Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
File: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft (raw, json)
Hash identifier: OfYWyp3nydoUA5WYfmZTwixSjjgrZnOHADXqQNel9RM=
Subject key identifier: C2:13:03:F8:C3:29:7A:6A:1C:FC:52:A3:AA:E0:0F:80:3C:ED:F4:AA
Authority key identifier: A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
Certificate issuer: /CN=a86ee450deb3a708aee85b78238fa370f90457f9
Certificate serial: 019D3A54866A1125BEB5D6FA0EDDA99B1174
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 16:01:51 +0000
Manifest this update: Sun 29 Mar 2026 16:01:51 +0000
Manifest next update: Mon 30 Mar 2026 16:01:51 +0000
Files and hashes: 1: qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl (hash: vGCGJvlRk+VFKCl/Y/dfwWF9jscl+fY7FXB4fjA2aaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:54:86:6a:11:25:be:b5:d6:fa:0e:dd:a9:9b:11:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a86ee450deb3a708aee85b78238fa370f90457f9
Validity
Not Before: Mar 29 16:01:51 2026 GMT
Not After : Mar 30 16:01:51 2026 GMT
Subject: CN=c21303f8c3297a6a1cfc52a3aae00f803cedf4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6f:98:1a:8c:66:6d:90:64:08:06:d6:0e:f7:
53:5b:11:73:8e:45:82:b9:bf:5d:d5:c9:1c:dc:87:
69:c8:b7:29:56:56:9b:09:97:3c:a1:cf:4e:5c:4a:
4b:ea:35:37:f8:81:11:79:e6:9f:50:74:20:1c:63:
be:27:ca:45:63:a3:9b:ab:25:27:9c:b3:a1:cf:2f:
b6:0d:9d:9e:45:61:5c:93:15:d5:c4:fc:e8:3a:3f:
ba:a7:b1:39:af:1d:da:52:3c:06:cd:b2:f3:4a:ad:
4e:2a:c5:43:ce:1f:d2:80:1b:99:7f:79:05:f6:40:
25:e3:12:e1:7e:9b:db:6c:8c:57:d5:62:66:67:d7:
6c:8d:4e:a5:dc:80:d0:82:3c:dc:3a:dc:99:d3:41:
08:f9:bf:ca:34:1c:02:bf:ec:19:5f:45:ac:c3:ac:
08:43:1a:3e:b5:c1:ed:7f:df:88:19:ba:27:35:2a:
60:60:a2:44:3d:a2:d3:13:e4:d2:27:f0:a5:d6:67:
f0:de:9a:6a:fc:08:d1:45:8b:49:70:38:e8:0e:4b:
95:36:92:31:53:fd:fe:51:5c:2e:2b:39:cc:13:bc:
ef:b7:b2:71:07:1a:1c:5b:e2:62:6e:db:64:90:2e:
0a:a2:ed:10:5c:d4:70:9a:75:26:cd:02:08:cc:ac:
f5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:13:03:F8:C3:29:7A:6A:1C:FC:52:A3:AA:E0:0F:80:3C:ED:F4:AA
X509v3 Authority Key Identifier:
keyid:A8:6E:E4:50:DE:B3:A7:08:AE:E8:5B:78:23:8F:A3:70:F9:04:57:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d17d6a-4e2e-413e-a128-aac6b0e825b9/1/qG7kUN6zpwiu6Ft4I4-jcPkEV_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:8c:82:02:50:49:92:e3:7d:29:d3:93:82:23:36:ba:31:2d:
8b:b3:43:de:58:90:18:2c:23:17:f3:6d:ea:28:d2:44:4b:be:
56:35:6e:63:f8:3a:94:11:be:f1:e6:a7:39:05:f8:5d:4c:ba:
61:00:ba:29:b1:75:a6:8e:27:18:90:d1:e6:00:05:5e:4d:76:
1c:7f:a8:cb:6e:87:45:1d:0d:56:ce:8e:a8:aa:66:ed:3e:ea:
e9:42:46:5d:37:74:d0:ab:fd:ef:f1:26:fc:1f:ef:06:05:2d:
32:ca:09:31:ba:95:38:ad:60:96:50:67:1b:fb:a6:8f:dc:87:
14:cd:d0:e6:93:16:41:c5:79:e8:f3:e8:b8:a6:79:7b:61:ef:
3c:45:af:b1:ef:b8:70:52:24:b5:b6:06:2a:fa:bc:a9:8e:d7:
1f:f9:ee:43:e5:c5:5b:b0:17:da:95:1a:19:a3:3f:ed:1c:89:
14:d9:33:0d:ca:cc:e0:9e:32:ad:49:d8:11:fe:c2:55:d9:81:
10:84:e2:46:5a:d1:a2:37:e2:2c:1e:d3:e1:de:03:00:6f:82:
98:eb:59:fd:e8:83:5d:c8:34:68:64:6c:7e:80:9b:b7:13:41:
03:72:8a:69:91:6a:c8:2c:02:6e:c8:90:2a:4b:44:7e:c3:bb:
45:c1:c7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:57:44 2026 by rpki-client