Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
File: Qe4efs0wuAogBvU4_OY7JCDFe-k.mft (raw, json)
Hash identifier: 81O9O/FiwuSD0q68AUv3TZbUEwKm2oTWO0uqWK6K0Kk=
Subject key identifier: 52:A1:E0:96:80:1C:52:9A:AC:EE:94:DC:AB:34:6F:30:49:0C:C7:56
Authority key identifier: 41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
Certificate issuer: /CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Certificate serial: 019D27DF4E7969585DD69E22848F8A0870D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
Manifest number: 0520
Signing time: Thu 26 Mar 2026 02:00:39 +0000
Manifest this update: Thu 26 Mar 2026 02:00:39 +0000
Manifest next update: Fri 27 Mar 2026 02:00:39 +0000
Files and hashes: 1: Qe4efs0wuAogBvU4_OY7JCDFe-k.crl (hash: Rrx3thCUveKgRv+o3XtrApfzs15bglg/Xuv7jmeHvrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:4e:79:69:58:5d:d6:9e:22:84:8f:8a:08:70:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Validity
Not Before: Mar 26 02:00:39 2026 GMT
Not After : Mar 27 02:00:39 2026 GMT
Subject: CN=52a1e096801c529aacee94dcab346f30490cc756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:98:78:5f:14:f5:f7:e9:4f:c8:8b:2e:4d:ce:
b9:3d:82:e2:9e:fa:f9:69:a1:f4:1f:76:5e:fd:79:
06:33:f5:92:4a:f9:5d:3d:41:b5:71:dd:78:e9:a2:
51:8a:44:e5:a9:d9:54:d2:9a:8e:b3:2d:25:54:42:
27:7a:15:7c:36:a8:1c:76:99:c3:cd:b0:04:5e:66:
c6:1a:ed:82:e8:c3:1b:ea:0b:e1:8e:1d:be:4c:89:
f0:fc:44:a1:0a:95:89:8b:e3:12:a5:56:5d:f1:95:
e5:95:ef:f6:16:a1:60:4a:b2:7d:c5:12:f7:ae:7e:
7e:d9:10:c7:3e:1f:ce:b3:c5:24:0c:ea:a8:62:11:
bd:59:de:a5:67:9c:51:26:57:20:67:fa:de:ea:a7:
c2:9e:7c:68:fe:a1:1c:26:dc:c3:ae:a0:36:e3:a5:
5e:b8:c7:7b:c0:e8:3f:00:2a:b6:b6:79:20:f5:fa:
9f:58:10:1f:bb:28:e8:2e:b2:c4:3a:ea:3f:e3:19:
be:12:e2:4c:dd:93:86:65:4e:14:29:b0:ee:71:0a:
1d:85:1b:22:eb:9c:3a:b9:25:7a:ad:f0:1d:72:ab:
56:13:56:1c:e8:b0:ef:d1:33:ac:d1:10:1a:20:3a:
b3:1b:78:fd:a9:f4:96:65:14:e9:16:4f:5f:67:45:
0d:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:A1:E0:96:80:1C:52:9A:AC:EE:94:DC:AB:34:6F:30:49:0C:C7:56
X509v3 Authority Key Identifier:
keyid:41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f0:16:8d:92:a0:13:1a:b3:93:cf:6a:f3:ca:0d:a6:d7:1d:
08:8b:f5:65:ef:dc:1f:92:0a:7b:33:65:05:c2:6b:95:4e:c3:
01:46:5b:9f:71:f9:af:b2:7b:5a:75:b1:cf:c9:e7:7b:a5:91:
c1:bf:d7:fe:ab:aa:58:c5:d2:2a:ae:a6:03:79:80:05:c1:3f:
7c:b4:5c:2e:05:e9:5c:de:52:c0:89:70:47:e4:72:a9:25:02:
b7:f0:15:d3:37:14:75:31:d6:94:1f:b2:f9:07:74:58:4e:05:
ab:df:cc:4b:56:ab:92:f0:df:e1:27:6b:aa:17:b7:b4:e1:4a:
77:75:9a:2b:69:07:60:b2:3d:34:72:1c:af:51:ce:b4:ad:6e:
0e:0a:55:5b:68:8f:11:f8:78:c6:39:3e:77:1e:b4:8b:ba:ae:
c5:6b:37:95:67:ea:bd:98:7d:e4:74:2a:ee:7d:d2:24:5a:4a:
68:c0:d9:b9:70:fe:cc:5b:66:5a:d0:5a:3e:fd:ab:69:e6:07:
21:f7:91:83:ce:74:b3:56:92:b9:cf:f0:db:31:38:fb:88:a9:
d9:e9:1d:e1:a0:53:4d:28:f5:7b:86:35:98:17:e7:80:fa:9b:
9c:fd:cd:1b:80:32:e8:0f:5a:ef:35:00:f4:72:36:93:42:9a:
47:b6:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:18:00 2026 by rpki-client