Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
File: qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft (raw, json)
Hash identifier: nmk1xxmJg+UAxRzyslg8msg4rsV4JmBJ9loLHadPd0o=
Subject key identifier: C9:4B:4F:4D:16:8A:DE:86:BD:86:A0:7B:F3:59:27:23:C1:57:D8:CF
Authority key identifier: A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47
Certificate issuer: /CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147
Certificate serial: 019D3909F7D0FB1323FEB29BC94265571B16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
Manifest number: 045E
Signing time: Sun 29 Mar 2026 10:00:47 +0000
Manifest this update: Sun 29 Mar 2026 10:00:47 +0000
Manifest next update: Mon 30 Mar 2026 10:00:47 +0000
Files and hashes: 1: qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl (hash: IrIMWLdwjjPhQn4LV5l0nhjgCDtVNurqGoU6Yk5zvJ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:f7:d0:fb:13:23:fe:b2:9b:c9:42:65:57:1b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a8b22f0ec014c2ada575373fa6bd2fec50f65147
Validity
Not Before: Mar 29 10:00:47 2026 GMT
Not After : Mar 30 10:00:47 2026 GMT
Subject: CN=c94b4f4d168ade86bd86a07bf3592723c157d8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:c5:9a:03:63:9e:d6:50:13:85:98:a8:a8:
53:e5:84:d0:14:ac:55:2a:22:a6:79:40:b5:ed:2c:
54:d3:59:64:db:3b:c2:9a:8a:e1:32:00:81:bb:ec:
42:40:fa:be:6e:5f:f3:58:16:de:d4:12:47:bc:f7:
02:5d:a3:6c:70:40:c7:8d:fe:9d:bb:82:ea:94:6c:
ef:bb:f7:f6:70:71:bb:cb:0b:f4:92:aa:74:1a:14:
48:af:12:90:96:9c:86:b3:bc:96:37:b6:62:e4:81:
25:1e:70:60:e0:f3:a7:59:5e:06:f0:aa:f9:e5:28:
0a:12:40:35:38:83:b3:bc:cb:c4:1f:27:08:cb:c1:
1f:79:5c:78:dd:74:0d:ca:f0:35:29:39:2f:f2:76:
1d:b0:4d:da:24:0c:8d:d8:23:de:6e:95:13:2b:44:
0b:0b:91:f0:45:69:1b:c2:c7:22:97:36:32:76:06:
b1:95:8a:53:9e:a1:ee:16:ef:82:37:fd:fb:75:34:
1b:6e:5f:7a:0a:88:fb:22:38:b3:25:33:7f:88:10:
92:ac:49:d3:41:f4:51:45:3f:8f:0d:bb:7e:6a:e8:
a3:e5:33:34:d0:ef:c6:8f:84:ed:d3:ce:7b:41:94:
ef:d3:fc:c7:1d:62:21:9f:8a:74:7a:79:04:81:22:
26:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4B:4F:4D:16:8A:DE:86:BD:86:A0:7B:F3:59:27:23:C1:57:D8:CF
X509v3 Authority Key Identifier:
keyid:A8:B2:2F:0E:C0:14:C2:AD:A5:75:37:3F:A6:BD:2F:EC:50:F6:51:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qLIvDsAUwq2ldTc_pr0v7FD2UUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/8545f0-a61f-446d-a728-d010991ee323/1/qLIvDsAUwq2ldTc_pr0v7FD2UUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:3f:24:32:66:26:09:80:fa:e7:0a:b2:91:6d:35:32:c4:ac:
6a:2d:e1:c1:62:40:ab:cb:93:ad:14:85:5b:98:41:5b:30:94:
19:45:90:f5:30:d9:0f:c1:45:6b:e0:18:57:96:5c:f3:e0:da:
07:40:d2:42:ed:ce:53:53:82:03:28:0c:77:ec:7e:d1:79:dc:
ff:65:5a:06:93:ad:61:fe:94:e3:3c:45:8c:3d:ae:ed:53:cb:
7f:36:ea:59:11:45:96:67:c8:bd:01:86:31:df:79:c2:34:9e:
6d:0b:cb:c8:92:b6:35:2d:6b:a6:e0:f8:5e:1f:a8:21:84:d1:
52:2a:c1:43:0d:a0:ad:20:14:35:27:bc:88:6a:e8:66:98:de:
61:1c:eb:51:af:3c:d7:86:17:f1:39:9e:9e:5f:23:15:ea:33:
96:dc:87:40:3a:89:3b:80:4e:05:f1:22:1b:7a:a4:f4:34:62:
18:36:d2:db:67:18:ce:32:c2:c4:f8:88:c4:6a:12:e3:4a:d9:
7b:fd:db:be:f9:6d:b2:b1:0f:c5:2a:32:0f:a4:7a:69:73:9e:
47:3b:9e:0b:e3:b6:48:a9:dd:6d:25:f1:f2:e6:7c:19:dc:10:
26:14:93:0e:68:eb:65:d7:58:bc:9b:bf:12:48:82:52:d6:73:
4d:0a:22:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:48 2026 by rpki-client