Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
File: rsqu_IRN7K6xKV2CalKOhFurG-A.mft (raw, json)
Hash identifier: JZprHirYoal+nspA2k0Wa4VqkplUuDbRQdCCD434DeI=
Subject key identifier: FB:FD:3B:3A:4F:02:4D:8C:32:CF:2A:D5:8E:82:AB:B7:BD:78:B7:5D
Authority key identifier: AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
Certificate issuer: /CN=aecaaefc844decaeb1295d826a528e845bab1be0
Certificate serial: 019D265FF1B52E7E35B8CE92224A42C597F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
Manifest number: 1047
Signing time: Wed 25 Mar 2026 19:01:55 +0000
Manifest this update: Wed 25 Mar 2026 19:01:55 +0000
Manifest next update: Thu 26 Mar 2026 19:01:55 +0000
Files and hashes: 1: rsqu_IRN7K6xKV2CalKOhFurG-A.crl (hash: 4yyKC8jIz4bZdlSA19iUPDER0fpxT5+NR7Jruvk+fDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:f1:b5:2e:7e:35:b8:ce:92:22:4a:42:c5:97:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecaaefc844decaeb1295d826a528e845bab1be0
Validity
Not Before: Mar 25 19:01:55 2026 GMT
Not After : Mar 26 19:01:55 2026 GMT
Subject: CN=fbfd3b3a4f024d8c32cf2ad58e82abb7bd78b75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:63:92:35:a9:1b:12:12:1b:6d:70:1c:46:85:
d7:c2:cc:c2:70:b0:95:44:7a:1f:b9:db:11:7c:59:
a7:50:32:75:f5:98:e9:d5:49:96:af:a0:bf:7e:a7:
26:cc:9f:97:ad:5a:3b:cf:65:0d:93:f4:e0:1e:a9:
35:5f:ca:83:27:c7:1e:63:d5:2e:d7:19:b3:07:20:
ea:e6:99:7d:28:d6:e0:3d:d5:1e:0e:95:4c:30:36:
b7:ef:15:fd:f7:79:f5:f6:4d:ab:8c:bc:08:fe:16:
03:65:89:5f:45:91:f8:7c:9b:9b:8e:f3:e0:a6:0a:
2f:f6:06:8c:56:23:87:c3:db:ab:40:0a:8d:e1:ed:
7f:cc:21:57:76:27:fc:d5:3d:33:0e:e9:ba:89:88:
72:5f:f8:da:a3:e0:51:9c:ce:0a:d3:38:fa:ba:9a:
67:5d:77:38:83:bc:f0:93:3a:7b:4a:3b:55:3f:0a:
49:3e:99:42:e1:d4:bd:d2:51:f7:64:25:7b:09:15:
18:7d:59:98:43:35:82:23:23:79:7a:c8:58:23:ff:
d4:41:b4:9d:81:26:6f:82:ff:eb:dd:96:31:ab:1f:
99:b9:0b:f7:59:c0:78:ac:99:05:f6:9c:30:f0:af:
a1:76:50:26:44:54:43:7c:d6:3c:c6:9a:1d:39:7e:
d1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:FD:3B:3A:4F:02:4D:8C:32:CF:2A:D5:8E:82:AB:B7:BD:78:B7:5D
X509v3 Authority Key Identifier:
keyid:AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:aa:f1:12:6e:8e:17:e6:ed:58:9d:2b:2a:70:98:05:e8:af:
a9:2e:39:92:2b:f4:19:40:ed:bd:7c:88:50:db:63:ce:2d:4b:
16:7e:ff:e5:91:39:08:3c:78:0a:e5:16:6b:eb:06:8d:20:39:
7a:3b:db:67:fc:16:d9:23:82:7d:64:e0:7a:ee:49:1d:05:8b:
84:2f:82:84:fc:92:57:01:39:2d:8e:53:f8:77:72:6b:cc:c3:
7f:e5:dd:e4:82:31:65:81:2c:d2:b9:16:05:f0:6b:99:94:33:
d1:5b:50:f7:d8:e2:8d:50:86:2e:f2:bc:ab:b3:1a:55:bc:89:
63:22:79:7d:89:db:21:17:1f:7f:3b:9a:a0:55:b0:e1:a6:f4:
aa:81:5b:32:bf:51:42:b6:cb:d5:2f:f8:67:9e:3c:20:de:f2:
78:51:ea:ef:c1:c1:8a:4a:eb:ed:0f:ca:61:de:54:29:15:3b:
3e:ef:eb:dc:f6:9b:be:70:37:d5:85:41:9d:b6:c7:cc:53:88:
0e:a3:f2:c2:f8:9b:93:75:0d:8e:21:4d:88:fa:c0:27:4c:80:
86:cc:38:94:cc:e2:1c:74:da:1d:de:27:4e:e4:b5:b7:d9:67:
b7:3e:b3:c9:44:68:d9:6c:8e:f7:4c:e6:03:b3:53:10:40:c7:
c6:71:51:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX/G1Ln41uM6SIkpCxZf4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlY2FhZWZjODQ0ZGVjYWViMTI5NWQ4MjZhNTI4ZTg0NWJh
YjFiZTAwHhcNMjYwMzI1MTkwMTU1WhcNMjYwMzI2MTkwMTU1WjAzMTEwLwYDVQQD
EyhmYmZkM2IzYTRmMDI0ZDhjMzJjZjJhZDU4ZTgyYWJiN2JkNzhiNzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2OSNakbEhIbbXAcRoXXwszCcLCV
RHofudsRfFmnUDJ19Zjp1UmWr6C/fqcmzJ+XrVo7z2UNk/TgHqk1X8qDJ8ceY9Uu
1xmzByDq5pl9KNbgPdUeDpVMMDa37xX993n19k2rjLwI/hYDZYlfRZH4fJubjvPg
pgov9gaMViOHw9urQAqN4e1/zCFXdif81T0zDum6iYhyX/jao+BRnM4K0zj6uppn
XXc4g7zwkzp7SjtVPwpJPplC4dS90lH3ZCV7CRUYfVmYQzWCIyN5eshYI//UQbSd
gSZvgv/r3ZYxqx+ZuQv3WcB4rJkF9pww8K+hdlAmRFRDfNY8xpodOX7RIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPv9OzpPAk2MMs8q1Y6Cq7e9eLddMB8GA1UdIwQY
MBaAFK7KrvyETeyusSldgmpSjoRbqxvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNzM5MDUtMzFkZC00NDAxLTlkMWIt
NmQ4ZDkxYzdmYWEwLzEvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hNzM5MDUtMzFkZC00NDAxLTlkMWItNmQ4ZDkxYzdmYWEw
LzEvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXKrxEm6O
F+btWJ0rKnCYBeivqS45kiv0GUDtvXyIUNtjzi1LFn7/5ZE5CDx4CuUWa+sGjSA5
ejvbZ/wW2SOCfWTgeu5JHQWLhC+ChPySVwE5LY5T+Hdya8zDf+Xd5IIxZYEs0rkW
BfBrmZQz0VtQ99jijVCGLvK8q7MaVbyJYyJ5fYnbIRcffzuaoFWw4ab0qoFbMr9R
QrbL1S/4Z548IN7yeFHq78HBikrr7Q/KYd5UKRU7Pu/r3PabvnA31YVBnbbHzFOI
DqPywvibk3UNjiFNiPrAJ0yAhsw4lMziHHTaHd4nTuS1t9lntz6zyURo2WyO90zm
A7NTEEDHxnFRaw==
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:45:11 2026 by rpki-client