Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.mft
File: tQ7NqLKu_q1ZT02vPKUCGw8x5s4.mft (raw, json)
Hash identifier: AFUNIAh5yDJp6/1FkilTD5aJfl4OaoLrDP/KBMjHZGk=
Subject key identifier: 1D:3E:24:6D:C4:B8:89:E5:0A:A2:64:D4:AD:D5:2E:C2:D5:6E:AF:D4
Authority key identifier: B5:0E:CD:A8:B2:AE:FE:AD:59:4F:4D:AF:3C:A5:02:1B:0F:31:E6:CE
Certificate issuer: /CN=b50ecda8b2aefead594f4daf3ca5021b0f31e6ce
Certificate serial: 019D382E6B67F4E58D09CEC50BD1424E4802
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.mft
Manifest number: 8D
Signing time: Sun 29 Mar 2026 06:00:59 +0000
Manifest this update: Sun 29 Mar 2026 06:00:59 +0000
Manifest next update: Mon 30 Mar 2026 06:00:59 +0000
Files and hashes: 1: tQ7NqLKu_q1ZT02vPKUCGw8x5s4.crl (hash: 3mmMgRXk9z3MfGHf4qkPl2Ca6Rj3cPds3pQ6exKH+yM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:6b:67:f4:e5:8d:09:ce:c5:0b:d1:42:4e:48:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50ecda8b2aefead594f4daf3ca5021b0f31e6ce
Validity
Not Before: Mar 29 06:00:59 2026 GMT
Not After : Mar 30 06:00:59 2026 GMT
Subject: CN=1d3e246dc4b889e50aa264d4add52ec2d56eafd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:c8:0c:80:09:54:0f:f6:cd:23:a2:6d:27:
b5:0d:35:af:f4:72:85:be:88:7b:a9:a8:2e:3c:45:
92:98:5a:68:eb:d7:45:d9:19:3d:f5:e9:87:c6:0d:
5f:21:41:35:7d:35:79:25:0b:92:a4:65:e9:1f:c9:
93:4b:c5:db:6b:67:e9:00:a3:77:51:29:2e:c7:17:
f0:dc:3c:03:5d:b3:2c:c0:72:a2:b4:d8:a9:b9:7d:
9b:d1:96:cc:31:2e:dc:9d:1b:ee:14:df:e7:06:4c:
17:92:b9:ff:b8:8b:b0:59:4f:ca:ae:09:18:49:6f:
67:b5:50:a9:ea:e9:74:ca:40:84:60:87:d9:47:b9:
79:cf:85:75:cb:e9:39:d5:81:48:61:5f:57:37:c7:
1f:73:e4:21:23:0c:31:b7:c6:65:3a:6c:15:f5:c5:
8b:fd:1e:f2:d8:0d:7f:66:de:09:ec:e4:a8:57:38:
60:ff:be:59:fc:47:2b:bb:32:dc:49:93:d8:15:46:
64:7b:ca:a4:6f:e1:0a:65:43:48:c6:f3:89:0d:37:
a3:cf:f4:8b:d4:dc:27:94:6f:34:c0:e1:98:20:d2:
29:a5:30:14:35:2f:5c:ee:85:4d:7d:bd:d5:0f:7f:
18:bb:ee:7f:fa:86:07:76:21:1f:4d:4c:c6:d7:cb:
01:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:3E:24:6D:C4:B8:89:E5:0A:A2:64:D4:AD:D5:2E:C2:D5:6E:AF:D4
X509v3 Authority Key Identifier:
keyid:B5:0E:CD:A8:B2:AE:FE:AD:59:4F:4D:AF:3C:A5:02:1B:0F:31:E6:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/097de6-e396-4e0e-95a1-51133d906ae0/1/tQ7NqLKu_q1ZT02vPKUCGw8x5s4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a0:6b:ad:e3:de:8d:03:b9:12:a1:74:57:ec:95:29:5b:95:
f8:f7:fe:32:7a:2b:9d:56:a8:dd:c2:14:4d:a0:9e:b0:98:4c:
69:d2:cf:45:36:2d:96:a6:9c:8a:57:bd:f9:e9:e2:18:fd:c7:
92:85:c2:f5:b7:91:df:2f:0f:6c:0f:cf:55:7f:f7:52:e8:b4:
98:51:09:bc:5b:9e:51:b1:c2:0e:c4:cd:fd:ca:45:3c:46:e5:
0f:35:41:1f:5a:d5:38:46:50:62:1f:b7:31:77:89:47:06:b3:
ff:50:cc:9c:8b:8b:28:ee:0a:e7:b4:9e:6d:cd:00:95:07:cc:
3e:43:ab:39:23:5f:a4:42:6a:f2:31:73:15:fa:4b:32:f7:7d:
2b:4e:22:2b:6e:a3:88:30:e2:99:71:33:25:c7:5f:cc:46:28:
99:c8:52:7d:e9:3b:14:f3:e9:56:12:ed:2c:b8:62:c8:7a:96:
93:7c:b1:de:ab:4e:10:67:9a:2e:58:e6:25:d7:f2:57:59:1e:
6c:a7:f5:d3:13:02:8e:b2:65:07:52:55:5b:cf:21:ca:bb:25:
b0:ba:4f:d1:fb:ab:7b:b6:75:80:11:d6:7a:80:d3:32:aa:02:
82:c3:ee:3a:a1:5c:aa:5b:d4:9e:09:ed:f8:a2:9d:3e:a8:3b:
c1:97:4b:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:36 2026 by rpki-client