Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
File: Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft (raw, json)
Hash identifier: VdSX2K9cSd7vBpnAa8KckMMjBtQcU6Pn2m/NtzPyWX0=
Subject key identifier: 6E:E9:9D:9B:54:52:43:2A:74:DD:99:24:F3:C7:4D:EF:7D:12:8E:37
Authority key identifier: 43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2
Certificate issuer: /CN=438f8ed121ba3081cfb215faab50ae145b590dd2
Certificate serial: 019D38654D18B47D36D304C24ABC17367753
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
Manifest number: 1176
Signing time: Sun 29 Mar 2026 07:00:56 +0000
Manifest this update: Sun 29 Mar 2026 07:00:56 +0000
Manifest next update: Mon 30 Mar 2026 07:00:56 +0000
Files and hashes: 1: Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl (hash: Fw4JbGfpNM5pvH49dtzhgAwpGh76GRs+VwB+kBH4AV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:4d:18:b4:7d:36:d3:04:c2:4a:bc:17:36:77:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438f8ed121ba3081cfb215faab50ae145b590dd2
Validity
Not Before: Mar 29 07:00:56 2026 GMT
Not After : Mar 30 07:00:56 2026 GMT
Subject: CN=6ee99d9b5452432a74dd9924f3c74def7d128e37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:d0:e1:68:3d:42:6f:fe:c4:d2:da:1d:f6:
cc:03:9c:27:4f:b5:62:e0:8b:cc:eb:ef:1b:f2:f3:
5e:1a:56:2c:d1:ed:25:40:9b:f2:42:59:fc:b8:89:
a5:1c:06:91:e1:0e:74:2c:85:08:61:d3:fe:2c:99:
46:91:75:c4:3b:c1:b7:4f:1f:e1:49:ef:ca:d8:68:
1c:52:e1:0f:45:fd:9e:97:51:4f:83:d7:a2:7e:22:
a7:1c:4c:6b:e1:ea:a1:03:73:d6:0c:95:37:84:2a:
67:32:2c:88:f6:0e:1f:14:82:31:55:e8:a4:55:52:
9e:0a:c0:80:a5:4c:92:87:42:ae:c9:79:98:61:83:
2e:6f:f1:29:2d:26:ed:7f:36:bd:99:75:ec:b0:37:
58:e7:46:44:6e:dc:ce:31:3d:c1:30:5f:a8:d2:ca:
de:b5:55:16:c6:e8:38:b9:55:a5:80:45:6d:32:63:
c3:ee:5e:8e:94:26:85:76:7a:de:2a:a8:42:56:d0:
82:e8:30:98:8d:fb:c1:ae:6c:b2:ed:53:81:d4:ba:
80:10:0a:1a:35:df:62:e0:01:f1:77:6c:11:6c:7f:
c9:4c:d5:51:5f:d4:92:77:17:91:f6:80:af:0d:50:
15:85:ec:aa:ab:11:98:dc:1a:6b:d6:ab:ff:63:55:
69:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:E9:9D:9B:54:52:43:2A:74:DD:99:24:F3:C7:4D:EF:7D:12:8E:37
X509v3 Authority Key Identifier:
keyid:43:8F:8E:D1:21:BA:30:81:CF:B2:15:FA:AB:50:AE:14:5B:59:0D:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4-O0SG6MIHPshX6q1CuFFtZDdI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/935044-1af5-45d0-aceb-d0406767e6cc/1/Q4-O0SG6MIHPshX6q1CuFFtZDdI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ff:ad:3e:75:b3:5b:70:e6:da:c2:5b:17:8e:03:02:ec:0f:
ab:52:e6:e4:44:4d:a0:42:97:f5:b0:8e:b7:e0:20:8e:27:7f:
eb:1a:b0:ca:02:19:05:73:83:d7:da:3b:56:fa:6c:38:cf:db:
7f:64:03:66:e6:07:4e:f1:2a:17:7b:aa:a1:3a:ca:e7:5a:72:
9a:e3:01:5a:64:13:5c:c2:f6:e8:a0:af:29:8b:f1:81:e2:b7:
8c:e7:eb:1d:a1:36:26:44:d1:68:42:a4:6a:cb:2d:4f:7b:3b:
67:6d:40:b7:5d:15:41:6e:52:3d:30:ee:ca:60:78:f6:70:ec:
34:91:77:0f:1e:b8:5b:4c:a9:f7:41:22:6e:68:84:fd:71:a3:
26:3a:38:2b:af:99:65:42:1d:78:c1:7d:f7:09:a5:99:d4:31:
24:3b:d8:1f:0d:4b:80:70:02:17:02:df:b5:20:2d:79:5a:92:
2c:73:a6:e4:5f:64:dd:c9:2b:83:8f:4d:29:0b:de:b2:56:33:
a9:73:46:4d:f0:3c:52:f0:58:90:63:bf:dd:c7:66:c1:40:92:
88:b0:a2:a9:65:73:15:43:2d:85:81:00:0c:eb:e0:1a:3a:0c:
42:e1:95:12:82:39:14:08:ce:0f:44:77:3e:95:c8:1d:2a:e6:
9d:da:68:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:55 2026 by rpki-client