Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
File: qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft (raw, json)
Hash identifier: a3/6zY1ga5CpSXc6xkGv9j+vvSzJRB5TCP7oOZB3glY=
Subject key identifier: CD:AC:B3:B7:15:B8:D1:B5:7D:84:10:A9:BC:02:8A:00:4F:F7:D9:7E
Authority key identifier: A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
Certificate issuer: /CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Certificate serial: 019D386670FB81751108DC139935A0C76A1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
Manifest number: 181F
Signing time: Sun 29 Mar 2026 07:02:10 +0000
Manifest this update: Sun 29 Mar 2026 07:02:10 +0000
Manifest next update: Mon 30 Mar 2026 07:02:10 +0000
Files and hashes: 1: qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl (hash: CB5UzCV0/tVEaJ9+9J2Zoh4v6r045d2BrRubEOfm+W8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:70:fb:81:75:11:08:dc:13:99:35:a0:c7:6a:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85d4d0fcc5861a34716f10a0a4497aa4281ab3a
Validity
Not Before: Mar 29 07:02:10 2026 GMT
Not After : Mar 30 07:02:10 2026 GMT
Subject: CN=cdacb3b715b8d1b57d8410a9bc028a004ff7d97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:c8:40:3f:21:5c:63:4d:d3:0b:b6:58:e8:
18:4d:cf:eb:08:8b:af:7c:66:cd:c0:b5:e8:ba:e4:
6c:f3:85:ad:0b:8f:cd:cf:b1:e9:d8:80:eb:5e:74:
e9:0c:fd:8f:8c:11:55:d7:ea:55:e3:a4:b4:e4:6e:
bf:9b:e9:62:59:e3:92:ad:9c:df:c5:ed:8b:b9:59:
0a:14:18:88:4b:2c:00:3f:66:96:ee:fe:f6:18:fb:
76:29:64:2d:3c:dc:5a:2b:03:62:ed:12:82:ca:a8:
47:9e:0b:9e:0c:34:f5:ab:fd:5b:0a:b7:3c:03:c1:
b4:1f:b3:60:a8:a5:9b:51:cc:4e:63:ad:8b:92:14:
f9:e7:a2:d8:19:0d:b2:31:8c:a9:7c:95:a8:40:45:
70:a3:7f:c7:3e:6e:df:a7:61:d3:ef:0f:d4:75:34:
10:f2:c7:95:34:4d:46:38:55:df:e6:99:94:dc:8c:
ce:7f:7b:29:61:53:8b:be:8d:12:37:87:30:ee:c1:
2f:25:92:b4:1b:ed:b5:c8:bb:29:b6:5b:10:aa:6b:
d0:b5:19:74:67:d4:07:4f:54:6a:31:f9:fb:55:f8:
4a:b0:14:8c:8a:42:72:61:5a:14:47:51:fe:69:42:
e3:24:ff:c2:9c:16:de:19:c9:dd:39:3a:a1:5a:fc:
c7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AC:B3:B7:15:B8:D1:B5:7D:84:10:A9:BC:02:8A:00:4F:F7:D9:7E
X509v3 Authority Key Identifier:
keyid:A8:5D:4D:0F:CC:58:61:A3:47:16:F1:0A:0A:44:97:AA:42:81:AB:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qF1ND8xYYaNHFvEKCkSXqkKBqzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/ef6283-0f3c-4738-b8ac-0885785bd12f/1/qF1ND8xYYaNHFvEKCkSXqkKBqzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:a2:ad:7a:e1:3e:8c:cc:5c:ab:8c:28:34:68:13:0e:70:67:
3d:4b:87:dc:23:d6:29:0c:86:ff:53:e6:68:f2:87:07:a5:63:
87:8f:c6:7e:05:9b:91:c3:23:f0:ce:33:b6:76:7b:df:18:78:
e3:7e:56:1d:cc:3f:e3:86:d0:50:54:0a:7c:98:2c:94:bd:3a:
73:63:3f:14:3a:84:ac:45:0c:9f:0d:bc:81:01:5c:dc:b1:0d:
8e:3a:be:21:8c:c7:82:4a:9b:f9:b7:27:04:e0:e3:6f:a1:04:
9c:42:a9:8d:84:9d:1f:9d:86:b4:70:c3:35:9c:00:07:0e:e3:
70:58:f0:92:51:eb:b8:ff:ca:00:9b:aa:61:7a:89:e8:49:f7:
5e:97:3e:a8:fe:40:b3:25:0b:c6:5f:eb:1b:6e:2d:d8:e5:b8:
a3:a7:0d:58:80:56:fe:66:bb:6b:9c:eb:be:e7:04:19:dc:af:
79:5d:17:17:22:4f:73:37:61:5a:8a:f7:3f:de:95:47:83:57:
1d:57:7b:a6:7b:50:e8:05:c4:33:79:76:12:23:8e:09:0c:ad:
a9:ca:37:8d:97:36:5f:a6:34:53:bc:1e:2b:28:27:0c:c6:42:
96:34:14:36:8f:f8:4a:72:b7:a6:bc:38:b7:ef:b8:6c:cb:ed:
54:ee:86:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:25 2026 by rpki-client