Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
File: 0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft (raw, json)
Hash identifier: /qaNmryGqmJGKC1Y5kpvBB6m+XrIJfS3LHAeG+EjGD0=
Subject key identifier: AD:7F:42:37:D9:EE:94:E6:2A:EF:A6:25:74:9C:DB:02:0A:CE:60:AC
Authority key identifier: D2:A4:01:D1:FC:11:D2:2C:83:D5:D3:F5:6E:DD:48:E9:49:89:CC:17
Certificate issuer: /CN=d2a401d1fc11d22c83d5d3f56edd48e94989cc17
Certificate serial: 019D382E499C9427A371F7DCE1DB884EE251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
Manifest number: 01C8
Signing time: Sun 29 Mar 2026 06:00:50 +0000
Manifest this update: Sun 29 Mar 2026 06:00:50 +0000
Manifest next update: Mon 30 Mar 2026 06:00:50 +0000
Files and hashes: 1: 0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl (hash: 1IUDt4PoeYdSreZpp4fOs6okuhYK59NvV4DLm8ThE14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:49:9c:94:27:a3:71:f7:dc:e1:db:88:4e:e2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2a401d1fc11d22c83d5d3f56edd48e94989cc17
Validity
Not Before: Mar 29 06:00:50 2026 GMT
Not After : Mar 30 06:00:50 2026 GMT
Subject: CN=ad7f4237d9ee94e62aefa625749cdb020ace60ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:1c:98:4f:c5:b8:0c:56:f7:eb:88:4b:92:
9c:3b:3e:ac:73:4d:20:e5:d2:4e:5f:82:f8:c7:f5:
da:1c:67:1c:86:f9:24:38:13:5c:d9:04:a0:65:48:
66:5c:22:56:09:22:22:96:78:9c:97:76:f2:5d:57:
e3:c4:63:8b:f5:93:b2:35:5c:2b:5c:09:9b:0b:15:
69:e5:be:71:24:e9:15:97:89:bb:c9:6f:9d:bd:c5:
54:2c:f8:e5:75:2c:0e:74:d1:90:b8:ef:20:12:87:
17:6f:43:d5:7d:a1:1f:2d:c6:89:b1:d0:b6:3e:ca:
72:d2:b1:a5:7b:bd:43:b9:85:a7:7c:72:51:06:2e:
9a:54:09:98:54:e1:8c:16:08:6c:5f:9c:2e:87:d6:
6d:0b:ab:6d:f6:74:5e:f0:6f:54:16:0d:76:38:40:
d0:ee:62:86:1d:2d:ba:ee:cf:07:8c:78:59:b9:c7:
d8:c1:60:f6:d7:c2:c8:10:4d:da:21:a1:5f:30:75:
1b:7d:43:77:19:39:23:f5:f4:a1:46:05:5e:86:8a:
1b:0c:99:5c:41:73:31:b1:49:7b:ae:49:d0:a6:a9:
d5:f2:ec:bd:bf:eb:f1:d3:45:7e:2a:35:bf:50:a5:
ae:51:b3:5a:99:fb:a8:9b:fe:72:20:05:57:ef:f4:
d8:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7F:42:37:D9:EE:94:E6:2A:EF:A6:25:74:9C:DB:02:0A:CE:60:AC
X509v3 Authority Key Identifier:
keyid:D2:A4:01:D1:FC:11:D2:2C:83:D5:D3:F5:6E:DD:48:E9:49:89:CC:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0qQB0fwR0iyD1dP1bt1I6UmJzBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/9ed3e2-90e5-422b-8f35-4482415c626d/1/0qQB0fwR0iyD1dP1bt1I6UmJzBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:ca:21:32:aa:5f:23:d5:4f:fa:4e:dd:02:e2:a0:8b:ac:0f:
96:58:4a:e6:f4:b5:15:b6:4e:64:4f:57:10:dd:36:64:41:80:
63:c2:cc:3d:fd:c1:d1:1b:c2:45:71:3b:16:5a:5e:c4:61:40:
ff:aa:c0:7c:eb:9c:28:01:f4:e2:91:0a:34:b7:19:a0:64:fa:
ff:5e:d8:45:c4:1b:07:40:4d:44:7c:5e:1c:06:52:67:38:e2:
5a:cd:a7:b4:c1:a5:b2:c7:e1:d3:33:7b:aa:aa:79:08:84:a8:
3d:6e:ff:fd:6b:22:36:e3:66:f9:54:7b:6e:ce:da:85:3c:71:
5d:34:01:16:63:82:cb:f8:04:c4:fb:60:04:fc:64:60:cf:23:
ef:34:38:cb:1f:a6:eb:31:9d:0f:4d:3b:e9:dc:47:eb:af:47:
2a:8a:09:aa:cc:18:cd:e1:19:08:89:d8:71:fb:68:15:0c:10:
aa:58:f4:fc:47:ec:f4:d4:b8:0b:09:53:4d:d2:3b:f3:15:8a:
90:53:2c:d5:f6:2d:65:56:50:34:70:18:85:f6:8a:df:07:a1:
78:a1:0d:f1:eb:8d:9f:eb:40:f0:91:f2:b9:69:f0:0d:3e:35:
93:0d:c1:a0:0b:f0:25:61:b5:1e:3a:42:f8:05:b4:8f:72:80:
d5:b1:90:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:01 2026 by rpki-client