Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
File: qKI6ziwGf44hL_NZ2pbCBYtks-o.mft (raw, json)
Hash identifier: 2IdGtQTY6pec7mBu32TE78SKlgfwf0TFKmGVUuiVZXQ=
Subject key identifier: 03:46:CC:33:A9:B5:7B:57:3B:4B:F3:B3:09:34:4D:A1:35:27:41:8A
Authority key identifier: A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
Certificate issuer: /CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Certificate serial: 019D390A1DB664EB87732144011753503AA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
Manifest number: 08C2
Signing time: Sun 29 Mar 2026 10:00:57 +0000
Manifest this update: Sun 29 Mar 2026 10:00:57 +0000
Manifest next update: Mon 30 Mar 2026 10:00:57 +0000
Files and hashes: 1: qKI6ziwGf44hL_NZ2pbCBYtks-o.crl (hash: SWDRePNfz9MZRJJFJxzyPlsyy2eWRZQtq6lu/ebwIDI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1d:b6:64:eb:87:73:21:44:01:17:53:50:3a:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8a23ace2c067f8e212ff359da96c2058b64b3ea
Validity
Not Before: Mar 29 10:00:57 2026 GMT
Not After : Mar 30 10:00:57 2026 GMT
Subject: CN=0346cc33a9b57b573b4bf3b309344da13527418a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3b:cc:e7:38:33:da:1a:93:40:f9:65:8d:47:
70:8a:73:9c:a4:af:1c:41:3f:bb:c1:92:16:2e:25:
be:54:ee:b5:fd:f0:65:ff:22:21:94:cc:94:0f:60:
2c:62:e1:3c:f3:82:04:11:2c:1c:66:cb:bd:e5:d2:
9d:7e:fb:fb:30:aa:2e:58:da:23:42:18:47:64:ba:
be:05:75:d5:d3:75:a0:7b:c6:5e:fd:28:5f:e2:0e:
47:57:87:8b:9e:ea:ae:9a:17:b4:70:3e:33:3c:1c:
11:23:4f:00:39:fd:aa:63:42:c7:e6:e2:69:07:0a:
9b:c2:d6:cf:5c:21:f3:a2:f7:e2:e4:44:6b:f8:00:
eb:61:5f:1e:d0:58:56:01:ff:38:6b:ef:53:8e:dc:
af:26:04:e6:31:2b:fe:38:f6:a6:d1:d6:7d:b2:e8:
e7:5f:dc:e6:a2:92:5b:53:ef:8a:17:47:57:98:3a:
8b:b7:7a:95:8b:e6:b1:32:e8:dc:df:e0:24:f0:f8:
07:cd:35:54:37:ce:3c:ce:65:ac:7f:f9:1c:fd:85:
71:da:8a:4e:40:95:75:e2:1a:5c:68:7e:62:6d:2d:
8b:1e:b8:95:1d:a3:73:b6:70:57:ea:1c:3e:f6:d8:
74:bb:ff:03:d1:2b:e6:58:dd:4e:f0:5e:88:a7:26:
2d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:46:CC:33:A9:B5:7B:57:3B:4B:F3:B3:09:34:4D:A1:35:27:41:8A
X509v3 Authority Key Identifier:
keyid:A8:A2:3A:CE:2C:06:7F:8E:21:2F:F3:59:DA:96:C2:05:8B:64:B3:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qKI6ziwGf44hL_NZ2pbCBYtks-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1e0bb6-e456-4a8d-b60b-752d5de0a90e/1/qKI6ziwGf44hL_NZ2pbCBYtks-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:fa:47:e9:98:5f:0b:fd:7c:4c:ef:68:3b:65:d7:13:97:92:
