Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
File: qS6nWOQVWUqAN__beY9ruRjBXmQ.mft (raw, json)
Hash identifier: VDgDnlkezy8aGaBA8e4k7WN/qr0sv5m5+2HxdBHmyLw=
Subject key identifier: 36:BB:5D:45:96:0C:56:0C:08:85:CB:45:D6:32:F5:39:74:87:CE:C1
Authority key identifier: A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
Certificate issuer: /CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Certificate serial: 019D37C10712DBCF78026C7773D750F339CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
Manifest number: 16CB
Signing time: Sun 29 Mar 2026 04:01:30 +0000
Manifest this update: Sun 29 Mar 2026 04:01:30 +0000
Manifest next update: Mon 30 Mar 2026 04:01:30 +0000
Files and hashes: 1: qS6nWOQVWUqAN__beY9ruRjBXmQ.crl (hash: StLVV+q9B4/vwR35wF7+z8A+Dv1ow+PgdEgM+ymMMwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c1:07:12:db:cf:78:02:6c:77:73:d7:50:f3:39:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a92ea758e415594a8037ffdb798f6bb918c15e64
Validity
Not Before: Mar 29 04:01:30 2026 GMT
Not After : Mar 30 04:01:30 2026 GMT
Subject: CN=36bb5d45960c560c0885cb45d632f5397487cec1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:a7:d5:e2:3d:9b:cc:71:60:9f:37:cd:fe:
27:ca:d1:d1:0d:5d:07:89:34:d6:27:59:12:8a:41:
6a:85:0a:c2:fe:8c:8e:af:57:4c:a4:f8:d6:2d:37:
1c:7a:8d:b7:a4:0e:c5:e1:b9:a5:16:0c:45:5d:41:
53:f7:c0:55:ca:e3:07:aa:da:30:e1:ce:bb:14:44:
ef:36:87:66:9c:bf:04:db:bd:f8:52:d4:bf:70:1a:
89:d9:80:d3:76:da:90:00:a8:7c:b3:54:1a:6d:db:
49:71:2b:a6:06:04:48:fe:d0:ed:e6:8a:f0:4c:1f:
61:09:a1:0f:5a:45:e3:c8:54:61:45:21:94:e4:5d:
fd:e8:da:c4:aa:f6:53:84:7b:7f:35:49:a9:54:46:
db:3e:bb:25:7e:4b:28:66:f8:c6:24:96:14:4a:3e:
2b:97:8f:a6:55:b6:2d:4f:4a:83:56:22:da:23:74:
33:6a:35:aa:e7:79:8f:e5:27:fd:9c:3b:75:3d:27:
39:7b:fb:67:0d:c8:3d:fb:28:43:74:c9:e1:a8:cb:
6f:54:1d:9d:49:fc:2e:2b:66:fc:27:26:c2:b4:43:
05:9c:da:93:49:52:59:de:27:74:fb:3b:09:81:d1:
d6:1d:fc:52:67:53:39:f6:b7:52:60:3f:92:15:24:
76:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:BB:5D:45:96:0C:56:0C:08:85:CB:45:D6:32:F5:39:74:87:CE:C1
X509v3 Authority Key Identifier:
keyid:A9:2E:A7:58:E4:15:59:4A:80:37:FF:DB:79:8F:6B:B9:18:C1:5E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qS6nWOQVWUqAN__beY9ruRjBXmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/bfa4d4-76b7-409a-852f-9586d840134e/1/qS6nWOQVWUqAN__beY9ruRjBXmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:e3:75:75:76:61:d0:ab:74:05:e8:00:b1:61:5d:ff:38:7a:
fb:f7:1b:e9:6d:7b:b4:49:ff:6a:16:3c:04:aa:b8:73:55:14:
8d:f1:6e:de:59:40:92:49:62:07:d7:a4:9d:8e:19:9f:e7:7a:
2e:18:e1:49:0d:70:7f:9a:24:41:ff:f5:87:58:18:87:5d:04:
77:30:49:29:8a:f3:6a:73:60:b4:db:cb:40:bc:55:a3:61:01:
1e:d8:8b:cf:ea:b8:47:32:d8:d4:b3:6c:6a:da:ba:4d:05:b5:
44:07:9d:a2:4f:e6:b2:93:27:a0:a0:e7:c4:be:77:6c:ce:54:
f6:4f:52:a8:c6:b5:6b:42:99:35:7c:a3:97:be:56:78:6b:ab:
78:ae:ef:0d:19:76:4a:79:ea:90:f3:7d:81:e1:80:1a:df:bf:
39:fd:37:ba:4d:42:54:ce:a7:4e:1f:4f:60:d3:a0:6a:f6:a7:
f1:56:62:3f:fc:a1:d2:cd:5e:92:5a:3a:be:db:45:46:ca:6b:
03:4a:3e:65:79:89:a8:b3:14:e6:d8:91:d9:35:16:93:6a:35:
f9:d3:31:9e:fc:50:ae:ab:af:79:a9:ac:58:38:62:18:b2:b7:
d3:0c:37:5b:b4:96:43:a1:52:0b:31:a4:2d:a5:a9:df:52:f3:
1f:5f:7c:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:07 2026 by rpki-client