Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
File: Q5_i1RcHd00tDCv50SrQercmQqI.mft (raw, json)
Hash identifier: 6nnUeD4nG4potXQZUDfwwK8souVi6n3xTUj6Rhbekq4=
Subject key identifier: 56:25:20:54:EB:97:D1:CD:FB:2B:8A:67:0F:4A:48:D4:CB:53:BB:E4
Authority key identifier: 43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
Certificate issuer: /CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Certificate serial: 019D265FB18F9CA458AE5666FC1A6AA66682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
Manifest number: 10EA
Signing time: Wed 25 Mar 2026 19:01:38 +0000
Manifest this update: Wed 25 Mar 2026 19:01:38 +0000
Manifest next update: Thu 26 Mar 2026 19:01:38 +0000
Files and hashes: 1: Q5_i1RcHd00tDCv50SrQercmQqI.crl (hash: MUjmrXQak9iMK1+P1chIr4gr6IG82wz8TeLTZP6v90c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:b1:8f:9c:a4:58:ae:56:66:fc:1a:6a:a6:66:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=439fe2d51707774d2d0c2bf9d12ad07ab72642a2
Validity
Not Before: Mar 25 19:01:38 2026 GMT
Not After : Mar 26 19:01:38 2026 GMT
Subject: CN=56252054eb97d1cdfb2b8a670f4a48d4cb53bbe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:66:5d:1d:3e:6d:7f:a3:c2:78:d5:ee:95:65:
f6:29:33:6c:58:22:55:18:70:0b:fd:fb:98:96:be:
e4:3a:6d:f8:39:a8:de:7a:6a:03:c1:be:f7:b4:0a:
89:b4:6c:6b:5d:9c:c6:06:09:42:aa:72:ae:3d:8f:
7f:74:eb:6c:81:d6:0f:80:e0:e9:94:d4:46:c1:9a:
7c:0d:74:77:e0:94:0d:05:c4:92:de:30:9b:d5:e0:
2f:db:88:da:17:54:96:c4:a8:09:4f:3e:6f:fc:04:
c0:81:33:6f:92:d9:8c:3b:31:eb:46:ea:d2:28:28:
b4:4b:a0:3d:82:27:d9:f3:e9:2a:5d:35:e6:38:9b:
c9:5b:e5:6a:c6:1b:0a:c3:17:c6:bc:0d:15:5d:7d:
d1:ae:f1:39:7d:5b:8f:c6:b7:0d:cd:ce:81:3c:2b:
2c:60:66:55:4b:fe:81:52:25:02:17:88:8f:c1:12:
ef:dd:df:65:6b:5e:92:64:15:b7:8f:39:dc:ce:82:
c7:55:0b:10:ba:31:3f:0c:bd:f7:bc:43:f8:7a:04:
d5:76:a5:13:6e:01:e5:e8:f5:a5:93:22:01:11:53:
c0:60:4c:f9:03:86:10:9e:eb:f9:4f:58:63:bd:09:
df:b0:7c:14:a7:ae:4b:3d:fd:6e:e8:fc:5f:86:38:
29:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:25:20:54:EB:97:D1:CD:FB:2B:8A:67:0F:4A:48:D4:CB:53:BB:E4
X509v3 Authority Key Identifier:
keyid:43:9F:E2:D5:17:07:77:4D:2D:0C:2B:F9:D1:2A:D0:7A:B7:26:42:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q5_i1RcHd00tDCv50SrQercmQqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2408e1-e42f-4915-a715-a1d6d91cde68/1/Q5_i1RcHd00tDCv50SrQercmQqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:07:7d:e7:f3:21:ce:3b:17:1e:13:b8:65:48:2e:c5:d0:9d:
