Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
File: QurpaJeCnA3hU3K6GMRA9oeasZM.mft (raw, json)
Hash identifier: a4nWR42sVsLUlekYzMFJnEWzKOi1DSpZoBDsQZsynYg=
Subject key identifier: 66:F8:93:A4:94:C5:03:3C:42:19:5C:CD:F5:89:08:9E:27:1F:86:13
Authority key identifier: 42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
Certificate issuer: /CN=42eae96897829c0de15372ba18c440f6879ab193
Certificate serial: 019D27A86AFB9CCCE1CC476241257830EFF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
Manifest number: 08F7
Signing time: Thu 26 Mar 2026 01:00:41 +0000
Manifest this update: Thu 26 Mar 2026 01:00:41 +0000
Manifest next update: Fri 27 Mar 2026 01:00:41 +0000
Files and hashes: 1: QurpaJeCnA3hU3K6GMRA9oeasZM.crl (hash: rpQvxoQoek/xO5g6knuQYjKmtOnnmL+f+5zywj3DXmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:6a:fb:9c:cc:e1:cc:47:62:41:25:78:30:ef:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42eae96897829c0de15372ba18c440f6879ab193
Validity
Not Before: Mar 26 01:00:41 2026 GMT
Not After : Mar 27 01:00:41 2026 GMT
Subject: CN=66f893a494c5033c42195ccdf589089e271f8613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:50:b2:2e:72:57:bf:70:c5:ee:7f:06:90:6d:
b8:a8:4a:13:e2:2d:fc:fd:7c:51:39:fd:a1:4d:60:
de:87:ab:1b:8b:4b:1c:ea:56:53:88:66:b6:ea:34:
8c:7a:76:f8:a8:1d:18:56:77:e6:1a:0f:3e:79:aa:
d2:5c:12:35:9b:54:2b:63:85:4a:e2:9c:4b:05:0c:
04:2c:bc:25:79:f5:88:13:97:47:62:9f:02:0c:9b:
4f:d2:53:58:6a:54:a3:90:91:03:93:da:a6:a4:52:
26:83:b4:b7:3b:dd:99:4f:43:97:9f:12:c2:39:fa:
35:c3:0b:05:7c:6e:b5:94:dc:1e:7d:0e:bf:45:4c:
1e:32:b5:33:f4:cb:0d:16:0d:12:99:06:2c:f0:7b:
29:6d:27:53:47:31:dd:30:26:78:85:41:70:7a:33:
9f:95:9f:01:15:e7:37:f7:c0:1f:04:72:0f:d7:54:
3e:b7:6c:4b:d7:fe:92:ef:a2:bd:99:c9:b3:ce:91:
53:24:52:3d:36:60:da:3a:08:e5:61:4c:36:cf:26:
11:21:fb:79:c5:85:3c:90:84:9c:ce:ef:ac:74:22:
df:32:94:85:24:45:4d:f5:7f:78:0c:c7:7c:bb:34:
7f:9e:b9:78:39:93:08:c3:c9:24:ef:69:30:3e:d3:
11:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:F8:93:A4:94:C5:03:3C:42:19:5C:CD:F5:89:08:9E:27:1F:86:13
X509v3 Authority Key Identifier:
keyid:42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:9d:00:d7:c9:1f:32:e8:8d:4f:70:a0:84:0c:aa:88:98:97:
86:c4:3b:e1:3d:e0:8e:7a:fa:76:e7:e0:2c:c0:15:51:e1:92:
f6:fa:8b:e7:9f:cd:60:d6:7b:70:65:44:bf:f8:6c:75:68:46:
30:3d:47:f7:b3:1b:53:83:3e:e0:38:2d:96:32:a0:bb:c8:a6:
c2:47:26:16:af:63:c5:a8:d9:46:61:83:d8:02:ac:39:a9:e8:
5b:38:14:64:f9:0c:d1:d9:92:4c:79:e7:fe:da:35:a1:51:57:
4e:36:93:f8:07:63:d5:46:bf:4d:52:de:6b:ea:ed:0c:2a:7b:
09:d6:70:97:fe:0b:06:7f:a4:c7:e4:5d:fc:08:12:dd:de:e8:
41:25:0b:81:81:5d:79:9c:7b:d5:5a:94:99:81:89:90:ac:e6:
ae:9b:bb:fc:d3:c0:7e:e0:29:ae:fd:41:9d:fc:a8:c4:df:d5:
07:78:61:50:fa:8e:e2:62:4f:c8:4e:c7:6e:ab:5e:6a:ed:2d:
4b:11:fe:20:a4:58:16:53:c8:e4:d1:88:ac:65:07:21:5e:e3:
ec:12:fe:1c:0f:09:d4:b4:0e:97:38:4b:20:89:51:4a:0c:18:
60:ce:2e:78:96:c8:f4:66:0e:30:eb:14:69:60:7e:b9:4c:e5:
19:bc:a2:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqGr7nMzhzEdiQSV4MO/4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZWFlOTY4OTc4MjljMGRlMTUzNzJiYTE4YzQ0MGY2ODc5
YWIxOTMwHhcNMjYwMzI2MDEwMDQxWhcNMjYwMzI3MDEwMDQxWjAzMTEwLwYDVQQD
Eyg2NmY4OTNhNDk0YzUwMzNjNDIxOTVjY2RmNTg5MDg5ZTI3MWY4NjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3FCyLnJXv3DF7n8GkG24qEoT4i38
/XxROf2hTWDeh6sbi0sc6lZTiGa26jSMenb4qB0YVnfmGg8+earSXBI1m1QrY4VK
4pxLBQwELLwlefWIE5dHYp8CDJtP0lNYalSjkJEDk9qmpFImg7S3O92ZT0OXnxLC
Ofo1wwsFfG61lNwefQ6/RUweMrUz9MsNFg0SmQYs8HspbSdTRzHdMCZ4hUFwejOf
lZ8BFec398AfBHIP11Q+t2xL1/6S76K9mcmzzpFTJFI9NmDaOgjlYUw2zyYRIft5
xYU8kISczu+sdCLfMpSFJEVN9X94DMd8uzR/nrl4OZMIw8kk72kwPtMRgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGb4k6SUxQM8QhlczfWJCJ4nH4YTMB8GA1UdIwQY
MBaAFELq6WiXgpwN4VNyuhjEQPaHmrGTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9hMDVhMmItZTMzNS00OTZkLWE0MTMt
NWIzMDE4NTZlNGIzLzEvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZS9hMDVhMmItZTMzNS00OTZkLWE0MTMtNWIzMDE4NTZlNGIz
LzEvUXVycGFKZUNuQTNoVTNLNkdNUkE5b2Vhc1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3J0A18kf
MuiNT3CghAyqiJiXhsQ74T3gjnr6dufgLMAVUeGS9vqL55/NYNZ7cGVEv/hsdWhG
MD1H97MbU4M+4DgtljKgu8imwkcmFq9jxajZRmGD2AKsOanoWzgUZPkM0dmSTHnn
/to1oVFXTjaT+Adj1Ua/TVLea+rtDCp7CdZwl/4LBn+kx+Rd/AgS3d7oQSULgYFd
eZx71VqUmYGJkKzmrpu7/NPAfuAprv1BnfyoxN/VB3hhUPqO4mJPyE7Hbqteau0t
SxH+IKRYFlPI5NGIrGUHIV7j7BL+HA8J1LQOlzhLIIlRSgwYYM4ueJbI9GYOMOsU
aWB+uUzlGbyiiQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:09 2026 by rpki-client