Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
File: q2yACAY3-ssW9RnF2X7Cez2FCX0.mft (raw, json)
Hash identifier: VFtl5vOyCqL2IzZRHxNQHDh6RsX1wEVGFX0/ycHoVUg=
Subject key identifier: 64:22:B7:9F:7D:5A:EF:B5:E1:27:E5:09:23:A1:27:0D:A7:53:0D:8A
Authority key identifier: AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D
Certificate issuer: /CN=ab6c80080637facb16f519c5d97ec27b3d85097d
Certificate serial: 019D378927FABE8887E774220F67B6DC30DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
Manifest number: 0AF3
Signing time: Sun 29 Mar 2026 03:00:28 +0000
Manifest this update: Sun 29 Mar 2026 03:00:28 +0000
Manifest next update: Mon 30 Mar 2026 03:00:28 +0000
Files and hashes: 1: q2yACAY3-ssW9RnF2X7Cez2FCX0.crl (hash: QEpPuVN/VmIGbc0GscxeEzT6QCKaCbwui1cBSjHF0fM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:27:fa:be:88:87:e7:74:22:0f:67:b6:dc:30:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab6c80080637facb16f519c5d97ec27b3d85097d
Validity
Not Before: Mar 29 03:00:28 2026 GMT
Not After : Mar 30 03:00:28 2026 GMT
Subject: CN=6422b79f7d5aefb5e127e50923a1270da7530d8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:50:43:1b:4e:fb:ee:8f:2b:13:ba:a3:75:
f0:75:3b:24:48:d5:7f:4b:b7:3c:4c:84:41:35:20:
8a:5d:20:b9:c9:b8:3a:82:67:f9:a2:75:a8:4f:0e:
2c:e5:85:51:cd:96:67:9f:ca:cf:c1:d3:14:79:f0:
98:7c:35:83:e4:4b:90:be:1e:b7:fe:15:f8:6a:c8:
58:31:a3:33:35:13:0e:ac:8f:27:24:c6:e5:eb:4d:
48:4f:d4:3b:9a:2a:af:9d:91:0d:8b:51:84:90:90:
66:dd:bf:ab:fc:13:25:c3:91:d9:5a:af:4c:e1:b3:
dd:d8:a2:37:ad:49:96:7c:44:bc:22:08:8c:4d:3c:
3d:3d:50:9d:63:c8:ef:ad:6e:a5:9b:43:fb:47:f1:
07:14:4e:65:94:1f:8d:c5:a5:9d:2a:a5:c8:10:de:
e5:a8:1a:8c:67:38:43:68:b7:89:5b:97:29:44:4b:
4b:6e:ae:5d:37:a9:6d:9f:e2:a3:c9:c8:0a:d5:92:
d7:f4:16:c2:b9:58:ec:fe:cb:23:be:36:1a:34:b1:
ff:06:bd:81:c1:ad:d6:57:22:f6:c8:88:a1:b9:22:
8c:ab:6b:81:ec:91:c6:3f:47:75:bb:2c:d2:6d:5d:
df:9d:04:78:11:11:f6:4d:9a:1f:ed:6f:7e:98:f4:
d7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:22:B7:9F:7D:5A:EF:B5:E1:27:E5:09:23:A1:27:0D:A7:53:0D:8A
X509v3 Authority Key Identifier:
keyid:AB:6C:80:08:06:37:FA:CB:16:F5:19:C5:D9:7E:C2:7B:3D:85:09:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q2yACAY3-ssW9RnF2X7Cez2FCX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/6a2c5c-9e1b-4561-a4e9-e9e1d91a9816/1/q2yACAY3-ssW9RnF2X7Cez2FCX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:fc:37:cd:45:eb:31:49:10:ad:cd:bf:6c:77:c6:96:bd:ad:
66:ae:24:54:ad:d0:7f:23:17:9c:ec:2e:21:c5:79:66:a3:d9:
d9:93:60:28:8d:e4:84:30:cd:1f:75:9e:15:47:a1:ac:4d:9a:
72:94:99:0f:3b:dc:a3:20:38:ff:eb:4c:38:05:cb:13:0b:de:
ae:6a:fb:75:c3:d4:05:4d:a3:00:33:21:c0:69:e9:22:95:e6:
ae:12:06:13:c5:94:1e:d7:a8:c9:a2:5a:36:f7:cf:5b:09:3f:
77:b5:ed:2b:3e:2f:52:e7:05:85:27:51:71:8c:af:8e:90:21:
95:04:df:43:0a:7d:71:09:b6:d4:00:ca:86:e0:e4:45:91:79:
4a:0b:be:cb:eb:d0:ef:06:73:1f:32:24:00:5f:02:07:d1:6c:
07:6f:30:3b:bc:f8:80:cb:d5:f6:1b:fb:94:82:7c:99:f9:ff:
e9:d9:4e:ec:4e:e8:1a:7d:34:6c:85:ff:f5:39:e4:8f:f3:00:
ab:cc:3d:16:5e:af:9a:43:cd:59:3f:48:0e:08:3a:90:0f:ab:
f0:7d:72:39:73:b3:1d:91:b0:5a:15:54:87:e5:cf:a6:ac:c8:
39:6d:88:ad:e0:13:d5:ec:d3:75:83:f1:67:6a:d8:56:7e:bf:
f0:2a:c3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:15:49 2026 by rpki-client