ee:77:fe:6f:ca:b7:cf:a6:84:f8:87:85:6c:fd:15:fd:be:a6:
66:09:8c:37:dd:92:88:57:58:54:09:31:f5:6f:57:a8:97:4f:
6a:39:55:f8:a5:84:8c:a2:29:a6:ba:b2:e0:0a:02:09:14:0b:
9c:04:f5:6d:fb:7e:97:7d:52:b8:d5:6a:d2:65:85:cf:f6:22:
e0:8f:2e:ea:e1:d4:03:0a:1e:a8:d5:9c:01:a2:b7:b2:70:9d:
5f:de:be:b7:ec:e2:9b:31:dd:55:11:1d:56:c6:31:d9:03:f9:
4a:34:ee:90:31:d2:4d:c6:ba:88:da:a0:3a:e0:d3:8a:5b:86:
91:ff:1e:21:3c:7b:ea:ec:20:58:16:8b:4b:7c:35:6a:02:58:
39:fa:6c:0e:7b:a0:da:a4:c5:de:92:46:48:9b:39:9a:e6:07:
1c:a8:55:5e:a9:2d:dc:9e:8f:ff:79:04:70:8a:3b:ab:dc:e6:
bd:23:14:1a:ad:03:8f:61:94:67:47:d4:b1:f5:d4:ec:31:20:
86:99:52:13:71:a1:8f:1b:c9:f5:39:9c:05:85:3f:78:f8:9b:
fe:d2:a1:3c:43:12:fc:ec:84:e1:2a:30:32:39:4e:07:43:2f:
65:88:b4:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0mX7GPnKRYrlZm/BpqpmaCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzOWZlMmQ1MTcwNzc3NGQyZDBjMmJmOWQxMmFkMDdhYjcy
NjQyYTIwHhcNMjYwMzI1MTkwMTM4WhcNMjYwMzI2MTkwMTM4WjAzMTEwLwYDVQQD
Eyg1NjI1MjA1NGViOTdkMWNkZmIyYjhhNjcwZjRhNDhkNGNiNTNiYmU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWZdHT5tf6PCeNXulWX2KTNsWCJV
GHAL/fuYlr7kOm34OajeemoDwb73tAqJtGxrXZzGBglCqnKuPY9/dOtsgdYPgODp
lNRGwZp8DXR34JQNBcSS3jCb1eAv24jaF1SWxKgJTz5v/ATAgTNvktmMOzHrRurS
KCi0S6A9gifZ8+kqXTXmOJvJW+VqxhsKwxfGvA0VXX3RrvE5fVuPxrcNzc6BPCss
YGZVS/6BUiUCF4iPwRLv3d9la16SZBW3jznczoLHVQsQujE/DL33vEP4egTVdqUT
bgHl6PWlkyIBEVPAYEz5A4YQnuv5T1hjvQnfsHwUp65LPf1u6Pxfhjgp1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFYlIFTrl9HN+yuKZw9KSNTLU7vkMB8GA1UdIwQY
MBaAFEOf4tUXB3dNLQwr+dEq0Hq3JkKiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUTVfaTFSY0hkMDB0REN2NTBTclFlcmNtUXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8yNDA4ZTEtZTQyZi00OTE1LWE3MTUt
YTFkNmQ5MWNkZTY4LzEvUTVfaTFSY0hkMDB0REN2NTBTclFlcmNtUXFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8yNDA4ZTEtZTQyZi00OTE1LWE3MTUtYTFkNmQ5MWNkZTY4
LzEvUTVfaTFSY0hkMDB0REN2NTBTclFlcmNtUXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwd95/Mh
zjsXHhO4ZUguxdCd7nf+b8q3z6aE+IeFbP0V/b6mZgmMN92SiFdYVAkx9W9XqJdP
ajlV+KWEjKIpprqy4AoCCRQLnAT1bft+l31SuNVq0mWFz/Yi4I8u6uHUAwoeqNWc
AaK3snCdX96+t+zimzHdVREdVsYx2QP5SjTukDHSTca6iNqgOuDTiluGkf8eITx7
6uwgWBaLS3w1agJYOfpsDnug2qTF3pJGSJs5muYHHKhVXqkt3J6P/3kEcIo7q9zm
vSMUGq0Dj2GUZ0fUsfXU7DEghplSE3GhjxvJ9TmcBYU/ePib/tKhPEMS/OyE4Sow
MjlOB0MvZYi09g==
-----END CERTIFICATE-----
Generated at Thu Mar 26 05:11:15 2026 by rpki-client