42:42:3d:88:f0:23:a7:9e:23:f0:3d:9f:d6:87:3f:e7:78:bc:
57:e3:d0:8e:81:62:e6:e2:41:a1:4e:75:32:f2:72:88:8b:e1:
cb:67:1a:3d:fd:3d:a6:6f:f9:31:85:ba:8c:6a:fe:a5:0d:12:
21:fb:3f:73:c3:ed:28:16:45:d7:dc:5c:7f:74:4b:3c:25:3e:
44:62:08:c4:90:4b:ad:05:a4:00:af:ea:19:be:f8:ae:92:bc:
5f:79:cf:55:e5:c3:6d:42:13:1c:9a:bc:f8:e3:ac:22:df:12:
80:78:3a:3e:fb:e7:1e:37:41:bc:ad:56:10:8e:1b:9b:96:0d:
80:8e:71:c2:f7:e6:60:23:75:88:6e:9d:e5:d7:14:02:22:1e:
c0:ed:e8:4d:7b:2f:eb:02:44:68:33:ae:16:d8:13:51:a1:e2:
75:ba:31:59:6d:87:39:e6:b4:63:8d:40:a8:fd:26:ca:c2:66:
68:33:b7:40:4f:dd:52:d7:4e:d8:75:75:44:c5:9b:48:de:4a:
5d:1f:d8:2c:3a:03:ed:03:90:c4:92:8e:7d:e6:58:f4:52:5f:
4a:47:20:04:6e:2d:60:a8:4b:67:22:13:15:18:fd:b2:cb:70:
f4:e1:b2:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05Ch22ZOuHcyFEARdTUDqiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE4YTIzYWNlMmMwNjdmOGUyMTJmZjM1OWRhOTZjMjA1OGI2
NGIzZWEwHhcNMjYwMzI5MTAwMDU3WhcNMjYwMzMwMTAwMDU3WjAzMTEwLwYDVQQD
EygwMzQ2Y2MzM2E5YjU3YjU3M2I0YmYzYjMwOTM0NGRhMTM1Mjc0MThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDvM5zgz2hqTQPlljUdwinOcpK8c
QT+7wZIWLiW+VO61/fBl/yIhlMyUD2AsYuE884IEESwcZsu95dKdfvv7MKouWNoj
QhhHZLq+BXXV03Wge8Ze/Shf4g5HV4eLnuqumhe0cD4zPBwRI08AOf2qY0LH5uJp
BwqbwtbPXCHzovfi5ERr+ADrYV8e0FhWAf84a+9TjtyvJgTmMSv+OPam0dZ9sujn
X9zmopJbU++KF0dXmDqLt3qVi+axMujc3+Ak8PgHzTVUN848zmWsf/kc/YVx2opO
QJV14hpcaH5ibS2LHriVHaNztnBX6hw+9th0u/8D0SvmWN1O8F6IpyYtHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFANGzDOptXtXO0vzswk0TaE1J0GKMB8GA1UdIwQY
MBaAFKiiOs4sBn+OIS/zWdqWwgWLZLPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcUtJNnppd0dmNDRoTF9OWjJwYkNCWXRrcy1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8xZTBiYjYtZTQ1Ni00YThkLWI2MGIt
NzUyZDVkZTBhOTBlLzEvcUtJNnppd0dmNDRoTF9OWjJwYkNCWXRrcy1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8xZTBiYjYtZTQ1Ni00YThkLWI2MGItNzUyZDVkZTBhOTBl
LzEvcUtJNnppd0dmNDRoTF9OWjJwYkNCWXRrcy1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvpH6Zhf
C/18TO9oO2XXE5eSQkI9iPAjp54j8D2f1oc/53i8V+PQjoFi5uJBoU51MvJyiIvh
y2caPf09pm/5MYW6jGr+pQ0SIfs/c8PtKBZF19xcf3RLPCU+RGIIxJBLrQWkAK/q
Gb74rpK8X3nPVeXDbUITHJq8+OOsIt8SgHg6PvvnHjdBvK1WEI4bm5YNgI5xwvfm
YCN1iG6d5dcUAiIewO3oTXsv6wJEaDOuFtgTUaHidboxWW2HOea0Y41AqP0mysJm
aDO3QE/dUtdO2HV1RMWbSN5KXR/YLDoD7QOQxJKOfeZY9FJfSkcgBG4tYKhLZyIT
FRj9sstw9OGyQA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:27 2026 by rpki-client