Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
File: Q16al_74NTuEg1I3YEaVLdoPq9g.mft (raw, json)
Hash identifier: YSEHX3unOsQgjHykS66s4qous+NwYGdF/gmtwDW3+og=
Subject key identifier: 2C:15:07:27:AB:3E:DC:E6:27:62:53:98:F5:AB:82:99:1E:72:1C:1E
Authority key identifier: 43:5E:9A:97:FE:F8:35:3B:84:83:52:37:60:46:95:2D:DA:0F:AB:D8
Certificate issuer: /CN=435e9a97fef8353b848352376046952dda0fabd8
Certificate serial: 019D254C45F2FEEB357602BF7B5131313411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
Manifest number: 33
Signing time: Wed 25 Mar 2026 14:00:48 +0000
Manifest this update: Wed 25 Mar 2026 14:00:48 +0000
Manifest next update: Thu 26 Mar 2026 14:00:48 +0000
Files and hashes: 1: Q16al_74NTuEg1I3YEaVLdoPq9g.crl (hash: 3vAXmGdphy6Dc1ef+KAR1pGwaPKhbpGZMNYdsNyg6k8=)
2: RduyMfyksJPRmTJ2VbOncr1ISHw.asa (hash: sPtI1ZAFxfNcfl8vI1MZDw4ggabOlaCSkTfrWmOzLms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:45:f2:fe:eb:35:76:02:bf:7b:51:31:31:34:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=435e9a97fef8353b848352376046952dda0fabd8
Validity
Not Before: Mar 25 14:00:48 2026 GMT
Not After : Mar 26 14:00:48 2026 GMT
Subject: CN=2c150727ab3edce627625398f5ab82991e721c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:cb:97:ea:93:e5:dd:46:02:d6:a0:35:40:b2:
0d:eb:1f:9f:83:7b:a1:64:a4:f1:a7:08:19:ff:3c:
99:f2:04:4b:d9:94:80:cf:b5:c4:33:3f:5b:c0:8c:
ec:60:de:3d:fd:7a:7c:62:4a:5b:a8:ba:d2:f8:c5:
19:b8:5c:aa:06:ed:5d:29:ba:8a:fa:cd:6a:9a:5d:
bb:29:aa:02:b9:77:38:11:04:8c:27:ed:5d:72:d6:
43:10:a5:a5:6a:a8:3c:84:ad:6d:96:c0:6d:89:00:
b6:5e:aa:3a:a5:66:77:e3:95:41:6f:ba:59:e1:db:
56:6f:1c:5c:12:a1:3c:11:30:be:24:b8:f5:19:b3:
39:3c:12:0f:4f:ee:21:e8:8b:19:cd:9d:99:91:18:
0b:bb:cd:fd:f1:90:ac:b9:eb:ae:11:c1:95:61:d7:
d3:ae:bc:61:81:27:3b:d8:dc:7f:7a:96:d2:0e:f6:
7d:26:f7:99:83:0f:87:be:bc:16:06:51:4b:90:83:
40:78:42:85:57:9b:f2:7d:5c:c5:f9:6a:fa:8f:1d:
1a:19:cf:b3:31:32:f2:c9:04:6d:4e:0b:20:b5:fe:
4f:08:4b:63:9c:f1:8f:af:7a:5a:d1:70:ec:83:0b:
71:8c:46:0d:d1:c4:02:8a:cd:c9:61:f5:a5:f2:84:
53:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:15:07:27:AB:3E:DC:E6:27:62:53:98:F5:AB:82:99:1E:72:1C:1E
X509v3 Authority Key Identifier:
keyid:43:5E:9A:97:FE:F8:35:3B:84:83:52:37:60:46:95:2D:DA:0F:AB:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q16al_74NTuEg1I3YEaVLdoPq9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/d27826-3838-4c2b-af93-e86811120c19/1/Q16al_74NTuEg1I3YEaVLdoPq9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5f:c6:cd:69:b3:95:11:0c:1c:3b:2e:9a:72:dc:42:b5:ad:
91:b5:90:92:9a:e3:c8:aa:87:7a:36:fd:f1:03:ad:62:22:42:
b2:b2:13:13:5f:e5:60:c6:a7:2f:55:1e:fa:77:ba:a4:d1:83:
2a:7e:ab:f9:6d:50:79:30:77:61:8f:cf:23:01:27:d7:b1:9a:
8c:fb:1c:8a:15:d8:e0:bd:86:d2:63:52:eb:90:ab:08:32:9f:
3e:62:29:22:74:6d:5f:36:89:65:60:62:c0:69:77:86:cc:fc:
b1:0f:10:12:ef:d4:2c:8c:3b:b3:b8:0e:a2:f8:bf:31:e4:54:
8f:4f:27:98:7e:2a:83:57:ad:ad:62:9d:1a:41:66:81:69:75:
cb:02:3c:02:da:69:15:47:89:24:bd:a7:47:2e:f4:6e:56:0a:
57:aa:14:f2:46:c7:9b:87:75:5d:02:52:08:57:c8:bb:65:83:
62:56:a7:0f:9e:d5:4c:83:e3:67:7d:c7:e5:83:22:b3:f0:65:
64:81:81:de:ea:ee:a2:bf:40:06:16:17:18:a8:bd:91:03:24:
69:d4:28:ba:2f:31:3d:45:7e:d7:24:c3:27:e1:30:59:93:90:
16:eb:78:2e:8b:b4:8b:cf:39:5f:f9:49:86:60:df:cb:3d:82:
04:8d:8a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:28:36 2026 by rpki-client