Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
File: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft (raw, json)
Hash identifier: KBQ5JeyonKooNzhRS1OWYAs0ajmA2pXgmeh60JBS8zU=
Subject key identifier: 4C:11:4C:B0:C0:D3:3B:1A:4F:44:96:5D:C7:FF:38:6A:21:16:D5:5F
Authority key identifier: FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
Certificate issuer: /CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Certificate serial: 019DCD192614809024844A3E8F87BD017C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
Manifest number: 18D9
Signing time: Mon 27 Apr 2026 04:01:10 +0000
Manifest this update: Mon 27 Apr 2026 04:01:10 +0000
Manifest next update: Tue 28 Apr 2026 04:01:10 +0000
Files and hashes: 1: _q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl (hash: yHV7j9ueOFlP7kKI5FyNsbRoX/IA8aWzRBwvCtBtweY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:19:26:14:80:90:24:84:4a:3e:8f:87:bd:01:7c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feade6cd9e01aaa2e39dff484e4edce6f50990af
Validity
Not Before: Apr 27 04:01:10 2026 GMT
Not After : Apr 28 04:01:10 2026 GMT
Subject: CN=4c114cb0c0d33b1a4f44965dc7ff386a2116d55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:be:17:6c:c0:3c:3c:8d:87:fd:c8:1f:85:
92:0f:e4:54:3f:b0:a8:d1:9a:d5:5d:b6:59:56:a3:
64:f8:b9:43:a8:5a:e7:e3:28:1e:28:0b:46:c0:08:
22:7e:03:eb:3f:b5:69:54:be:8d:af:63:c8:f9:c9:
cc:36:61:e8:7a:7d:ec:6d:29:02:80:f7:09:c0:7d:
e1:4c:3f:35:22:18:62:b6:65:5f:bf:20:ad:bd:0d:
31:d9:81:92:6c:ff:e0:80:ea:cb:d9:d6:a2:7f:d2:
4c:f3:a3:29:32:97:a5:dc:89:ac:ab:e4:11:d7:c8:
26:33:ab:06:b9:38:0f:d6:19:28:91:50:e7:80:48:
10:ac:06:03:9c:2d:62:4e:1d:54:37:0e:5e:e9:d6:
26:1e:6b:e3:53:88:c2:19:90:79:cb:fd:d0:8f:0e:
29:b2:e1:b2:94:75:ac:29:bd:75:0a:f1:b0:6d:c2:
03:01:93:83:b9:ac:8a:5f:58:f6:58:ef:af:ba:20:
ac:33:c8:18:b5:44:50:11:ca:70:95:70:6b:d9:38:
90:13:22:1a:b0:76:59:d4:3d:db:dc:b7:e5:f3:54:
b9:f1:10:2c:eb:5c:6a:41:a7:da:e6:8c:db:3e:54:
39:7c:f9:00:e8:29:06:ed:dd:59:1b:8d:6b:29:1f:
93:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:11:4C:B0:C0:D3:3B:1A:4F:44:96:5D:C7:FF:38:6A:21:16:D5:5F
X509v3 Authority Key Identifier:
keyid:FE:AD:E6:CD:9E:01:AA:A2:E3:9D:FF:48:4E:4E:DC:E6:F5:09:90:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f6eb92-ed6b-4313-beff-927ece66f82b/1/_q3mzZ4BqqLjnf9ITk7c5vUJkK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a6:03:3f:ab:25:d8:f5:97:af:5d:b2:0b:d7:18:4f:99:13:
65:c7:79:98:a2:9b:f7:a5:1a:2f:05:61:4f:4a:10:f3:94:96:
05:aa:cd:8f:2e:72:14:50:cb:6f:73:df:c3:13:7c:56:50:23:
f4:b6:3a:c8:fa:ff:47:7f:1d:25:e2:2d:1c:13:4b:6a:77:9e:
bd:98:3f:08:c5:72:34:e7:b3:ae:58:ea:e4:53:cd:47:e6:3f:
8c:48:ae:32:64:b8:e0:1c:5b:76:72:c3:78:9e:24:f4:ad:aa:
13:f4:fd:58:3e:11:05:df:8e:c2:76:d7:70:c7:9c:49:13:c8:
a9:a6:d8:19:53:44:0a:15:30:64:1b:f9:9c:a5:e4:43:81:36:
a7:a6:e3:24:6e:91:24:52:8e:6e:50:09:7c:86:cf:85:b6:78:
1d:0e:1b:d8:d4:60:6c:87:ad:fe:6b:25:f6:de:17:8f:3a:35:
50:27:13:cc:1a:79:a8:b1:0c:60:a9:83:aa:fc:09:db:6d:2a:
04:20:7b:53:cb:5c:99:20:b4:b0:e3:81:15:1c:2f:8f:bf:b7:
99:79:1e:ee:d7:b5:91:68:fd:bb:b0:72:12:51:ab:00:32:90:
0e:67:f3:8b:3a:62:fe:c0:3d:3f:10:3c:75:83:97:6b:e4:ec:
00:84:8a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:59:26 2026 by rpki-client