Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
File: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft (raw, json)
Hash identifier: QqGzkZM6DhZfp3/Uy6C8sjFbWnhtyaXhQHTk2YXFoto=
Subject key identifier: 2B:C2:A3:F2:F8:86:FC:37:C2:CA:A8:6A:7C:03:F4:51:D5:E9:F0:8F
Authority key identifier: 43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
Certificate issuer: /CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Certificate serial: 019FA14DDB4F692985AA3752D5DE79D2AD94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
Manifest number: 134A
Signing time: Mon 27 Jul 2026 02:01:01 +0000
Manifest this update: Mon 27 Jul 2026 02:01:01 +0000
Manifest next update: Tue 28 Jul 2026 02:01:01 +0000
Files and hashes: 1: Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl (hash: U0mUfLecmqUzj34bYAVIL/5hxRMnlR3HFs+Yq1k2wGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:db:4f:69:29:85:aa:37:52:d5:de:79:d2:ad:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43c16eeca6afea844ca4688258ce3300d2a393fe
Validity
Not Before: Jul 27 02:01:01 2026 GMT
Not After : Jul 28 02:01:01 2026 GMT
Subject: CN=2bc2a3f2f886fc37c2caa86a7c03f451d5e9f08f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:27:0c:52:d5:08:73:90:bc:08:cd:84:02:
1b:89:8e:d6:43:9d:ff:4f:aa:d6:81:45:9c:e5:da:
5f:17:5a:15:68:bd:cc:23:c9:da:63:6e:fd:13:fd:
af:5e:c9:7f:a1:9f:f5:82:9a:b6:6f:92:e0:0c:f8:
fa:85:39:02:b4:9b:02:9a:22:1f:ba:fb:27:8b:5f:
b8:5d:48:5e:ee:2f:fa:6b:ec:d6:50:f1:1b:32:07:
79:6c:9f:a5:eb:97:1d:7d:fe:4f:7f:b8:7a:f9:95:
df:55:38:de:45:d9:1e:cb:b6:a2:48:f7:9f:cb:2f:
6c:a5:9a:6a:75:f3:19:a8:42:65:70:e2:8a:e4:75:
b9:d3:e9:7e:6c:ca:0d:74:98:ac:dc:01:26:13:ae:
1e:07:f6:3a:fb:24:5b:b1:d0:72:29:d7:67:6e:3a:
9c:d0:a5:a7:06:9f:a6:96:49:fb:d1:08:af:09:0d:
e5:25:06:43:e3:59:c1:58:b7:45:11:07:c9:ef:80:
47:d4:d4:75:1e:88:51:b2:d6:18:92:63:79:0e:cd:
0d:f3:ec:73:ab:3b:19:b4:de:c0:d9:9e:f3:fa:39:
30:3a:9a:24:30:64:f2:c2:74:b8:2a:41:e5:f4:92:
3c:c5:8d:f6:a0:04:fc:fc:56:51:6e:44:9d:fd:10:
63:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C2:A3:F2:F8:86:FC:37:C2:CA:A8:6A:7C:03:F4:51:D5:E9:F0:8F
X509v3 Authority Key Identifier:
keyid:43:C1:6E:EC:A6:AF:EA:84:4C:A4:68:82:58:CE:33:00:D2:A3:93:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/929a32-a40f-4570-a785-b3977f6447b3/1/Q8Fu7Kav6oRMpGiCWM4zANKjk_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:93:37:b3:95:ca:40:0c:47:64:72:ff:f8:e3:df:17:0f:32:
78:81:80:f8:ab:35:c3:60:db:1c:e3:1d:59:1b:a5:dc:9d:42:
d7:c1:10:dc:5c:b0:dd:77:ea:49:de:b9:7a:06:23:26:28:c0:
e6:20:ee:af:73:f3:b1:7c:09:34:63:f1:31:f5:6e:59:f3:72:
d5:01:b1:81:b8:47:d1:a9:85:27:5a:dc:e3:db:0b:72:08:60:
11:ec:4d:ae:68:f8:ba:cf:f8:b9:c3:05:d5:5f:52:d6:12:7c:
13:64:73:7e:fd:09:a4:eb:a5:90:d3:75:31:26:ed:72:d6:48:
a8:b0:bf:ef:dc:21:c5:66:b1:4d:80:8a:ca:3a:ab:c7:d0:f2:
38:93:9d:c7:9b:64:64:62:d3:a2:e0:4b:9b:8e:87:1b:15:13:
38:48:d4:8c:a9:c9:93:5b:8b:e1:74:9f:f0:88:8f:ac:d5:af:
8d:d9:1c:85:b9:c9:c0:af:2b:23:2b:21:63:c6:c8:b3:24:25:
81:56:64:c7:e0:21:4a:0f:a0:45:e0:a8:65:9e:16:96:f1:e9:
ac:76:f2:b9:44:3f:08:27:8f:5a:81:cb:82:51:7c:17:25:f3:
62:4b:88:6d:cf:8d:94:84:90:9a:0f:8d:fc:83:aa:6f:40:93:
51:24:f9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:28:29 2026 by rpki-client