Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
File: fqigEMxtfJMg4BLqHR424KdhwTg.mft (raw, json)
Hash identifier: LmAsuYMfu25Ihdw7s+mrlk62HVZ76Of7gvg3GE6sscY=
Subject key identifier: 51:51:0E:BE:85:14:A4:B7:E0:EB:8E:AC:6F:34:C9:B1:7D:C2:52:89
Authority key identifier: 7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
Certificate issuer: /CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Certificate serial: 019D390A52E89CF5FE78CCDAC025B96B4F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
Manifest number: 086E
Signing time: Sun 29 Mar 2026 10:01:10 +0000
Manifest this update: Sun 29 Mar 2026 10:01:10 +0000
Manifest next update: Mon 30 Mar 2026 10:01:10 +0000
Files and hashes: 1: fqigEMxtfJMg4BLqHR424KdhwTg.crl (hash: CpjlsXsAiOO65NG3HCA8NxdIzQWeR5BxPBerHEXvdhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:52:e8:9c:f5:fe:78:cc:da:c0:25:b9:6b:4f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ea8a010cc6d7c9320e012ea1d1e36e0a761c138
Validity
Not Before: Mar 29 10:01:10 2026 GMT
Not After : Mar 30 10:01:10 2026 GMT
Subject: CN=51510ebe8514a4b7e0eb8eac6f34c9b17dc25289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:db:36:e9:ac:b8:a6:cf:40:b1:20:49:0a:fe:
9e:39:5b:87:50:12:d7:ec:ae:7e:df:65:14:ea:d4:
11:e1:73:15:cf:c9:4a:4c:de:ca:ab:3e:ed:30:f0:
69:fd:4c:b9:d7:a8:81:a8:bf:6d:f6:5d:d5:51:b0:
2b:53:b6:e8:72:b9:b8:76:08:76:dc:8a:b8:19:6c:
d9:36:f4:ec:52:06:a0:31:60:37:d4:51:78:ce:0b:
e8:f8:16:b6:8d:ed:60:c2:0a:50:06:6a:e7:eb:3d:
ce:02:26:4e:7c:b5:d4:06:e5:11:88:4e:d2:fd:64:
7e:4f:1f:a5:c3:b3:be:11:9a:fc:c1:bc:de:a8:81:
58:bb:0a:9a:92:7e:9e:f7:1b:3e:56:6d:d0:75:b2:
ec:87:f9:eb:1d:54:c7:6d:b7:8d:31:d8:63:63:75:
bb:80:36:85:e6:d6:8b:ea:80:b1:64:c6:44:26:c6:
b7:50:1c:ed:58:eb:d1:d5:5c:90:5c:8b:74:f5:49:
f7:94:40:cc:5b:76:2d:5a:4a:e6:1d:fb:6a:f0:71:
76:51:97:ef:dd:77:59:db:91:50:89:b5:07:e3:7b:
1b:d8:65:02:8e:da:34:22:cf:42:4e:6e:59:67:d7:
fd:7a:bd:dc:6d:ac:41:fd:33:30:cf:c8:b0:70:14:
42:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:51:0E:BE:85:14:A4:B7:E0:EB:8E:AC:6F:34:C9:B1:7D:C2:52:89
X509v3 Authority Key Identifier:
keyid:7E:A8:A0:10:CC:6D:7C:93:20:E0:12:EA:1D:1E:36:E0:A7:61:C1:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fqigEMxtfJMg4BLqHR424KdhwTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/baa86e-7fc6-442f-ade1-45befbf1ef7f/1/fqigEMxtfJMg4BLqHR424KdhwTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:59:0e:df:3c:8d:b6:ca:2a:f4:25:76:cf:43:bc:43:ff:ab:
d2:c9:c9:a8:63:d6:d7:4d:76:09:9f:97:9b:8f:0f:d5:01:72:
be:90:9a:ad:5c:1e:fd:37:9f:61:8d:e2:94:98:bc:04:d5:c0:
ec:86:ed:0f:f6:ca:a8:89:a7:cd:fd:92:6c:43:6e:6f:6d:81:
e7:d0:c6:1e:8f:40:20:54:1e:1d:bb:2f:23:71:6d:9a:09:ba:
0d:99:f6:1e:f6:bf:53:18:cc:26:7c:85:61:77:c6:56:e4:a2:
d1:03:bf:f0:e2:31:28:4a:07:0c:f6:67:d7:68:8b:f6:00:7c:
40:79:1a:29:53:de:b9:a8:57:22:a3:70:e1:77:ec:5e:f6:2c:
6e:f0:ad:fe:8e:ab:6e:e1:4a:54:e9:68:ff:d3:db:0d:28:e1:
c9:42:4b:95:8e:7e:15:d0:35:41:3c:da:7e:fe:26:86:aa:eb:
6d:01:3e:83:da:6f:cd:c6:56:d1:5d:6a:66:f6:79:74:d9:27:
3b:42:28:49:6f:99:7d:b7:e2:f6:c6:62:45:ca:1f:a8:99:fe:
6b:21:e5:4d:a9:55:dc:a0:69:1d:ef:e5:5a:71:03:3e:29:45:
0d:2b:d9:2f:6a:fc:e2:a1:96:ca:8a:3e:77:23:8f:a3:1d:1f:
55:1d:55:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:23:27 2026 by rpki-client