Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
File: Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft (raw, json)
Hash identifier: aEppu0dlC8CGF4/6Djls25A6azDEG/NMoSXiJwdsIg0=
Subject key identifier: 3A:57:8D:35:E8:D3:90:11:B9:04:CF:76:96:B4:6C:6C:F0:6A:F4:0F
Authority key identifier: 46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
Certificate issuer: /CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Certificate serial: 019D2703DE02765D089CBEF9581AF67B802B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
Manifest number: 1883
Signing time: Wed 25 Mar 2026 22:00:57 +0000
Manifest this update: Wed 25 Mar 2026 22:00:57 +0000
Manifest next update: Thu 26 Mar 2026 22:00:57 +0000
Files and hashes: 1: Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl (hash: /Xsm2Mq84Wk89Iz7H3OJdbOIg3p3DfcVzUhZW1YIkq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:de:02:76:5d:08:9c:be:f9:58:1a:f6:7b:80:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46ab3bf836265f2aab8f919be8cfb6eb747e5f78
Validity
Not Before: Mar 25 22:00:57 2026 GMT
Not After : Mar 26 22:00:57 2026 GMT
Subject: CN=3a578d35e8d39011b904cf7696b46c6cf06af40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5b:43:50:3d:78:1c:3a:54:86:ee:09:f4:79:
f3:00:00:7b:6d:08:66:7f:b3:2c:f1:25:fc:e5:a5:
07:4d:b8:38:63:91:b7:52:25:a7:c8:e7:e9:39:27:
7f:d3:96:e7:36:da:ac:70:2e:cc:77:66:2b:78:29:
ce:6c:0a:bf:e0:07:5f:5c:75:12:1f:d8:7a:e2:b8:
a4:f3:72:32:af:2b:b8:04:ea:86:ff:c2:09:28:cd:
c7:01:8a:28:20:4d:09:f6:59:4e:68:61:cd:9f:a9:
c7:be:68:99:dd:3b:cd:ea:9d:3a:0e:64:29:e5:a8:
67:05:ca:18:a8:07:a3:50:9f:c6:56:5a:b7:11:38:
6b:75:d1:70:b7:59:58:ff:4d:a2:ec:46:01:1c:da:
55:b6:f4:5b:07:a1:71:45:30:d6:b0:65:45:66:a4:
ac:2d:0c:94:6d:7a:5a:5b:57:06:b4:69:f9:a6:f8:
de:f7:fe:c9:b9:5f:f8:50:4f:73:5d:a1:2e:38:db:
bc:7e:c0:e1:b2:c2:c7:39:16:df:f6:24:c3:11:d4:
bc:7e:ad:05:a7:ff:4a:6e:e7:f5:31:8f:20:06:b9:
58:f7:e2:0c:6d:4d:b9:59:47:ca:37:df:71:e3:6c:
91:05:0f:95:6c:dc:cd:3f:5b:52:58:bd:a7:d4:68:
1c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:57:8D:35:E8:D3:90:11:B9:04:CF:76:96:B4:6C:6C:F0:6A:F4:0F
X509v3 Authority Key Identifier:
keyid:46:AB:3B:F8:36:26:5F:2A:AB:8F:91:9B:E8:CF:B6:EB:74:7E:5F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rqs7-DYmXyqrj5Gb6M-263R-X3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/af7274-cce4-42a6-9343-3d286e8651fc/1/Rqs7-DYmXyqrj5Gb6M-263R-X3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:94:6c:d7:8f:09:62:dd:b6:0f:ca:cb:60:5f:51:5f:24:54:
