Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft
File: Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft (raw, json)
Hash identifier: id1pmk0q4JHtbcKc3rX7UakEOpgBA3YgomTTDCrfiu0=
Subject key identifier: 91:2E:68:58:EF:C6:C2:25:B8:D5:88:78:62:97:2C:80:1B:24:51:DD
Authority key identifier: 43:62:BC:90:BA:44:2E:EF:19:D5:E8:25:36:52:32:62:C5:EB:72:A0
Certificate issuer: /CN=4362bc90ba442eef19d5e82536523262c5eb72a0
Certificate serial: 019D2A7277AC70AD737800688B677ED85697
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q2K8kLpELu8Z1eglNlIyYsXrcqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft
Manifest number: 0201
Signing time: Thu 26 Mar 2026 14:00:37 +0000
Manifest this update: Thu 26 Mar 2026 14:00:37 +0000
Manifest next update: Fri 27 Mar 2026 14:00:37 +0000
Files and hashes: 1: Q2K8kLpELu8Z1eglNlIyYsXrcqA.crl (hash: B5AI2CN5GBS+7151j+kFiMFQWoSui1Fye0t/mmzXUNE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q2K8kLpELu8Z1eglNlIyYsXrcqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 14:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:72:77:ac:70:ad:73:78:00:68:8b:67:7e:d8:56:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4362bc90ba442eef19d5e82536523262c5eb72a0
Validity
Not Before: Mar 26 14:00:37 2026 GMT
Not After : Mar 27 14:00:37 2026 GMT
Subject: CN=912e6858efc6c225b8d5887862972c801b2451dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:3d:02:08:62:69:d7:f2:18:43:56:94:fa:2d:
30:f7:32:c5:d5:a5:86:ec:58:54:49:3d:f2:41:77:
c8:0b:04:84:6f:dd:99:e3:b8:e5:9c:0e:dc:ae:67:
ed:d0:cb:36:ce:58:87:97:da:e0:eb:61:ec:07:03:
73:39:75:c8:1e:a3:56:b6:59:4b:a6:65:37:75:52:
e6:96:f2:07:76:27:1f:82:26:77:e4:0b:59:25:69:
9d:b3:34:5e:37:ef:2d:eb:34:df:d7:9a:dc:61:15:
88:70:9f:32:82:6c:fc:a5:2f:bf:04:34:67:dd:13:
61:92:47:73:d0:e0:b8:98:a5:27:5a:18:b4:54:d4:
5e:1a:8e:5d:6e:89:7d:59:fc:13:5f:7a:6b:63:94:
bb:7c:f3:0a:1f:4a:da:79:17:86:3c:68:47:47:90:
13:6f:e6:e9:7a:54:dd:4b:6a:b5:21:a9:83:59:46:
12:c7:d2:76:d3:f1:67:5c:75:1d:ff:a3:b5:96:f2:
73:90:0b:63:c4:41:43:1a:1f:6b:de:53:06:d7:84:
62:df:cb:34:f3:89:cf:2d:6f:f5:78:26:71:7b:bd:
9c:eb:36:c0:5f:33:4d:24:59:da:e1:9e:16:55:bb:
36:c1:97:26:b7:d6:cd:cb:fb:6f:59:1d:78:aa:b5:
79:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2E:68:58:EF:C6:C2:25:B8:D5:88:78:62:97:2C:80:1B:24:51:DD
X509v3 Authority Key Identifier:
keyid:43:62:BC:90:BA:44:2E:EF:19:D5:E8:25:36:52:32:62:C5:EB:72:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q2K8kLpELu8Z1eglNlIyYsXrcqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/fd59b3-23cc-40fe-8064-371d5c842f2c/1/Q2K8kLpELu8Z1eglNlIyYsXrcqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:cc:bc:fb:83:2a:18:a2:2d:e4:91:0d:fa:23:83:16:41:a0:
fa:d7:6b:c7:06:8e:79:3f:2b:1d:12:b8:61:63:55:20:97:5b:
b3:5b:d5:95:ad:c7:cc:a6:de:9a:4f:19:ff:01:9a:b8:f2:c0:
7b:6d:2b:f2:59:a0:9b:05:27:e0:d5:f2:29:fb:4e:3d:26:8e:
f5:7f:db:47:05:44:e6:d3:25:25:cf:27:ba:ee:74:95:22:12:
2a:5e:65:ea:c4:bc:6d:2c:eb:da:06:d0:ea:31:98:33:15:bc:
a3:4b:71:6a:e9:80:99:b2:45:72:40:e4:8b:71:07:7f:c3:57:
b4:2d:de:03:f1:50:5d:c5:e1:77:ac:f6:18:a9:76:b3:fd:f0:
b3:e8:8b:42:b1:22:9a:f4:0f:ea:d1:e6:1f:af:2f:95:5c:2f:
4c:59:c4:bc:5c:c6:1c:02:12:c3:0b:b9:da:3c:7f:e1:ac:51:
aa:ac:f5:97:64:49:5e:c7:50:8b:14:40:4b:c1:e8:9c:4c:dc:
2d:92:41:a9:f2:71:52:cd:6a:73:81:bb:e4:74:0f:d2:0c:3f:
0a:4a:00:8f:2b:62:ab:07:cd:e0:84:5b:58:e0:de:ca:7c:93:
f2:75:88:6e:16:ee:00:88:b6:77:09:90:94:cb:a5:08:df:ba:
3f:74:b7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:49:52 2026 by rpki-client