Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
File: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft (raw, json)
Hash identifier: 2aJOFMlboIk2PcPTtZIQeZ/P9kBQsAp8zcJ4gwb9XUI=
Subject key identifier: BF:65:37:EE:22:E8:19:0E:F5:06:38:DE:90:E9:95:FC:AA:AD:4D:0B
Authority key identifier: FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
Certificate issuer: /CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Certificate serial: 01A18150B6424C72CD1A7E6B06C3996A2227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
Manifest number: 1AC4
Signing time: Wed 28 Oct 2026 07:01:52 +0000
Manifest this update: Wed 28 Oct 2026 07:01:52 +0000
Manifest next update: Thu 29 Oct 2026 07:01:52 +0000
Files and hashes: 1: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl (hash: uSMzKbj7ifP3AseZU9v8Z8hxWtDt7Ip7dTNSziCDryQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 07:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:81:50:b6:42:4c:72:cd:1a:7e:6b:06:c3:99:6a:22:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Validity
Not Before: Oct 28 07:01:52 2026 GMT
Not After : Oct 29 07:01:52 2026 GMT
Subject: CN=bf6537ee22e8190ef50638de90e995fcaaad4d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1b:55:37:bb:fe:9d:f2:06:8e:05:a1:10:9b:
ab:21:2f:91:1c:d0:3d:02:36:08:a8:73:e3:0b:6e:
42:52:e1:70:55:18:be:f4:e0:62:ba:1b:ab:84:8e:
53:1a:22:3c:df:e0:fe:ca:58:ed:7c:07:78:41:c3:
9d:21:f6:08:e8:d5:4c:84:df:c8:d1:4c:45:34:bf:
3d:60:f8:12:ad:c2:ab:e2:f2:03:cf:ba:e6:eb:d2:
bf:49:ca:da:c1:4f:5b:b7:55:32:1d:32:2b:52:0e:
93:27:7d:c0:08:66:63:de:61:88:1f:1e:48:7a:96:
35:a4:84:89:87:ff:42:e9:eb:c9:ea:c6:91:93:35:
44:34:f3:6f:de:f2:fb:92:91:eb:ee:0a:53:58:38:
89:fa:0b:1a:00:a3:3a:1d:da:27:3c:14:43:ce:25:
aa:f9:f3:d4:d6:42:e1:40:9e:3b:43:88:5a:5d:55:
7f:e3:6c:f3:ca:7b:4b:e0:76:a3:aa:27:a2:b3:88:
46:9f:47:6c:80:b7:96:c5:5f:82:9f:c0:1d:ca:3d:
aa:75:d3:51:6f:41:60:62:49:8a:63:d0:e0:de:1a:
38:4d:d7:75:79:8f:63:9d:2d:30:1f:f2:4e:65:07:
a3:bd:f4:a1:e2:7b:15:6d:28:18:a1:e1:90:44:14:
e5:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:65:37:EE:22:E8:19:0E:F5:06:38:DE:90:E9:95:FC:AA:AD:4D:0B
X509v3 Authority Key Identifier:
keyid:FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:26:c5:e8:fa:89:9d:cb:9b:a5:8d:49:d6:96:38:2b:91:96:
17:4f:db:d6:a1:68:28:12:7b:8f:a2:8f:ac:ef:7e:61:3d:af:
24:01:a0:46:9a:fd:7c:fe:8f:e2:e5:08:9b:e9:09:e8:20:32:
ac:d3:ab:e1:6d:be:55:3a:ac:fe:e4:06:2b:5e:cc:ba:cb:cb:
21:c8:21:a4:dc:7a:4c:fa:1d:b1:ac:b8:20:3d:bb:e8:bc:3a:
2d:e7:e0:f1:3c:97:9f:e5:56:f1:0b:3d:35:62:36:05:30:76:
6e:71:9c:5a:67:e6:74:15:78:99:6d:cd:2f:33:71:2e:df:4f:
11:9b:47:65:38:18:b2:6b:e1:53:79:67:a7:ca:3b:c0:ca:81:
3c:b0:c7:63:c3:f9:2b:b3:f1:e5:e2:87:6b:79:0e:c8:c3:cb:
82:ba:9e:77:f9:82:b3:d7:be:bd:b3:0e:76:f0:9d:37:c2:11:
c2:37:07:0e:7a:d8:27:4b:e0:fb:1f:d1:37:03:ae:f9:be:77:
d4:c9:c0:12:84:61:d7:91:65:5a:51:b9:e5:ca:e6:83:d2:5f:
22:51:ed:a6:d2:7a:23:9b:86:36:86:4d:94:6a:de:91:a4:4a:
e5:49:02:24:f0:c8:cf:02:31:fe:31:49:93:48:bc:74:d1:93:
78:f4:63:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:22:32 2026 by rpki-client