:49:79:7b:ad:37:
60:34:52:19:1f:59:8f:5f:f1:14:75:30:58:a2:dc:
a1:3e:42:78:f6:8d:e6:06:1a:49:9b:d8:b7:56:e6:
61:a4:2b:92:37:c0:76:2f:49:65:0d:80:06:5a:ea:
af:33:82:8a:42:56:b2:ad:10:7d:e6:16:6a:0c:67:
7c:b0:d5:99:bf:97:5f:56:e1:30:4d:79:f1:ee:b8:
02:d7:52:bc:c0:04:26:a6:da:c2:2a:46:5b:cc:12:
d8:4c:6a:b0:58:96:7e:22:93:d6:90:d9:32:0c:64:
fa:81:09:57:5a:d5:7e:bf:45:77:6c:17:e4:e1:56:
31:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:3E:4C:3A:59:D5:53:C6:BD:A0:A1:DC:43:9D:73:4D:F1:31:03:2B
X509v3 Authority Key Identifier:
keyid:A9:82:3A:DD:DF:6C:35:F0:5B:7C:1C:AE:07:90:4B:FF:9F:2F:6A:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYI63d9sNfBbfByuB5BL_58vass.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/34fd08-ce76-4bc3-87c0-36d4d7f07c8a/1/qYI63d9sNfBbfByuB5BL_58vass.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:2a:c1:68:38:f1:e2:47:d1:02:10:67:d6:eb:1d:b9:27:5f:
e9:25:8a:b3:d4:4a:e2:8e:68:fb:94:d9:ef:9a:9d:c1:68:01:
d2:2e:18:f4:e5:7a:0c:13:92:27:a9:b0:a1:6f:a1:d8:2b:60:
72:c9:43:f0:24:b0:43:75:a4:52:6b:1f:42:c1:96:0d:77:a8:
7a:6f:b5:74:a4:31:4b:d8:e4:ac:98:c0:b2:84:a9:17:50:7c:
af:f0:27:50:ea:5a:5f:d2:b4:4b:17:20:b6:dd:c4:a6:f2:37:
41:55:7d:83:2a:10:1c:13:c4:0b:29:8f:f4:6b:d0:6e:16:b3:
b7:45:3b:18:bc:42:36:01:ce:80:86:86:80:91:ff:dd:13:72:
0b:18:cc:49:33:ff:ca:8d:d2:21:13:c5:ab:50:cb:ac:ca:29:
99:15:fc:6b:e0:df:fc:f1:60:44:88:74:37:00:21:24:4c:0c:
02:a3:e1:3e:2b:d1:f4:f2:17:89:a6:54:c6:cb:c2:33:c9:22:
86:8a:a6:d4:87:a5:a2:57:cd:b9:5a:49:68:d9:ad:ec:51:ce:
7d:07:86:ee:5e:3e:32:c2:41:d5:46:d7:15:b3:7f:32:07:76:
0b:ae:7e:ec:ce:6e:de:58:ba:e7:2f:34:83:05:55:ea:9a:45:
4a:da:3d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:18:38 2026 by rpki-client