Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
File: qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft (raw, json)
Hash identifier: SN7l+ab/edtHlt1UXY0vxmz4zsk3LKdX26xg6ij1E6o=
Subject key identifier: 21:1A:A4:84:2E:29:26:CD:6A:D0:28:8C:CC:89:92:00:C6:B8:9D:BC
Authority key identifier: A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
Certificate issuer: /CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Certificate serial: 019D394164409F368103A0AABC0417D5248A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
Manifest number: 15A5
Signing time: Sun 29 Mar 2026 11:01:19 +0000
Manifest this update: Sun 29 Mar 2026 11:01:19 +0000
Manifest next update: Mon 30 Mar 2026 11:01:19 +0000
Files and hashes: 1: qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl (hash: WLPiL8kNBbx+QOQjOEdDCCwx9IqhNJMreYOd+0dsMaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:64:40:9f:36:81:03:a0:aa:bc:04:17:d5:24:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81cf34647d7e0fbd908510a8223c923c7928fe9
Validity
Not Before: Mar 29 11:01:19 2026 GMT
Not After : Mar 30 11:01:19 2026 GMT
Subject: CN=211aa4842e2926cd6ad0288ccc899200c6b89dbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4d:9a:84:5b:ca:12:04:c2:51:bc:25:5d:12:
ab:ce:c4:c7:27:ea:1c:e6:bb:0c:55:eb:b2:00:a2:
97:b6:db:6c:17:cf:92:54:af:ba:55:c0:df:a9:c5:
50:6a:bc:e0:b9:aa:e3:3e:0c:c0:12:92:b0:08:e6:
b9:85:f6:05:90:2f:9a:74:8f:8e:54:71:d4:fd:35:
70:56:f5:c9:d2:e5:fb:d1:6a:1d:f2:b3:53:b8:37:
bd:c4:95:e6:93:77:1c:ca:22:ec:0f:d6:3e:14:67:
35:f0:5b:25:6c:b9:4f:1d:42:31:92:79:d7:bf:82:
3d:04:9f:01:4c:b4:db:e6:fd:01:7d:36:6d:42:a9:
16:64:98:1f:1c:b2:5e:45:5b:da:49:b4:5a:b0:bb:
8b:6a:2d:15:1f:a1:b7:11:fb:73:b9:3d:eb:1b:32:
df:d0:5c:c8:10:54:b4:01:d6:a4:c6:db:a1:b0:ae:
39:df:c8:be:d0:f2:31:02:cb:d0:e6:ad:6f:62:79:
47:d1:7c:84:dc:35:00:07:d0:24:54:56:60:cf:d0:
2c:c2:35:5b:5b:e1:7f:20:4f:cd:2b:91:42:cf:0e:
10:16:c2:bf:34:d4:42:41:75:7e:32:f9:c3:05:3d:
d1:19:30:81:10:74:8c:bf:6a:02:99:5a:66:e6:88:
23:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1A:A4:84:2E:29:26:CD:6A:D0:28:8C:CC:89:92:00:C6:B8:9D:BC
X509v3 Authority Key Identifier:
keyid:A8:1C:F3:46:47:D7:E0:FB:D9:08:51:0A:82:23:C9:23:C7:92:8F:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBzzRkfX4PvZCFEKgiPJI8eSj-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/eb1cef-1b44-4e83-b5ea-bfb1199bbefe/1/qBzzRkfX4PvZCFEKgiPJI8eSj-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e5:79:4e:ae:87:95:78:33:25:57:b4:d3:03:8c:e6:b5:85:
eb:a6:ba:4a:a8:6c:dc:38:22:db:75:db:af:57:fb:46:b7:b5:
80:a9:18:84:ea:c0:7c:89:5a:80:0d:82:45:3e:16:36:23:d1:
c4:5d:cf:94:a7:fc:96:c6:87:2e:d8:a3:5e:30:c0:ea:23:69:
fa:00:e5:a5:34:d5:56:45:4e:dc:8a:86:64:f8:ba:e4:e2:55:
82:02:49:70:21:8a:3a:31:bd:29:43:3c:62:89:f9:c9:54:10:
71:e8:93:3e:f9:8b:11:d2:e1:49:58:06:99:b8:24:d8:9f:c6:
d6:9c:d4:e0:ea:ac:01:30:01:7a:14:fd:c5:ea:e0:79:a4:cc:
46:7f:bd:c4:a0:1d:7e:ab:b3:1f:0d:c8:7a:7a:ac:24:81:57:
ce:5f:ff:a8:05:2b:9b:2a:fa:0e:f3:f4:78:69:62:74:28:5d:
1f:ef:a1:4c:2d:44:fe:ae:df:c1:cf:ce:00:96:3f:9e:db:7e:
b7:10:5e:65:ec:77:94:ff:c6:f5:85:e8:f6:1d:f6:17:80:01:
bd:c6:4b:d2:81:ab:d1:73:7b:b1:c3:ef:6b:96:6d:d0:f7:a0:
9c:fd:d3:c1:0c:1e:ee:70:68:bf:bc:b2:24:07:c2:c9:e8:0e:
9c:5e:b7:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:23:44 2026 by rpki-client