Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
File: qwJca7PczxsWUUnChzwEsabH2no.mft (raw, json)
Hash identifier: 7HpRr/ZSJstq6VPnoVdUyEgcNM34J9zJsnwky+w8LXY=
Subject key identifier: 37:65:A6:3B:C0:81:4F:AC:BE:1F:BD:BB:41:3A:90:CA:22:1C:42:A9
Authority key identifier: AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A
Certificate issuer: /CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
Certificate serial: 019D2704BC71CDCA0F8F47ABE797F3AE9859
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
Manifest number: 0D42
Signing time: Wed 25 Mar 2026 22:01:54 +0000
Manifest this update: Wed 25 Mar 2026 22:01:54 +0000
Manifest next update: Thu 26 Mar 2026 22:01:54 +0000
Files and hashes: 1: qwJca7PczxsWUUnChzwEsabH2no.crl (hash: sFI29WxnfHAH7QZ7qijfjcPD8jVwx/6lQgucmhdjZsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:bc:71:cd:ca:0f:8f:47:ab:e7:97:f3:ae:98:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab025c6bb3dccf1b165149c2873c04b1a6c7da7a
Validity
Not Before: Mar 25 22:01:54 2026 GMT
Not After : Mar 26 22:01:54 2026 GMT
Subject: CN=3765a63bc0814facbe1fbdbb413a90ca221c42a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:af:ed:bd:97:47:8a:8f:e8:4c:8c:5b:6e:69:
73:ec:93:0e:6b:8e:5c:8d:24:98:7f:15:18:8f:c1:
a8:a1:f6:ea:76:7d:f6:1c:89:c5:74:7c:a5:10:44:
d1:3a:00:37:22:4e:88:f1:61:ad:f0:7d:48:87:4c:
58:cd:20:7c:86:b0:71:15:cb:e2:fa:6c:62:14:86:
0e:42:e9:4a:f4:82:9c:43:a2:ea:a8:4e:42:58:9f:
a4:5f:1c:29:06:bb:68:31:3d:0e:59:c5:51:51:9e:
51:17:77:62:a9:f1:44:82:55:bb:26:8a:2a:6d:11:
10:62:30:49:6f:6f:da:28:14:2a:d3:b4:b6:ef:12:
27:15:60:03:06:62:cd:3b:31:00:5a:52:4e:a0:f4:
b2:2c:af:6a:c3:e9:0c:6f:3a:67:cc:ad:2f:aa:a9:
63:33:b1:f1:2f:eb:32:bb:32:c8:54:69:f4:96:70:
4e:7d:e5:bf:54:22:63:93:11:6c:84:dc:35:f3:f3:
7c:91:fb:1e:0a:27:e3:4c:36:8e:1d:19:ac:64:9d:
e0:a8:20:82:7c:b1:f2:cd:51:91:66:ed:03:53:8d:
24:c4:8a:9a:51:e1:de:12:22:08:6b:e6:97:21:14:
4d:a2:99:9f:26:be:4a:dc:e5:1d:b6:aa:74:c2:a2:
c9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:65:A6:3B:C0:81:4F:AC:BE:1F:BD:BB:41:3A:90:CA:22:1C:42:A9
X509v3 Authority Key Identifier:
keyid:AB:02:5C:6B:B3:DC:CF:1B:16:51:49:C2:87:3C:04:B1:A6:C7:DA:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwJca7PczxsWUUnChzwEsabH2no.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/05b1e3-24c0-4668-9f40-fe77473e3dcf/1/qwJca7PczxsWUUnChzwEsabH2no.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d5:75:ab:4a:54:c5:88:db:ff:c2:e4:1b:1d:47:be:eb:c6:
23:a8:9b:8e:97:aa:e0:1e:c7:0e:b7:3e:8a:a6:d7:97:9a:c5:
9f:40:14:8a:74:6e:2c:57:f9:8f:25:5c:9b:74:4b:29:be:cd:
a1:a0:6c:9e:ff:22:14:3b:06:bd:c6:3b:54:c8:df:b7:61:46:
cd:6c:0c:d8:5d:d3:30:a5:88:f5:4f:58:c7:92:9b:1c:8d:87:
22:74:5e:f1:37:a0:23:47:99:5a:f0:12:d9:f0:95:9c:fc:23:
55:3b:c7:bc:fc:7f:6a:3d:1e:a5:c3:ce:e0:b2:4a:35:36:b5:
0a:21:95:92:18:e9:0b:bd:ea:09:6b:b0:ef:e9:24:a1:35:af:
72:37:8e:57:43:7c:2e:80:62:6e:a1:ac:fb:b1:1e:33:c6:3f:
60:34:10:43:bc:bf:3e:0f:9c:60:0f:f3:3d:01:00:1e:52:ad:
f0:5d:bb:35:c6:c5:8e:3d:db:0b:4a:55:ff:27:bf:b5:24:e0:
93:fe:26:9c:a0:11:73:df:89:55:6f:b1:d3:4a:8b:1d:bf:bd:
5d:f6:4e:b6:94:b7:ca:ee:98:5a:88:10:c3:5f:c1:f0:a7:00:
cf:40:22:d5:92:f8:e9:f4:68:95:ec:45:7b:6c:9a:56:37:cf:
7f:ce:39:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:30:29 2026 by rpki-client