Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
File: Quv9iRe1jwaG2T60jeQh7AE3Csk.mft (raw, json)
Hash identifier: ROgNx4tRS6g9blkQEBxg2R/HMs704+0EJDFpvtoO+g8=
Subject key identifier: 1F:E4:3F:0C:D0:2D:35:73:7C:D9:70:B3:1C:69:24:DF:E4:19:D8:74
Authority key identifier: 42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
Certificate issuer: /CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Certificate serial: 019D333EF34B518EE59E6BFA566484C39845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 07:00:56 +0000
Manifest this update: Sat 28 Mar 2026 07:00:56 +0000
Manifest next update: Sun 29 Mar 2026 07:00:56 +0000
Files and hashes: 1: Quv9iRe1jwaG2T60jeQh7AE3Csk.crl (hash: JAP5xWq4En//2/P+0svEgYhG/KEdInFts1o1PHHWU0s=)
2: eAsQi27gOXjF_3AkuEMYU4-EJ7s.roa (hash: 0gnlaTOkuhgz//iK3cJQOoROXqgFENfW3q9eAblXZeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:3e:f3:4b:51:8e:e5:9e:6b:fa:56:64:84:c3:98:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Validity
Not Before: Mar 28 07:00:56 2026 GMT
Not After : Mar 29 07:00:56 2026 GMT
Subject: CN=1fe43f0cd02d35737cd970b31c6924dfe419d874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:19:8b:f9:be:03:43:f3:d7:7a:db:62:f9:37:
88:1b:8f:6e:cc:1b:8e:c0:61:5e:7f:38:ab:fa:7f:
30:0f:48:86:99:3e:f9:50:55:1f:ee:b1:67:b8:71:
2f:10:5d:5d:22:82:91:5f:a1:7a:d9:f9:e6:28:02:
10:9a:35:0a:98:9c:3d:27:d9:56:0a:85:1c:1e:9c:
fa:c7:7e:73:da:b2:94:10:2b:25:ca:d1:7d:a9:50:
90:d9:b4:b8:3b:e8:0d:92:24:63:4f:13:c1:d5:c2:
a2:ec:63:47:57:f4:35:79:ff:a2:79:57:c6:16:16:
64:68:ec:7f:a3:a1:f2:7a:ba:01:4f:ea:4a:ce:fc:
5f:a6:dd:62:ce:9d:64:7c:40:6b:7e:bd:d7:e0:2f:
99:d2:02:08:42:82:3b:c1:bd:94:e1:10:3a:55:75:
0f:fc:13:f1:73:31:81:48:55:b1:14:a7:89:7d:87:
68:82:e2:0d:74:db:63:e5:fd:4c:6f:14:d8:08:58:
94:18:03:4d:cf:f7:b4:ad:42:4d:88:09:fa:14:fc:
72:dd:26:4c:71:21:81:5c:b5:78:30:55:94:36:72:
12:45:3e:e7:56:d7:98:c3:00:60:e5:1f:e5:4b:99:
58:a3:b3:00:dc:61:ef:d6:a4:4d:48:16:75:f1:87:
42:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E4:3F:0C:D0:2D:35:73:7C:D9:70:B3:1C:69:24:DF:E4:19:D8:74
X509v3 Authority Key Identifier:
keyid:42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2c:e7:3c:6e:c5:5f:5b:70:26:d1:12:9c:e3:34:19:f3:31:
16:bc:31:10:b0:45:9e:b9:19:f5:03:a6:c1:63:35:ff:ae:bc:
6b:1a:fa:68:91:c6:b6:82:1d:c6:4e:77:00:09:14:85:39:20:
7e:7c:98:44:a1:1f:3b:f9:de:7e:fc:70:03:b8:cf:a4:d1:63:
f3:7e:13:4c:69:c8:9b:3a:a5:e3:bf:ba:39:ef:00:8c:07:d9:
9e:a6:c3:17:65:ff:13:84:eb:8b:45:fa:a4:f5:89:f4:7d:96:
da:23:55:34:0b:8e:52:56:1e:28:e0:d0:f5:2f:f8:c7:7c:43:
e4:af:12:bd:93:89:46:8b:75:34:c0:92:b2:c5:53:97:a4:c4:
c9:d0:b4:1c:0a:43:16:d2:10:5a:4c:89:5c:69:cd:28:c1:89:
6e:e3:74:f0:66:d0:61:87:40:8f:cf:07:45:f3:33:6c:e6:28:
73:ef:9b:fb:27:27:66:cd:0e:ce:ea:a5:9e:98:8a:e5:fc:31:
52:2c:de:7f:09:2a:06:34:4b:7d:a4:1a:26:af:55:cc:32:b9:
bd:a4:f4:cd:87:51:73:cd:4a:58:3e:e7:2d:67:ed:83:2d:f1:
18:3d:e8:f4:a8:b8:6c:d0:32:da:fa:1b:4b:9e:af:03:df:ec:
82:d5:65:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:59 2026 by rpki-client