Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.mft
File: QUZdOIpCMlXUiDLQc2m2vHcD6io.mft (raw, json)
Hash identifier: YPGnY5hrnCJ6fOS2/w8nmBqrEIO6pgxgdnxRIUAyIuc=
Subject key identifier: 24:46:B4:33:1B:B3:69:86:7D:27:35:3E:5B:46:15:A2:45:CA:B0:E1
Authority key identifier: 41:46:5D:38:8A:42:32:55:D4:88:32:D0:73:69:B6:BC:77:03:EA:2A
Certificate issuer: /CN=41465d388a423255d48832d07369b6bc7703ea2a
Certificate serial: 019D3A8A7934AF4132A13652D84DBF8EBC6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QUZdOIpCMlXUiDLQc2m2vHcD6io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.mft
Manifest number: 01B7
Signing time: Sun 29 Mar 2026 17:00:46 +0000
Manifest this update: Sun 29 Mar 2026 17:00:46 +0000
Manifest next update: Mon 30 Mar 2026 17:00:46 +0000
Files and hashes: 1: QUZdOIpCMlXUiDLQc2m2vHcD6io.crl (hash: 3wAiR6MRj0QX8QgwtB0MTy45G2bhQPSnhax3/Ak5LKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.mft
rsync://rpki.ripe.net/repository/DEFAULT/QUZdOIpCMlXUiDLQc2m2vHcD6io.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:8a:79:34:af:41:32:a1:36:52:d8:4d:bf:8e:bc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41465d388a423255d48832d07369b6bc7703ea2a
Validity
Not Before: Mar 29 17:00:46 2026 GMT
Not After : Mar 30 17:00:46 2026 GMT
Subject: CN=2446b4331bb369867d27353e5b4615a245cab0e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:7c:f3:ca:ab:0f:51:34:70:7b:41:b8:fb:
06:fb:bd:53:da:b4:be:04:2d:3b:04:19:f3:19:5a:
9d:c3:41:d9:e7:26:f5:ad:d7:38:69:89:80:ee:d2:
40:f7:b6:c7:7f:6d:ad:1f:d5:de:ca:e2:a0:f0:13:
7c:71:25:4f:89:03:40:d0:b8:6b:d5:72:78:f0:cc:
6f:c4:d9:0e:26:1a:56:e6:7d:5f:62:26:6a:46:25:
aa:4c:0b:34:ac:82:d7:81:d5:59:74:37:c8:9e:bd:
7c:62:db:6b:d9:be:41:d0:c6:7b:3e:a2:28:79:ac:
64:0f:21:68:a7:85:65:2f:c4:74:bf:a7:fc:92:9e:
6d:e5:57:68:74:48:77:ed:45:6c:09:ef:1c:97:15:
01:5d:aa:7a:82:00:d6:97:c6:1e:67:9a:5a:3b:7e:
70:ab:8e:90:96:34:f3:fe:df:39:26:1a:9f:1a:76:
51:9f:05:24:b8:b2:78:94:a8:36:de:53:57:53:18:
63:9c:db:c6:b4:c9:3b:1d:e7:4b:15:38:98:90:8b:
80:b6:d3:06:f5:c6:67:b5:dd:d9:e9:ed:22:85:7b:
29:bc:aa:15:cf:f8:74:2b:f7:d1:fd:bf:4d:77:ee:
d2:a1:83:b9:6f:9d:d9:87:76:f4:20:23:75:47:ec:
1b:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:46:B4:33:1B:B3:69:86:7D:27:35:3E:5B:46:15:A2:45:CA:B0:E1
X509v3 Authority Key Identifier:
keyid:41:46:5D:38:8A:42:32:55:D4:88:32:D0:73:69:B6:BC:77:03:EA:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QUZdOIpCMlXUiDLQc2m2vHcD6io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3b0e72-043c-4dfb-b636-15a5306c2efd/1/QUZdOIpCMlXUiDLQc2m2vHcD6io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4e:02:2b:71:2b:8a:de:40:07:3d:df:be:73:3e:43:08:2a:
82:90:ee:45:51:97:c6:86:83:07:44:93:42:5b:2b:db:fd:1e:
ad:33:dc:10:68:dc:89:34:19:eb:f5:80:f2:50:e8:2d:74:a0:
e3:d4:87:03:8a:87:b9:d5:c9:51:6a:b7:cf:ae:48:2f:98:a2:
87:b8:28:32:97:96:6c:ca:99:21:d7:b9:c7:9d:91:75:4f:86:
2a:18:77:c7:21:9c:45:83:e8:24:31:1f:61:bb:f4:4c:52:e6:
b9:26:17:a7:4d:69:3e:e5:16:81:c4:6b:ea:61:b4:51:19:1d:
ed:7f:33:81:03:d2:0f:59:4d:cd:cd:9d:84:ec:2a:d7:9b:8a:
d4:3b:b9:ba:83:3c:d4:32:6e:4c:13:8f:51:c2:3c:5d:c7:71:
6e:c0:ee:c6:e7:66:22:d3:52:85:c8:76:f6:f5:d2:1b:07:1d:
c7:b1:38:bd:5e:c3:78:fc:da:d6:00:1b:86:b8:14:d7:bf:31:
66:df:02:46:e2:85:37:1c:3e:71:32:70:ca:f9:20:32:26:4f:
a5:23:5b:37:a5:22:e9:93:e2:58:59:ae:11:a7:d2:fc:ba:30:
1b:74:7d:6f:ca:db:b8:ea:5a:3d:49:4b:be:99:f4:86:73:91:
a4:81:cc:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:57:53 2026 by rpki-client