c8:e6:b1:f2:00:14:9d:89:0d:70:82:06:53:26:ba:7a:c0:f9:
e5:15:d7:ae:b8:00:e3:78:d5:3d:81:e8:4d:d5:9d:d7:e4:98:
5e:a7:8e:ad:7a:10:a1:11:5c:ba:eb:86:9f:7d:17:4f:28:dc:
4b:49:7e:66:fc:b4:df:63:9e:cf:87:b5:56:98:f4:4a:4a:67:
85:58:17:15:87:02:9d:af:84:61:70:3f:b9:b6:f0:75:c0:38:
7c:1c:af:af:17:04:be:a4:29:3c:9e:0a:db:16:1c:34:37:49:
70:fe:8d:26:d1:08:db:63:5f:79:dc:28:48:26:a1:e8:73:b6:
90:78:1c:4a:1a:fe:72:cd:47:7d:57:ec:02:9a:d9:64:00:f9:
7a:ac:c7:99:99:94:40:59:cb:a6:ca:4d:e6:c2:f4:c3:ca:aa:
83:36:5a:a2:c6:44:c3:9d:c7:c0:4b:15:93:b5:f7:e1:80:7c:
57:12:59:68:dd:0c:07:10:6c:52:20:92:db:f6:55:f4:41:3a:
a4:64:d9:46:81:97:8e:de:f9:06:79:0e:57:ec:7e:06:70:14:
3d:5b:a9:66:d3:fa:d4:22:e3:8d:54:06:ce:33:7d:4a:e2:7f:
ec:0d:20:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nA94Cdl0InL75WBr2e4ArMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2YWIzYmY4MzYyNjVmMmFhYjhmOTE5YmU4Y2ZiNmViNzQ3
ZTVmNzgwHhcNMjYwMzI1MjIwMDU3WhcNMjYwMzI2MjIwMDU3WjAzMTEwLwYDVQQD
EygzYTU3OGQzNWU4ZDM5MDExYjkwNGNmNzY5NmI0NmM2Y2YwNmFmNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwltDUD14HDpUhu4J9HnzAAB7bQhm
f7Ms8SX85aUHTbg4Y5G3UiWnyOfpOSd/05bnNtqscC7Md2YreCnObAq/4AdfXHUS
H9h64rik83Iyryu4BOqG/8IJKM3HAYooIE0J9llOaGHNn6nHvmiZ3TvN6p06DmQp
5ahnBcoYqAejUJ/GVlq3EThrddFwt1lY/02i7EYBHNpVtvRbB6FxRTDWsGVFZqSs
LQyUbXpaW1cGtGn5pvje9/7JuV/4UE9zXaEuONu8fsDhssLHORbf9iTDEdS8fq0F
p/9Kbuf1MY8gBrlY9+IMbU25WUfKN99x42yRBQ+VbNzNP1tSWL2n1GgcbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpXjTXo05ARuQTPdpa0bGzwavQPMB8GA1UdIwQY
MBaAFEarO/g2Jl8qq4+Rm+jPtut0fl94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnFzNy1EWW1YeXFyajVHYjZNLTI2M1ItWDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9hZjcyNzQtY2NlNC00MmE2LTkzNDMt
M2QyODZlODY1MWZjLzEvUnFzNy1EWW1YeXFyajVHYjZNLTI2M1ItWDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9hZjcyNzQtY2NlNC00MmE2LTkzNDMtM2QyODZlODY1MWZj
LzEvUnFzNy1EWW1YeXFyajVHYjZNLTI2M1ItWDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJRs148J
Yt22D8rLYF9RXyRUyOax8gAUnYkNcIIGUya6esD55RXXrrgA43jVPYHoTdWd1+SY
XqeOrXoQoRFcuuuGn30XTyjcS0l+Zvy032Oez4e1Vpj0SkpnhVgXFYcCna+EYXA/
ubbwdcA4fByvrxcEvqQpPJ4K2xYcNDdJcP6NJtEI22NfedwoSCah6HO2kHgcShr+
cs1HfVfsAprZZAD5eqzHmZmUQFnLpspN5sL0w8qqgzZaosZEw53HwEsVk7X34YB8
VxJZaN0MBxBsUiCS2/ZV9EE6pGTZRoGXjt75BnkOV+x+BnAUPVupZtP61CLjjVQG
zjN9SuJ/7A0gxA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:19 2026 by rpki-client