Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
File: qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft (raw, json)
Hash identifier: Zb/RpA5WIRwXZlSiPQJpTX/e6HkZ9HtUZZxTE+bcNsM=
Subject key identifier: 9C:13:E9:71:C3:8D:19:AE:F1:A8:69:02:4B:1A:82:54:E8:3B:9C:9A
Authority key identifier: A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23
Certificate issuer: /CN=a948d011edb8cd33e66767880ca4ab3061d9c523
Certificate serial: 019D2A045C429228708CA17D964D63A732EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
Manifest number: 059F
Signing time: Thu 26 Mar 2026 12:00:21 +0000
Manifest this update: Thu 26 Mar 2026 12:00:21 +0000
Manifest next update: Fri 27 Mar 2026 12:00:21 +0000
Files and hashes: 1: qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl (hash: 0TkvMlGiayTgi2Oaam573PpVgP3nfpaiVUw/uFsILtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:5c:42:92:28:70:8c:a1:7d:96:4d:63:a7:32:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a948d011edb8cd33e66767880ca4ab3061d9c523
Validity
Not Before: Mar 26 12:00:21 2026 GMT
Not After : Mar 27 12:00:21 2026 GMT
Subject: CN=9c13e971c38d19aef1a869024b1a8254e83b9c9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:de:8b:9f:28:11:47:97:4b:98:25:30:77:96:
55:ba:78:b0:28:0d:a9:a0:ed:63:1c:ef:3b:cb:2f:
34:29:5f:29:48:10:11:94:7b:92:c7:98:3b:18:92:
31:28:0f:d2:9f:78:e8:5e:04:c8:a9:66:b4:ce:67:
85:bf:22:5d:0e:33:fd:ce:d2:bb:3f:7d:b3:c3:ca:
54:31:fa:30:f8:23:1f:58:a1:b5:86:04:5a:10:68:
8b:ad:24:14:be:b9:bf:04:3f:ce:9b:81:65:f3:dc:
1f:ed:81:8f:43:37:37:a7:7e:09:24:86:e7:3b:2e:
41:16:ca:d0:31:9b:2c:6d:3b:7f:63:86:be:f1:b4:
94:ae:3f:4b:b5:2c:9a:bd:6a:87:e6:16:21:01:74:
c3:53:0a:b2:70:2a:15:1e:72:f9:e7:7c:7b:b8:08:
5c:e5:08:f6:24:8f:b9:9e:d1:88:22:8c:46:06:b2:
c5:6a:d9:ed:ce:03:84:ef:64:61:86:13:f6:e4:cd:
5a:b0:14:41:de:23:3c:2a:1b:43:ff:7c:cc:9c:94:
4d:19:1a:ec:a0:1f:79:61:b7:12:8b:df:11:35:0c:
5e:3c:96:dd:0f:e0:d5:a8:8f:43:c3:c5:f7:b2:2d:
62:61:66:1b:bf:c9:a0:d6:75:dc:d0:db:0b:cf:8e:
6b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:13:E9:71:C3:8D:19:AE:F1:A8:69:02:4B:1A:82:54:E8:3B:9C:9A
X509v3 Authority Key Identifier:
keyid:A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:3f:8e:f3:0c:b4:c3:4f:8a:75:4e:5d:c7:ce:db:06:ef:e9:
6b:13:b8:b0:4b:94:f7:d2:e3:8a:15:19:bc:c2:a8:6d:21:7a:
2d:af:f7:30:8f:f5:9b:bb:80:81:98:bf:17:59:c6:83:59:3f:
12:46:dc:3e:0f:8d:9c:4a:9b:ae:cc:9f:f6:d4:93:3a:14:78:
62:03:69:12:6b:10:ff:cc:2a:b2:fb:fd:5e:53:d0:bd:bf:7a:
3e:92:4c:e4:e1:2e:74:15:07:b5:d8:be:f6:07:7e:2c:af:2a:
24:b3:ac:d7:55:24:45:64:5b:98:2f:52:f9:96:5b:02:66:72:
ee:05:c9:17:3c:e3:c5:9d:52:a9:cf:42:90:8d:ad:8d:06:03:
e4:9e:ec:36:d8:32:fb:c4:95:35:a0:af:62:e6:fb:27:3d:21:
75:ef:2e:7d:ad:4e:42:ef:96:87:c1:df:13:16:a5:f6:8a:19:
d2:97:49:be:63:4d:51:5d:27:ab:ed:73:3f:ee:49:b2:b1:39:
5d:86:7c:74:ce:46:0c:e4:a0:b2:71:ee:79:c7:9a:1e:ce:6d:
1a:ab:40:5a:4e:91:8b:0d:19:85:d0:62:23:4e:37:0e:08:f8:
21:f3:e1:80:8d:06:db:b2:65:df:86:9a:c2:90:c1:50:f2:aa:
e6:17:53:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:14:36 2026 by rpki-client