Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
File: rsqu_IRN7K6xKV2CalKOhFurG-A.mft (raw, json)
Hash identifier: mLzZl1PqZ+O7guJ8yr038xylzWz3RZz1hHdvrsq2kLI=
Subject key identifier: 99:C7:46:AD:10:CE:B8:1A:94:A8:89:7C:18:B9:F2:B2:88:2E:BC:D8
Authority key identifier: AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
Certificate issuer: /CN=aecaaefc844decaeb1295d826a528e845bab1be0
Certificate serial: 019D37C1013EAF6FB3DA73282F889767BA2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
Manifest number: 1050
Signing time: Sun 29 Mar 2026 04:01:28 +0000
Manifest this update: Sun 29 Mar 2026 04:01:28 +0000
Manifest next update: Mon 30 Mar 2026 04:01:28 +0000
Files and hashes: 1: rsqu_IRN7K6xKV2CalKOhFurG-A.crl (hash: dBTNPTDRgN7k0dY+6f9jdVU4db6CFqSPPVKUZfeAB+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:01:3e:af:6f:b3:da:73:28:2f:88:97:67:ba:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecaaefc844decaeb1295d826a528e845bab1be0
Validity
Not Before: Mar 29 04:01:28 2026 GMT
Not After : Mar 30 04:01:28 2026 GMT
Subject: CN=99c746ad10ceb81a94a8897c18b9f2b2882ebcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:be:02:a5:01:ec:08:e2:c5:fc:17:cf:e9:40:
8a:93:92:5d:69:17:39:61:46:d6:da:60:2a:91:91:
5e:36:21:59:46:4d:d5:b2:dc:fd:2c:22:e0:74:2e:
b7:c6:7e:24:6d:b7:c6:e1:61:08:f3:84:d0:28:cc:
b9:1e:a7:85:49:28:e9:c9:df:36:26:57:7c:3b:34:
b9:75:b8:a1:df:b1:45:ba:3b:2e:0a:45:e3:d5:c4:
63:6d:35:a4:c2:0a:2d:2b:f0:82:de:dd:f8:be:ae:
1d:05:b9:6a:ab:59:0a:3c:a9:fb:79:9d:e3:82:76:
06:1c:06:5b:31:70:66:1b:b3:5d:85:65:53:47:54:
fa:af:5e:89:7e:54:18:0b:ec:c7:53:b6:ac:c0:47:
74:c7:6d:37:e6:b9:0f:b4:2b:4f:10:0e:de:ba:b8:
7b:d4:c1:56:f7:15:9d:6c:d1:39:46:60:89:15:6b:
64:38:4b:cc:9f:30:1f:1e:81:6d:a6:cf:e7:84:6d:
75:97:2c:a7:56:8f:a7:84:7b:13:33:e7:29:82:5a:
c4:aa:9f:b6:5f:82:50:18:82:43:a7:9e:0b:27:4d:
25:d5:3d:51:50:cc:bf:41:16:ac:61:fc:22:52:9e:
84:f1:18:5f:3f:34:12:c7:a3:ee:a9:39:b3:68:3b:
24:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C7:46:AD:10:CE:B8:1A:94:A8:89:7C:18:B9:F2:B2:88:2E:BC:D8
X509v3 Authority Key Identifier:
keyid:AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d7:1b:32:a9:47:56:1c:31:2d:81:b1:7c:4c:53:98:86:a5:
04:52:fa:7d:e3:fd:09:47:af:b1:9b:fd:4d:de:d1:95:52:33:
a9:8f:e0:ef:61:47:ca:00:37:5c:f7:40:ae:d0:7c:94:c7:91:
48:74:0a:06:1f:e8:25:22:4a:da:4a:5f:09:60:fc:71:c7:ed:
14:f8:d9:97:4c:06:b3:99:2e:de:e5:37:d2:af:5b:8d:59:48:
f9:6c:16:da:bb:d2:2a:ae:32:02:74:de:e1:cb:b1:54:fd:dc:
ac:18:7a:c1:2d:1d:81:40:ef:f4:1a:59:2f:63:db:59:28:bf:
4c:ec:eb:22:44:38:57:95:bc:46:ca:37:48:91:2f:14:2d:3c:
9e:15:6b:21:d7:10:2f:94:e6:f9:07:21:cb:80:73:50:07:92:
4e:38:33:9e:b3:00:95:e7:13:6e:6f:4e:ce:c7:53:18:0a:0f:
17:b5:10:6c:8d:5b:75:c1:90:b1:55:41:89:1c:bf:b8:78:6a:
a6:cc:f8:56:aa:ce:02:07:98:10:0f:f9:fb:16:67:99:25:76:
ee:b5:05:74:2a:55:d9:39:89:15:66:9f:28:39:7b:b5:4a:eb:
c1:e0:39:38:5e:04:96:bf:3c:e8:8d:30:fd:1f:81:5d:9c:65:
32:9f:54:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03wQE+r2+z2nMoL4iXZ7ovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlY2FhZWZjODQ0ZGVjYWViMTI5NWQ4MjZhNTI4ZTg0NWJh
YjFiZTAwHhcNMjYwMzI5MDQwMTI4WhcNMjYwMzMwMDQwMTI4WjAzMTEwLwYDVQQD
Eyg5OWM3NDZhZDEwY2ViODFhOTRhODg5N2MxOGI5ZjJiMjg4MmViY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L4CpQHsCOLF/BfP6UCKk5JdaRc5
YUbW2mAqkZFeNiFZRk3Vstz9LCLgdC63xn4kbbfG4WEI84TQKMy5HqeFSSjpyd82
Jld8OzS5dbih37FFujsuCkXj1cRjbTWkwgotK/CC3t34vq4dBblqq1kKPKn7eZ3j
gnYGHAZbMXBmG7NdhWVTR1T6r16JflQYC+zHU7aswEd0x2035rkPtCtPEA7eurh7
1MFW9xWdbNE5RmCJFWtkOEvMnzAfHoFtps/nhG11lyynVo+nhHsTM+cpglrEqp+2
X4JQGIJDp54LJ00l1T1RUMy/QRasYfwiUp6E8RhfPzQSx6PuqTmzaDskKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnHRq0QzrgalKiJfBi58rKILrzYMB8GA1UdIwQY
MBaAFK7KrvyETeyusSldgmpSjoRbqxvgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hNzM5MDUtMzFkZC00NDAxLTlkMWIt
NmQ4ZDkxYzdmYWEwLzEvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hNzM5MDUtMzFkZC00NDAxLTlkMWItNmQ4ZDkxYzdmYWEw
LzEvcnNxdV9JUk43SzZ4S1YyQ2FsS09oRnVyRy1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9cbMqlH
VhwxLYGxfExTmIalBFL6feP9CUevsZv9Td7RlVIzqY/g72FHygA3XPdArtB8lMeR
SHQKBh/oJSJK2kpfCWD8ccftFPjZl0wGs5ku3uU30q9bjVlI+WwW2rvSKq4yAnTe
4cuxVP3crBh6wS0dgUDv9BpZL2PbWSi/TOzrIkQ4V5W8Rso3SJEvFC08nhVrIdcQ
L5Tm+Qchy4BzUAeSTjgznrMAlecTbm9OzsdTGAoPF7UQbI1bdcGQsVVBiRy/uHhq
psz4VqrOAgeYEA/5+xZnmSV27rUFdCpV2TmJFWafKDl7tUrrweA5OF4Elr886I0w
/R+BXZxlMp9UtQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:17:54 2026 by rpki-client