Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
File: qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json)
Hash identifier: 3WKnzwICmshe+R65OMubgFCiHyicjGweKfJ34BoHM8Q=
Subject key identifier: CA:1E:22:4C:14:8D:09:4B:0F:FD:33:7D:CB:46:3C:42:45:85:9B:C3
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial: 019D330888DE7ADD97BAB1B417719C22B3B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
Manifest number: 1468
Signing time: Sat 28 Mar 2026 06:01:30 +0000
Manifest this update: Sat 28 Mar 2026 06:01:30 +0000
Manifest next update: Sun 29 Mar 2026 06:01:30 +0000
Files and hashes: 1: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: QU5sH2G5w/L9xHMBSaYjJQ9Jen7j3JKJKBRNw27FO1I=)
2: v2V_vI8w7ZXM1sii1UDeeWcwpCA.roa (hash: l5yrsl5tfKirXCQFQ9UTcOUZgIWs2Z58yXBB5pkbhOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:08:88:de:7a:dd:97:ba:b1:b4:17:71:9c:22:b3:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
Validity
Not Before: Mar 28 06:01:30 2026 GMT
Not After : Mar 29 06:01:30 2026 GMT
Subject: CN=ca1e224c148d094b0ffd337dcb463c4245859bc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:8d:f6:27:04:d8:54:39:a1:68:df:cf:b2:35:
30:90:26:fc:eb:1d:17:ee:eb:c9:0c:0a:59:c0:43:
85:57:33:60:3c:6f:c1:43:c3:44:e4:03:1f:54:17:
dc:cb:a7:08:57:76:1b:69:c7:0c:75:92:74:c7:b8:
a5:a8:1f:15:48:52:06:f5:98:00:05:db:f0:0a:eb:
c5:a4:45:b1:b9:b2:b7:95:58:6b:5c:7f:81:81:b0:
96:9f:b6:14:e5:e3:95:9b:89:e0:07:0f:e1:f8:1c:
ae:00:51:66:6c:14:1f:07:95:7c:9b:9d:49:7b:ed:
ac:7b:d7:8b:ec:19:cd:be:2a:ec:2b:0c:cc:06:68:
1c:8b:bd:cb:4e:b1:eb:b6:63:9d:ee:76:7c:7d:cb:
1c:c0:43:20:8f:98:14:ed:8f:8b:ca:61:aa:79:ad:
28:64:15:ea:fa:72:43:83:91:5f:e3:2c:77:c9:92:
e9:e3:ad:e5:d2:10:86:f6:0f:f8:e5:d0:e6:81:09:
23:a2:bc:18:82:7a:67:8f:ec:2a:69:5f:67:a4:db:
7a:a6:80:22:1a:46:eb:92:22:a0:74:17:0b:58:81:
34:cf:2b:8f:3c:bb:85:8e:f5:84:b5:34:4a:ec:51:
2c:50:60:d9:cc:5a:75:51:d4:2a:c4:31:74:f5:d2:
37:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:1E:22:4C:14:8D:09:4B:0F:FD:33:7D:CB:46:3C:42:45:85:9B:C3
X509v3 Authority Key Identifier:
keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:e0:ec:d1:5b:b8:11:0d:d0:16:3f:b7:5f:8f:03:f5:dc:59:
87:29:fe:d6:6f:65:c5:a4:c7:da:e1:33:53:65:7c:34:90:c4:
2e:d9:ad:e0:77:1c:ec:95:50:9c:c0:00:1c:39:7f:14:7f:4c:
4f:e4:ae:ec:66:e5:af:1d:42:7b:bb:76:cb:5d:88:f9:50:6f:
a4:28:fc:29:97:3a:20:37:af:da:ac:7a:75:eb:93:42:c8:c1:
45:54:52:1a:f9:af:03:c5:15:9f:e1:ac:80:7f:50:c9:d9:63:
7d:ed:19:8f:0d:2f:e3:fe:3e:f0:1d:9c:88:37:bf:52:59:85:
22:e0:3d:72:e7:34:69:d4:88:b9:51:05:97:1a:d1:dc:43:21:
e8:aa:5c:df:87:c0:7f:f0:34:19:39:6f:5f:32:30:ca:a0:c4:
4e:c5:72:5b:90:c3:05:b2:52:97:45:c3:e9:66:0b:4f:74:b4:
f9:16:73:12:fc:5c:ae:7d:37:f4:cf:a6:a7:96:86:0e:29:c1:
ef:63:e2:55:82:70:9d:32:f2:2f:01:a5:65:aa:df:7e:cd:33:
9f:ef:c5:61:b6:55:e2:1f:23:d5:d3:d2:02:52:7e:c8:1c:aa:
e5:b7:d9:18:eb:7a:df:91:f3:23:d7:01:01:2e:63:4b:ce:54:
aa:32:dd:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:19 2026 by rpki-client