Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
File: qEmcFnojbc9FXrmHHw3O0LoNwpE.mft (raw, json)
Hash identifier: 7A/QS2vKH3VKy68GGYhlC18WyuUl99lKRFCRvmheuY0=
Subject key identifier: 7B:8A:18:4D:4A:18:11:01:2E:96:65:9B:FA:5C:3A:4F:33:BD:74:90
Authority key identifier: A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
Certificate issuer: /CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Certificate serial: 019D3789DDA5489B2D04EACC0D8CEEDEC35D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
Manifest number: 0813
Signing time: Sun 29 Mar 2026 03:01:15 +0000
Manifest this update: Sun 29 Mar 2026 03:01:15 +0000
Manifest next update: Mon 30 Mar 2026 03:01:15 +0000
Files and hashes: 1: qEmcFnojbc9FXrmHHw3O0LoNwpE.crl (hash: wdC78yGOuJ1UBJJ6LMZINFGmUoIHZgPl5gfVJb/Bkds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:dd:a5:48:9b:2d:04:ea:cc:0d:8c:ee:de:c3:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8499c167a236dcf455eb9871f0dced0ba0dc291
Validity
Not Before: Mar 29 03:01:15 2026 GMT
Not After : Mar 30 03:01:15 2026 GMT
Subject: CN=7b8a184d4a1811012e96659bfa5c3a4f33bd7490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:74:66:d0:aa:ae:8c:25:d9:5f:33:44:f2:50:
51:59:2f:53:50:ac:81:be:ac:0e:bc:7d:13:b3:2b:
f9:08:cd:80:5d:dc:b8:05:4e:2e:11:23:33:cb:27:
58:e8:01:59:1d:9f:94:13:84:e9:3d:9d:5e:84:9b:
7e:ab:75:58:90:9d:ee:96:ab:f2:63:8d:a4:ea:ac:
34:97:be:11:fd:cc:1b:b5:88:30:19:5a:81:aa:41:
b8:ea:4a:79:b5:ef:f2:bf:d0:0e:cd:eb:dd:e8:ca:
66:c4:1b:0f:13:8a:5d:4b:f0:f3:c0:d3:4e:93:2d:
f5:f2:7f:02:2d:94:bb:04:43:0d:be:a9:02:7d:12:
39:1d:e9:a3:0f:62:ab:f4:23:95:9a:78:5b:85:dd:
dc:4d:e7:34:c7:50:fd:21:95:de:97:15:4e:63:94:
6a:ea:51:60:13:3a:fe:13:28:b4:fd:d2:b7:ee:32:
bc:45:91:74:a9:60:d9:04:3a:8b:38:1d:79:77:1a:
a4:26:0a:25:bb:40:9f:98:9e:a0:b7:99:e2:03:43:
51:8f:ac:cf:e4:72:92:51:78:f7:97:7c:9f:8d:8d:
66:10:37:ec:22:61:ed:d3:75:48:ef:d6:ea:51:fa:
f3:52:75:0c:c0:9e:28:26:56:e3:17:85:54:c9:c2:
ae:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8A:18:4D:4A:18:11:01:2E:96:65:9B:FA:5C:3A:4F:33:BD:74:90
X509v3 Authority Key Identifier:
keyid:A8:49:9C:16:7A:23:6D:CF:45:5E:B9:87:1F:0D:CE:D0:BA:0D:C2:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qEmcFnojbc9FXrmHHw3O0LoNwpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/fcd41b-5e1d-4b1a-a56d-1613e8d5065f/1/qEmcFnojbc9FXrmHHw3O0LoNwpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:36:6a:11:82:d7:cb:6d:e1:df:55:24:ac:3c:2e:80:93:76:
62:f0:11:20:12:96:85:7a:b7:a3:ce:6b:20:43:e5:27:e9:58:
08:6c:32:4b:a5:b1:d4:0c:70:2d:83:38:c6:71:e5:d6:8d:05:
2e:b9:c4:df:8f:9b:ca:79:2c:8b:6c:43:af:23:41:13:55:ec:
fb:78:12:6d:50:fd:e8:4f:79:38:b1:9e:ca:a9:8f:ba:f1:c5:
c5:0e:12:dd:1f:fd:68:00:0c:64:85:e3:74:4c:05:a1:34:a9:
01:65:0b:dc:1d:e7:10:24:d0:f8:40:0c:97:2e:60:77:cc:1e:
fd:80:4b:1f:3d:c5:ba:84:aa:5e:85:65:01:d2:1c:34:94:dc:
5b:be:c5:1c:c9:25:b9:d2:ed:c6:f4:79:4b:9b:f3:05:85:38:
71:eb:fe:ce:95:25:15:42:29:ef:67:c6:7e:ee:72:20:b9:6d:
89:c6:52:0e:ca:09:b1:20:b1:81:2e:b4:13:68:2c:63:15:90:
41:49:c6:53:25:23:65:30:a4:0a:30:c6:59:6e:de:ac:7a:f9:
0d:09:2f:c1:1d:9f:98:df:a8:99:77:df:52:b2:61:5b:0d:ce:
7b:63:6c:8c:ad:78:bd:82:a1:7c:fd:8c:f4:92:12:c2:f4:72:
99:3c:49:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:02 2026 by rpki-client