Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
File: q06x4MU6aA6qQLjHzT8hzJYEPoo.mft (raw, json)
Hash identifier: auHRZOGvN5ZnDGlI+wBmLfCP7yh/AAirlpPKsrkihP0=
Subject key identifier: 2A:85:19:94:06:58:5A:3E:5B:67:C5:5C:4E:8C:C7:30:FD:27:D8:D1
Authority key identifier: AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A
Certificate issuer: /CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
Certificate serial: 019D38D3287304C481E4823D7661E2B16540
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
Manifest number: 188B
Signing time: Sun 29 Mar 2026 09:00:55 +0000
Manifest this update: Sun 29 Mar 2026 09:00:55 +0000
Manifest next update: Mon 30 Mar 2026 09:00:55 +0000
Files and hashes: 1: q06x4MU6aA6qQLjHzT8hzJYEPoo.crl (hash: jyqjj9M4z8U3NgIeaBiXU0T9/2TYpgE/uQ27IMugiGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:28:73:04:c4:81:e4:82:3d:76:61:e2:b1:65:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab4eb1e0c53a680eaa40b8c7cd3f21cc96043e8a
Validity
Not Before: Mar 29 09:00:55 2026 GMT
Not After : Mar 30 09:00:55 2026 GMT
Subject: CN=2a85199406585a3e5b67c55c4e8cc730fd27d8d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:20:64:16:15:fa:30:35:6b:60:4c:2a:77:
82:16:4e:1b:ad:aa:ad:d0:53:ed:ba:ca:1e:0f:47:
8c:1d:7b:fe:25:20:7e:a3:31:e7:6c:a2:4e:cb:06:
9f:b9:a2:e6:f7:c6:67:47:fc:4e:19:50:06:98:df:
a0:8c:75:14:58:07:68:25:d2:45:fe:7c:85:b3:12:
57:68:1b:3d:c4:39:6f:fe:97:56:d3:65:aa:5b:42:
f4:45:49:5e:cb:9e:eb:fe:8f:a0:23:3a:dd:a9:d7:
23:b8:a4:a2:78:7e:e3:ef:dd:8c:6b:31:d8:3f:77:
01:54:2a:71:45:5f:8f:72:ce:ba:b3:3a:50:55:c4:
2a:c7:94:fd:5f:94:fb:08:af:d8:cb:28:f5:28:bd:
b3:12:bd:6c:70:98:bd:48:93:d5:57:3b:c4:b7:61:
38:66:57:72:e5:0d:7e:ef:25:a3:ca:0e:b1:55:d2:
d1:38:68:ac:19:06:9e:30:68:16:7f:04:93:bb:55:
d6:14:82:f9:0e:34:0b:94:3b:fd:cf:b4:16:24:f3:
ed:73:c2:18:c3:12:ae:8b:08:b0:47:1f:64:5f:45:
26:a7:58:2b:eb:e7:2f:f5:6e:29:be:6c:a8:fa:a1:
2d:13:96:da:0f:ba:ec:0e:32:fa:f7:18:bb:b2:da:
1e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:85:19:94:06:58:5A:3E:5B:67:C5:5C:4E:8C:C7:30:FD:27:D8:D1
X509v3 Authority Key Identifier:
keyid:AB:4E:B1:E0:C5:3A:68:0E:AA:40:B8:C7:CD:3F:21:CC:96:04:3E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q06x4MU6aA6qQLjHzT8hzJYEPoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/6e02e8-7e05-4fcf-8a6a-37c2342c5c2f/1/q06x4MU6aA6qQLjHzT8hzJYEPoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c3:85:1e:c8:e0:52:29:26:76:aa:57:69:f5:a2:3c:89:ac:
2d:0d:49:05:fb:e3:b8:7a:ba:43:40:ff:f3:bc:dc:c4:b7:dd:
80:49:ee:0d:f3:8a:2d:90:43:3b:11:d7:ca:35:d1:ed:e3:62:
7c:84:5c:bd:1c:2e:39:dc:bd:48:5d:ee:11:aa:7a:41:00:c8:
8b:5f:9e:8f:ee:ba:04:13:80:c3:36:6e:e8:fb:a6:0f:9b:c9:
42:15:90:b4:ff:65:24:88:7b:e6:e7:af:21:2a:cb:d2:a7:3d:
2d:09:42:bb:63:40:6b:68:f6:47:21:02:23:0b:69:30:c3:c7:
80:a1:ef:24:52:e6:6f:e9:80:3c:23:fe:5e:d1:46:9e:6a:31:
40:f9:26:1a:17:ec:7c:7d:ff:ec:ce:f4:f9:3b:94:33:06:f0:
b4:a6:77:4e:25:38:35:3f:5d:29:e4:15:e0:eb:18:40:17:16:
f2:d5:42:1f:c5:72:5f:d2:06:1c:81:7e:f4:57:0d:ba:28:47:
fa:a9:a9:4e:80:71:eb:f5:ac:29:4a:03:71:7f:c8:e6:1d:8e:
ec:1b:b5:72:7b:f9:e5:5f:9f:3b:cb:46:b3:d5:a6:ba:38:fc:
fa:78:ce:b5:78:f4:ae:a0:64:8a:e6:ae:d1:6a:50:89:67:ac:
84:42:e7:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:12 2026 by rpki-client