Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
File: qeC20TzRHzYRT6mEAzgElByC8UM.mft (raw, json)
Hash identifier: fDvhP7uH1Eoz05iMKHWeRzglOmQ2nCcurH7Xt+XiG5M=
Subject key identifier: E9:48:37:5B:44:E9:F6:28:37:BE:78:C4:58:48:B8:68:8C:79:4F:DF
Authority key identifier: A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
Certificate issuer: /CN=a9e0b6d13cd11f36114fa984033804941c82f143
Certificate serial: 019D38D29974C19FCD357DA9D872E387C3B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
Manifest number: 146B
Signing time: Sun 29 Mar 2026 09:00:18 +0000
Manifest this update: Sun 29 Mar 2026 09:00:18 +0000
Manifest next update: Mon 30 Mar 2026 09:00:18 +0000
Files and hashes: 1: qeC20TzRHzYRT6mEAzgElByC8UM.crl (hash: HNIdwdc7PXxWB0S/GIqMTfmoqmPW3ufQEW757HziCvY=)
2: v2V_vI8w7ZXM1sii1UDeeWcwpCA.roa (hash: l5yrsl5tfKirXCQFQ9UTcOUZgIWs2Z58yXBB5pkbhOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:99:74:c1:9f:cd:35:7d:a9:d8:72:e3:87:c3:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9e0b6d13cd11f36114fa984033804941c82f143
Validity
Not Before: Mar 29 09:00:18 2026 GMT
Not After : Mar 30 09:00:18 2026 GMT
Subject: CN=e948375b44e9f62837be78c45848b8688c794fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:d6:84:1d:2e:e1:c0:9e:9c:e0:82:bd:2e:87:
6a:00:da:ac:11:1a:5f:ba:d2:92:7f:fd:90:45:11:
6b:84:3c:a4:fe:0b:02:97:bf:33:10:e9:ac:47:c4:
31:60:03:c7:45:c1:d0:77:a9:fd:c1:16:bd:27:9f:
ce:ba:c9:77:92:1b:2f:d3:5c:28:1e:ae:f3:5d:8c:
f5:ec:c6:5d:da:ce:c9:89:29:fe:a7:a3:64:54:e0:
9c:55:b4:6e:c0:97:b1:68:88:17:9a:3d:bc:f5:37:
a8:ba:c5:94:61:34:14:c5:f9:b6:60:1f:00:75:d4:
1d:46:02:4c:0c:fb:76:31:f9:24:10:6f:75:57:66:
d3:ae:4f:f2:7f:27:2d:bf:5d:bd:85:c3:9c:ae:1a:
ef:d3:3a:52:6d:84:1c:ae:34:a8:b0:f5:df:e6:5f:
ea:95:70:e5:99:db:01:ca:54:e9:ce:f6:bc:c5:52:
92:e0:76:87:ea:72:c3:cb:5e:02:c8:ba:96:cd:93:
dd:85:bc:0b:5c:cc:ee:00:7b:ce:5f:e3:40:f1:06:
93:ac:dc:c1:70:66:70:78:32:db:8d:46:dd:24:d7:
1d:26:5f:4d:73:29:28:40:b8:27:54:76:54:50:1b:
f4:9b:04:0a:dc:8b:fc:95:d5:62:a2:ca:32:fe:a9:
95:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:48:37:5B:44:E9:F6:28:37:BE:78:C4:58:48:B8:68:8C:79:4F:DF
X509v3 Authority Key Identifier:
keyid:A9:E0:B6:D1:3C:D1:1F:36:11:4F:A9:84:03:38:04:94:1C:82:F1:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qeC20TzRHzYRT6mEAzgElByC8UM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/52565b-b8bd-4e95-89de-d32f8d875f98/1/qeC20TzRHzYRT6mEAzgElByC8UM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:41:29:3a:46:c4:b1:3d:4b:9e:df:5d:6a:a2:db:5d:b2:e8:
0a:ff:db:8d:ac:af:16:ef:53:c2:09:43:8c:3a:b3:a5:b7:c9:
3f:03:06:b1:09:09:6d:80:b7:d0:cb:a4:2b:9a:e6:d5:11:4c:
d6:7b:2c:3c:e3:82:5c:1b:02:06:f4:06:22:a9:fc:4c:fa:14:
ba:fa:db:3e:8f:5e:54:93:93:0c:35:21:01:d7:a4:e9:4b:0f:
61:1e:ee:b3:3f:9f:eb:b0:26:78:54:27:be:97:63:b3:bd:59:
a5:17:49:88:ab:5f:d5:2c:b3:3f:38:9e:c0:4b:04:36:80:49:
e0:c4:96:4a:b9:53:fa:39:6f:6f:b4:6c:74:ac:ad:c3:7c:79:
6a:36:03:06:5d:99:d4:9f:42:d9:f9:ef:d3:82:c9:c3:f1:f4:
8b:1a:58:3e:87:4e:70:8e:15:03:1f:62:a2:ad:c4:49:27:c7:
a2:42:0b:c9:23:57:ff:a4:1e:39:d9:ff:a7:73:74:a0:13:dd:
51:f0:33:62:c2:87:52:fa:f2:ad:0e:1a:76:27:38:95:82:0c:
53:a4:6a:0f:ee:41:16:c8:59:94:76:b9:83:4f:90:41:d9:85:
91:02:af:fe:86:89:93:e9:cf:7c:db:11:2f:d3:5a:69:e5:41:
3b:fc:d4:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:52 2026 by rpki-client