Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
File: qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft (raw, json)
Hash identifier: VJ4xf6qzaMbS/9jldKMMJrsrwfAwuDwNUvgVF5vD+dI=
Subject key identifier: B1:5F:21:07:E3:64:9D:62:F1:0B:73:C1:23:E3:B1:5C:9E:06:2C:DD
Authority key identifier: A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
Certificate issuer: /CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Certificate serial: 01A17A71E20A170232B06CF45AF113E17830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
Manifest number: 17D9
Signing time: Mon 26 Oct 2026 23:00:46 +0000
Manifest this update: Mon 26 Oct 2026 23:00:46 +0000
Manifest next update: Tue 27 Oct 2026 23:00:46 +0000
Files and hashes: 1: qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl (hash: Z30fGE+2SN0MMX55mZ5e3rVOTm7/YVouVt1bXBr8u5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:e2:0a:17:02:32:b0:6c:f4:5a:f1:13:e1:78:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Validity
Not Before: Oct 26 23:00:46 2026 GMT
Not After : Oct 27 23:00:46 2026 GMT
Subject: CN=b15f2107e3649d62f10b73c123e3b15c9e062cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f5:58:b7:89:f3:53:3e:64:b0:0b:da:c2:14:
05:b2:f0:58:fb:1a:b2:36:b5:fa:83:2f:5f:5d:6d:
1a:8f:79:ae:c9:b8:ed:d8:4b:04:31:02:e5:8a:88:
1d:bb:30:b8:00:4c:9a:55:2d:87:db:39:fd:1c:2f:
da:51:d3:4d:2f:0a:9c:c1:bc:8f:5f:00:7c:0c:2a:
cc:11:61:0f:48:39:95:f8:42:e8:cc:70:e7:54:09:
a2:c7:9d:77:76:29:4d:c3:93:ba:a0:5d:2a:7f:bf:
ea:58:22:08:ed:b4:ce:21:24:01:c7:3e:0c:d7:32:
cf:8e:3d:66:6b:9a:56:ea:8f:3b:90:ed:c1:b2:06:
a6:19:f0:d8:f8:78:fc:0f:b9:17:a6:98:a5:5e:25:
62:04:7e:aa:c6:9a:80:8d:f3:34:5e:f2:5c:c9:a3:
26:c8:5a:f4:a6:c9:b1:0d:c5:1a:7c:5c:06:39:9b:
e3:e0:ab:11:03:b1:1f:d4:67:e0:2c:d0:53:2b:6b:
d0:32:d9:b6:89:9f:cd:0c:49:30:48:12:3d:ca:e6:
62:9c:ae:89:44:be:32:bd:31:98:89:88:a6:d9:78:
c5:94:b5:8e:6c:1f:48:5a:1b:9c:0c:63:ec:e2:37:
23:46:b5:34:26:0e:29:cd:59:a3:95:4c:8e:0f:2f:
d3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:5F:21:07:E3:64:9D:62:F1:0B:73:C1:23:E3:B1:5C:9E:06:2C:DD
X509v3 Authority Key Identifier:
keyid:A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:63:ef:5e:c4:86:08:4d:c9:0e:d7:a6:db:a4:03:17:0a:9f:
04:f2:db:57:2f:a4:d7:7b:2f:8d:f7:9d:59:37:4e:61:22:c4:
3c:67:6f:87:18:9c:47:77:41:8e:ff:80:2d:fd:cf:d2:01:9b:
29:9a:ae:eb:fa:ed:1a:58:67:c8:9d:48:38:73:6a:25:67:08:
40:29:42:39:39:8b:5e:51:41:53:70:84:d1:8e:c4:ee:7c:74:
12:94:48:56:e9:e0:7d:97:58:df:4b:2a:5e:24:6d:a4:48:d8:
2d:4c:73:98:ad:37:1d:1e:a3:84:26:39:9f:34:68:83:a2:46:
dc:aa:f9:8b:9e:40:d8:99:11:26:fe:28:cb:3c:5d:56:d2:8d:
0d:13:f3:69:3d:8e:9f:45:c0:da:4e:62:40:a8:97:57:b6:06:
eb:05:d2:bb:2c:65:91:54:e6:32:77:16:7a:37:cb:8c:eb:9f:
45:a1:8d:a7:ef:c1:8e:ee:0a:ec:62:6b:01:75:30:0f:ee:0f:
71:6d:9e:5e:73:11:a7:ae:64:19:2a:5d:29:49:9a:0b:27:3c:
d3:9c:b3:cb:30:8f:80:6b:14:ac:fa:0e:be:e0:07:30:24:a4:
4a:5a:b2:90:ca:5b:4b:c0:f2:07:9f:38:33:dd:ec:f4:63:6d:
30:fd:3a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:57:07 2026 by rpki-client