Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
File: r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft (raw, json)
Hash identifier: wLQp4DtJ3nAbDqK9b8JzOWrxnDuCzZi7ySdp7ASnsIc=
Subject key identifier: CE:0A:1A:62:30:E3:D7:0F:E1:CE:C7:55:53:34:1F:57:E6:BA:78:8C
Authority key identifier: AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
Certificate issuer: /CN=af542dad0baede4a8b1150f459a03f011cdba654
Certificate serial: 019D2583E80E1F0B339C851F2B848EE5CA4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
Manifest number: 052B
Signing time: Wed 25 Mar 2026 15:01:34 +0000
Manifest this update: Wed 25 Mar 2026 15:01:34 +0000
Manifest next update: Thu 26 Mar 2026 15:01:34 +0000
Files and hashes: 1: JKQsQmB_x8Syv48HZSSUmIlcP-o.asa (hash: avgfvSi9nVMH89OXLE2S5Z1ITRiqLh3T7gJj+4jL0JA=)
2: r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl (hash: lrl/k1lsK+z/5QVLBeI5xdTe6Jzpz6wfv2BHiDQ7iZ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:e8:0e:1f:0b:33:9c:85:1f:2b:84:8e:e5:ca:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af542dad0baede4a8b1150f459a03f011cdba654
Validity
Not Before: Mar 25 15:01:34 2026 GMT
Not After : Mar 26 15:01:34 2026 GMT
Subject: CN=ce0a1a6230e3d70fe1cec75553341f57e6ba788c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:10:f1:e0:e0:d7:4f:1f:ca:3e:3a:fc:37:8a:
fc:63:e0:75:9d:1f:f2:12:11:c9:8f:81:e0:67:cf:
97:ee:9a:af:65:bd:b9:fb:34:56:da:93:b0:bb:29:
ac:0b:da:5b:bf:83:41:e3:45:bf:7b:66:8b:09:80:
b8:3c:7f:d9:b5:30:32:a9:8a:fc:0c:b5:03:0b:7f:
92:17:6e:d0:4a:45:2b:b2:09:77:58:1f:fa:40:45:
4b:d4:0a:af:c0:36:af:ad:ba:e5:ac:e5:5c:94:a6:
0e:11:50:e4:10:68:1c:38:92:40:47:57:68:d0:f4:
7c:be:14:82:ce:6d:31:d1:07:9c:66:e9:dc:80:df:
ac:73:39:f0:aa:f6:31:b1:0d:e5:b0:9c:5e:0f:e7:
88:e7:8c:ed:7a:66:16:ca:15:65:53:09:90:e8:b1:
e5:18:3d:d9:18:61:58:4c:fb:b1:48:40:d6:07:00:
d2:70:86:06:1e:12:0d:4e:56:41:61:c9:0f:a5:94:
f3:54:4d:73:28:05:9a:dc:26:57:ba:af:8a:10:1f:
84:5a:fe:85:ac:60:41:a9:3a:95:53:20:aa:a1:8b:
c9:33:57:ff:3b:c0:fe:cd:60:42:23:d7:d6:24:75:
cf:d6:60:d4:dc:71:80:9d:9e:37:dc:15:8c:0d:37:
f9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0A:1A:62:30:E3:D7:0F:E1:CE:C7:55:53:34:1F:57:E6:BA:78:8C
X509v3 Authority Key Identifier:
keyid:AF:54:2D:AD:0B:AE:DE:4A:8B:11:50:F4:59:A0:3F:01:1C:DB:A6:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r1QtrQuu3kqLEVD0WaA_ARzbplQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/02c48b-1955-4d0a-ad83-6b50084f4264/1/r1QtrQuu3kqLEVD0WaA_ARzbplQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:61:3f:3d:6c:12:1e:f3:79:6e:c7:c0:af:09:81:2f:13:b2:
e2:f8:ef:d2:cf:a6:6a:34:43:c7:2b:55:9c:c6:74:53:2f:c3:
93:46:f4:4e:9c:f4:5b:3d:8a:a7:2e:7a:22:60:af:cb:29:d0:
f0:21:70:c2:81:3b:69:47:7f:95:b0:fa:2a:81:38:d5:03:9b:
91:f7:f7:eb:a8:e1:b3:8b:9d:fd:76:05:46:3e:7c:50:c3:d7:
31:6b:5c:cd:e6:9c:b2:1b:21:df:0f:8d:f8:a3:1e:75:2f:bd:
29:40:a5:04:75:2e:a5:03:70:58:ca:1e:c6:34:33:d7:a1:c2:
49:e5:a6:e6:dc:e0:65:f2:7f:cb:30:f2:69:50:06:c5:b8:58:
b3:e2:86:01:c2:b8:8d:cb:99:23:02:73:5c:e4:25:a4:66:09:
53:9e:39:b0:14:8b:e9:30:e5:49:77:7d:ea:ef:b5:db:ea:97:
e0:8c:49:35:62:58:c5:6f:44:18:d9:83:90:45:8c:1a:4b:6d:
9a:78:b8:34:8e:f9:d8:34:4e:49:86:79:00:7c:68:27:85:ec:
33:60:db:c4:75:16:4b:7f:e8:e6:ff:9a:93:ab:d4:5a:11:00:
16:67:d7:55:9f:28:10:53:b1:40:3e:c5:72:ae:c0:0a:d8:7a:
8a:84:d7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:26:08 2026 by rpki-client