Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
File: qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft (raw, json)
Hash identifier: 5gDSr4+k+dyk3gv2LRtyAnmXtzyGD0/4gwIuBGjwU2s=
Subject key identifier: 2D:67:2A:36:37:47:0C:74:C4:4F:0B:74:49:96:E0:A5:4B:69:69:A3
Authority key identifier: A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47
Certificate issuer: /CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147
Certificate serial: 019D27A869BD3AEC84F43B34B79491996EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
Manifest number: 0455
Signing time: Thu 26 Mar 2026 01:00:41 +0000
Manifest this update: Thu 26 Mar 2026 01:00:41 +0000
Manifest next update: Fri 27 Mar 2026 01:00:41 +0000
Files and hashes: 1: qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl (hash: 06NDEtUkabVNuGXEtEAmbJT9pkGey4Yw8ZSGHWbHgJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:69:bd:3a:ec:84:f4:3b:34:b7:94:91:99:6e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147
Validity
Not Before: Mar 26 01:00:41 2026 GMT
Not After : Mar 27 01:00:41 2026 GMT
Subject: CN=2d672a3637470c74c44f0b744996e0a54b6969a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:81:1c:8d:ca:06:56:18:af:2a:35:97:1a:df:
ef:b8:24:57:10:f5:d8:e6:9c:fb:61:39:c5:ac:20:
f0:87:60:9f:4e:95:f0:b3:59:9b:75:78:93:8c:0c:
5e:37:6d:07:ee:4a:34:47:62:92:ff:b4:ac:1d:b3:
79:7a:e5:9a:29:92:53:42:a5:5c:9b:b8:e1:a4:64:
e8:d1:23:80:50:e8:05:6d:b4:b5:0f:66:46:32:08:
43:d6:6d:ca:17:63:3f:68:10:73:fc:bc:f6:63:f4:
44:b0:aa:00:fb:28:ff:dc:d7:af:36:96:b3:19:59:
8d:1f:1a:e7:4a:45:91:15:73:85:20:37:76:7f:40:
21:5e:a2:25:eb:5d:ad:2e:c0:18:66:f6:26:5a:ff:
68:cf:25:9e:a1:39:34:d7:b1:df:e5:31:25:0b:fa:
3f:f5:25:91:79:bb:86:42:b4:7c:70:1d:80:9c:6a:
af:89:59:b6:af:89:0e:dc:a6:0c:7f:f1:44:ba:d3:
b9:69:1f:11:cc:24:7b:d9:f1:bd:dc:c5:9b:5b:40:
ea:3a:3f:47:27:5c:5b:46:cd:9b:a8:2c:2d:c5:36:
9b:71:1d:be:ec:e7:c5:84:85:66:9d:fd:5b:fb:b6:
35:70:fd:34:1d:03:6e:d2:e4:db:eb:0b:22:5e:3f:
98:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:67:2A:36:37:47:0C:74:C4:4F:0B:74:49:96:E0:A5:4B:69:69:A3
X509v3 Authority Key Identifier:
keyid:A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ea:03:5d:65:6b:de:3e:fc:95:ed:a7:76:3a:29:47:11:f7:
b6:37:a5:d5:9a:b1:33:83:ac:29:21:29:fc:a0:c7:f9:68:06:
36:16:78:4a:79:c5:de:4a:71:da:db:b4:36:ea:8b:01:36:2c:
6f:e2:40:09:9d:2f:bc:fd:98:06:ee:6b:06:7c:d3:4c:ea:16:
73:7d:7f:9b:6c:db:cf:e6:05:be:2f:63:49:5d:4a:a3:28:fb:
60:40:15:dc:7b:bf:05:ec:fc:c9:e5:86:00:03:28:16:cf:0f:
3a:58:2d:a1:9c:43:82:26:04:ca:2f:ae:a3:7a:45:b6:13:4a:
cd:d2:43:d8:8c:b0:2d:4a:59:bd:6f:b9:f9:98:1a:15:03:b0:
73:3f:e4:d3:20:ce:69:7d:74:a1:8c:54:2f:99:b4:65:e3:c7:
b2:74:6d:d5:54:86:b3:59:77:be:48:42:d8:b0:33:00:c4:20:
fc:5e:43:19:69:bf:59:10:76:cf:06:2d:fb:4b:0c:a0:93:8e:
48:a3:83:71:18:13:ca:21:90:1c:e7:e6:0b:1e:5a:56:d6:85:
ff:b4:4e:bd:02:53:44:d2:c3:b6:c4:f1:b0:e9:c9:6d:f9:da:
3d:c8:fb:94:af:23:60:ae:b5:ad:60:72:6b:79:c4:0a:48:c3:
30:11:9c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:38:56 2026 by rpki-client