Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
File: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft (raw, json)
Hash identifier: ny81jayVItKU1ukHSrKWrmOyRJUpELUAJhdCXKx6eGY=
Subject key identifier: BF:35:93:6D:27:B2:36:1B:55:5F:B1:46:2E:AB:26:93:8B:AF:7C:68
Authority key identifier: 43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
Certificate issuer: /CN=43a3517606989eb352f699976f219faec8e350e7
Certificate serial: 019D3865E82E56B441D35EC744C63E2681AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
Manifest number: 188C
Signing time: Sun 29 Mar 2026 07:01:35 +0000
Manifest this update: Sun 29 Mar 2026 07:01:35 +0000
Manifest next update: Mon 30 Mar 2026 07:01:35 +0000
Files and hashes: 1: Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl (hash: sREjCgFq0plVDPeO+WVjjwobX1HfJql0gQcpewc89uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:e8:2e:56:b4:41:d3:5e:c7:44:c6:3e:26:81:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43a3517606989eb352f699976f219faec8e350e7
Validity
Not Before: Mar 29 07:01:35 2026 GMT
Not After : Mar 30 07:01:35 2026 GMT
Subject: CN=bf35936d27b2361b555fb1462eab26938baf7c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:98:a3:bb:1d:2e:e2:57:dd:f1:a5:1e:98:da:
3f:1c:0a:db:6b:bc:f8:03:4c:dc:63:33:35:f8:4c:
86:85:d1:63:69:0a:72:af:bd:89:f2:ad:e5:af:ba:
38:c7:34:97:0c:90:da:ad:6a:f1:71:eb:ba:52:af:
6c:ab:8c:69:26:24:4a:d8:7d:3c:c3:44:51:06:b5:
fc:2a:cc:47:c7:ae:65:03:19:b6:82:0c:64:d7:24:
49:69:81:d9:13:03:f1:79:fe:d0:c7:44:e9:6e:45:
8f:f5:a7:85:53:77:2e:5c:f1:54:a2:3c:83:e2:2e:
ee:68:3f:db:1a:01:64:91:23:71:c4:50:88:b7:40:
49:1e:15:79:b3:63:7a:86:e4:24:a8:ba:b2:02:37:
90:1b:47:a5:3a:66:81:1c:08:02:da:af:a4:48:bd:
b6:cb:4c:5d:dc:9a:23:74:83:2e:23:20:6e:c7:e8:
32:9e:7c:4c:29:ec:be:39:65:b9:32:a6:b8:f4:01:
ca:53:ac:72:ee:a3:ed:c0:e4:c9:c9:d1:78:40:30:
5a:49:41:6c:dc:e9:7c:14:dc:5e:1d:41:5a:63:64:
8f:6f:bc:63:c0:6b:d1:d6:d7:a7:3b:be:16:2d:a9:
0f:9d:5c:d0:ff:63:6f:03:d4:14:d7:2b:87:c8:d2:
a6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:35:93:6D:27:B2:36:1B:55:5F:B1:46:2E:AB:26:93:8B:AF:7C:68
X509v3 Authority Key Identifier:
keyid:43:A3:51:76:06:98:9E:B3:52:F6:99:97:6F:21:9F:AE:C8:E3:50:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1f6f95-329a-4652-be22-b0a2dedc65a6/1/Q6NRdgaYnrNS9pmXbyGfrsjjUOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:dc:37:ea:64:a2:c5:7e:eb:28:1b:47:b0:56:28:24:16:93:
8a:f0:11:9f:6f:53:da:cf:9d:10:f8:3b:26:a2:35:aa:52:b1:
24:5f:fb:e8:d2:a3:5a:2f:fe:76:6f:1a:a2:73:c2:e4:64:41:
a2:e9:e0:a8:44:b6:17:b6:26:c7:eb:c3:ef:2a:32:35:65:1d:
79:9d:8d:fa:5a:0d:69:b2:2c:31:93:36:12:69:f9:a4:33:31:
73:3a:cd:96:26:d9:8b:bc:ab:bd:2c:26:80:f0:cc:f5:ce:32:
02:b1:e0:40:de:0c:5d:6a:7c:a3:d4:55:4b:f1:c3:90:6c:05:
03:22:a9:5c:a7:0f:8f:f5:ee:50:71:32:83:dd:81:99:2d:ed:
5f:77:b8:17:33:64:3d:56:cf:34:60:d9:31:0d:30:23:7e:dd:
0d:f6:60:51:16:c9:46:de:18:26:0d:da:64:4b:37:6a:9d:28:
d8:b2:ed:a8:fe:92:e0:89:04:0a:39:41:9d:22:cc:f7:83:d1:
5f:c5:11:f4:5d:46:60:fc:25:6e:59:69:bb:41:e8:9d:3f:f7:
31:a9:44:d9:3e:6d:c0:e5:e0:9a:04:19:09:78:42:51:d8:0f:
ca:c0:2a:3c:ba:56:72:d5:b5:86:dd:3c:7f:92:c4:9b:72:69:
90:58:4b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:42 2026 by rpki-client