Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
File: qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft (raw, json)
Hash identifier: 07I6hdx6wveLfmryaQMjQFlCDtpEWj/yCb8xU6y3i0U=
Subject key identifier: F5:34:19:F0:E3:EC:30:D0:15:9C:ED:54:8A:7E:CF:C1:33:DF:2F:3D
Authority key identifier: A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
Certificate issuer: /CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Certificate serial: 019D37C103BB231F7F077B9A9C7174CC563F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
Manifest number: 137C
Signing time: Sun 29 Mar 2026 04:01:29 +0000
Manifest this update: Sun 29 Mar 2026 04:01:29 +0000
Manifest next update: Mon 30 Mar 2026 04:01:29 +0000
Files and hashes: 1: qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl (hash: 9U+8iB7VOZzdum5X9/zAQtiNAJghYqLXHpChBeizrlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:03:bb:23:1f:7f:07:7b:9a:9c:71:74:cc:56:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8ebd8ae6fd52bbbd4970c216163d9b2b0f0f241
Validity
Not Before: Mar 29 04:01:29 2026 GMT
Not After : Mar 30 04:01:29 2026 GMT
Subject: CN=f53419f0e3ec30d0159ced548a7ecfc133df2f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fe:ce:98:5f:ca:d7:33:0b:46:6c:c7:cc:ff:
4c:51:c4:14:7e:d4:ef:48:7b:4a:21:66:22:5d:87:
80:5b:ab:d0:ae:1b:9d:59:a6:81:ef:bc:2e:04:78:
22:42:c4:fc:e5:1a:f5:b0:1c:63:fb:cb:ca:61:a8:
aa:1b:24:af:13:ac:6d:16:c6:d2:0b:88:92:9f:f4:
6a:2e:f9:4c:6f:ea:b7:9c:6b:2b:55:b1:2c:74:ac:
72:6d:0b:18:db:ff:4e:53:17:9c:a5:24:ac:4f:ab:
1c:ae:80:c6:08:69:44:e8:60:fe:64:75:ee:37:58:
65:d4:00:45:0d:66:40:77:31:e0:d4:13:00:46:df:
99:8c:a2:ed:1c:82:50:44:1a:cc:3f:b1:f5:a4:10:
20:b3:38:09:2a:85:43:e7:96:96:8f:cb:38:78:ca:
23:fb:60:e2:2b:f7:a1:ea:60:ca:c7:cb:f9:41:b6:
01:cd:d8:fc:7d:89:6b:f5:57:7c:9d:84:38:6e:eb:
47:d9:5e:83:09:85:e8:c0:f7:44:83:c1:a6:39:2c:
aa:b5:33:eb:b4:3f:c7:8e:84:6f:2c:f0:1c:f4:d5:
03:5a:fa:55:fd:ff:1f:c7:0c:e6:1a:14:65:86:93:
34:06:b2:f9:e0:1b:d0:25:69:68:dc:d5:f0:28:6f:
6d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:34:19:F0:E3:EC:30:D0:15:9C:ED:54:8A:7E:CF:C1:33:DF:2F:3D
X509v3 Authority Key Identifier:
keyid:A8:EB:D8:AE:6F:D5:2B:BB:D4:97:0C:21:61:63:D9:B2:B0:F0:F2:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qOvYrm_VK7vUlwwhYWPZsrDw8kE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/6ec0c8-1c8b-4473-97fd-e1c4c4aa0e1d/1/qOvYrm_VK7vUlwwhYWPZsrDw8kE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:12:0c:e8:3f:d0:6a:dd:29:2b:2e:ec:77:fa:71:82:8b:e9:
ca:4d:06:7d:9d:86:94:c8:73:15:c4:57:79:41:2c:69:3a:02:
be:74:1c:3c:99:33:76:b2:73:67:b1:40:0b:6b:05:1a:06:79:
f9:6c:aa:bc:de:96:6c:7e:97:fd:fe:60:2e:2a:00:3c:b9:f1:
09:a5:8f:a0:6d:d0:04:60:91:da:3d:11:0e:8f:95:c7:90:02:
69:09:f7:a0:8b:b8:4c:28:dc:ab:35:da:22:5f:34:d1:b7:d4:
02:59:44:99:bd:94:e1:8a:d3:81:d6:27:fe:2b:ac:6a:eb:46:
1a:71:93:97:bb:95:72:f6:51:12:6e:51:ad:cd:1d:ad:d3:a8:
67:f7:24:57:c1:bf:9a:e3:a7:48:4c:cf:6d:54:43:73:25:f3:
90:e8:ce:a6:93:d9:57:b5:b8:44:54:04:e2:69:76:65:5d:ef:
c4:f9:c5:9f:5c:f4:7d:40:71:c9:1c:23:03:f6:09:df:69:74:
a5:65:ab:7d:96:cf:0c:3d:32:1d:0f:16:b4:56:9b:8a:8c:6a:
11:d8:f5:19:97:b3:5c:5a:55:f9:09:84:e4:ea:65:f5:b9:81:
54:60:d7:00:e8:69:1a:df:f4:24:61:a5:85:ed:1b:f9:3d:62:
8a:31:a2:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:43:29 2026 by rpki-client