Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
File: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft (raw, json)
Hash identifier: JNLjuCoIDXtAoG/lPddM7EDSMwS7V80hw7obsxEs+Ks=
Subject key identifier: EB:62:21:E8:A9:24:40:7E:1F:78:E6:8D:5F:DD:6F:FB:05:7B:E3:8A
Authority key identifier: 42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
Certificate issuer: /CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Certificate serial: 019D25154B838E911F642D56C2ACDBB05DDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
Manifest number: 3B
Signing time: Wed 25 Mar 2026 13:00:45 +0000
Manifest this update: Wed 25 Mar 2026 13:00:45 +0000
Manifest next update: Thu 26 Mar 2026 13:00:45 +0000
Files and hashes: 1: QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl (hash: bcZgv06Jwzd5rrRTaMrok0cXwaZjb0d4uVhoUCclpAo=)
2: UznnCCmWb2U_DwOypllLo7Xxwe8.asa (hash: bm5GW+O8Moz8CwmexqQ5gD2dh8tQCMzUBqUj6Yad+rU=)
3: rhdyAw8cgf05vzajT2FBLQ9vMv4.roa (hash: BXOL4wyuX+9APrFFUb6u0yh2z5n++kBGSbyspApqvFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:15:4b:83:8e:91:1f:64:2d:56:c2:ac:db:b0:5d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42b1af9644c67b5689fc0ca46aaed1692c48e6cc
Validity
Not Before: Mar 25 13:00:45 2026 GMT
Not After : Mar 26 13:00:45 2026 GMT
Subject: CN=eb6221e8a924407e1f78e68d5fdd6ffb057be38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a4:16:d6:39:44:ff:9c:ae:d6:3e:b0:50:53:
95:37:13:a2:a9:f5:a1:6f:19:5e:8a:af:f0:89:0e:
8e:5e:b8:3e:b7:1f:02:cc:4c:29:f7:cf:d8:e6:96:
72:f1:51:33:53:af:e3:12:2a:ad:d2:0e:12:7e:56:
a4:14:7f:1e:e9:0f:f2:58:5b:a4:eb:a6:52:cc:18:
5f:ac:95:5a:5a:c8:85:a6:2a:8a:f9:30:89:69:f4:
a0:d5:3e:b0:4a:e4:11:6e:b3:27:9f:aa:d6:95:c3:
46:b9:96:6c:20:8c:fe:8f:d4:5b:c4:a2:7b:46:f1:
c6:a6:93:71:37:27:cc:96:1b:45:56:8e:f5:1b:c0:
cf:29:d2:7c:da:fd:47:b7:63:c8:3f:f1:22:78:27:
10:78:ae:1b:cb:61:3b:9c:4a:c1:1b:b2:d1:42:8f:
c8:cb:4e:ea:c3:4b:b3:2c:89:00:70:55:ed:ae:37:
a7:2f:ba:91:18:b7:b1:36:a5:3f:b6:7d:f4:f7:02:
3c:4e:c4:58:87:42:f0:77:b1:5f:4f:c0:9f:38:e3:
d6:bf:2b:0b:48:3a:af:68:74:c4:7e:85:d3:22:a1:
ff:84:fb:f5:3e:43:e4:02:aa:cd:b5:c2:c8:a9:af:
bf:07:69:c1:b2:9f:92:d8:8d:5d:f2:ee:ee:ba:54:
34:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:62:21:E8:A9:24:40:7E:1F:78:E6:8D:5F:DD:6F:FB:05:7B:E3:8A
X509v3 Authority Key Identifier:
keyid:42:B1:AF:96:44:C6:7B:56:89:FC:0C:A4:6A:AE:D1:69:2C:48:E6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/115f59-3869-4e11-a0d4-f2b71f43a316/1/QrGvlkTGe1aJ_Aykaq7RaSxI5sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d9:2e:18:8d:f7:2d:50:99:0f:4e:8a:57:03:7e:51:d9:f0:
ea:0b:44:65:dc:ab:7f:35:09:a7:06:cd:ab:13:29:07:bf:26:
fe:4c:55:ad:23:4d:c5:47:60:dd:9b:f8:9d:14:d5:ac:6d:dc:
c9:56:c8:08:ff:94:2c:68:67:20:ca:42:2d:3c:d0:94:b8:05:
ad:bf:2d:f7:07:a1:7a:af:77:95:fa:0b:cf:73:d5:fb:ec:aa:
ec:fb:97:52:30:b3:ea:ae:c0:33:94:ae:e1:b6:b6:33:c7:11:
95:09:c3:fd:b0:fe:2b:d9:1a:77:6e:c3:45:d1:4a:46:3a:65:
d8:34:db:a4:b4:35:cf:fb:f5:8e:6c:c0:00:ce:a8:69:a3:77:
bb:3e:9e:51:94:33:2e:30:6d:26:90:00:85:a0:9f:ee:e9:67:
00:20:31:cd:09:af:bf:ac:2f:1d:36:c6:8f:3b:fc:42:dd:83:
9f:07:e3:3f:1c:bd:e3:7c:c2:bc:b2:9d:10:02:56:a7:45:31:
ad:16:b7:30:44:da:ca:01:22:79:03:ee:76:ef:10:7a:73:1c:
b4:05:61:c5:54:e7:21:4f:78:8c:d9:c2:b5:28:b7:98:2e:7f:
e2:3a:c3:9f:14:dc:67:2b:6c:84:87:b1:f5:da:47:51:82:1b:
c7:8f:bb:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:23:19 2026 by rpki-client