Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
File: Qe4efs0wuAogBvU4_OY7JCDFe-k.mft (raw, json)
Hash identifier: hO9vsvr6vShojjjl3Ngo9rWsIBrFhynBEt++X4aTqTw=
Subject key identifier: 07:76:96:8A:E6:4E:CF:FD:91:C3:4A:37:BB:ED:79:06:5C:83:AA:F6
Authority key identifier: 41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
Certificate issuer: /CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Certificate serial: 019D3941A6A2E62CFB21014AB37529FB9D4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
Manifest number: 0529
Signing time: Sun 29 Mar 2026 11:01:36 +0000
Manifest this update: Sun 29 Mar 2026 11:01:36 +0000
Manifest next update: Mon 30 Mar 2026 11:01:36 +0000
Files and hashes: 1: Qe4efs0wuAogBvU4_OY7JCDFe-k.crl (hash: jDKhu07iXjVYTEqjtAFceZRLMbgu7ESePkN/Vihs0EU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:a6:a2:e6:2c:fb:21:01:4a:b3:75:29:fb:9d:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41ee1e7ecd30b80a2006f538fce63b2420c57be9
Validity
Not Before: Mar 29 11:01:36 2026 GMT
Not After : Mar 30 11:01:36 2026 GMT
Subject: CN=0776968ae64ecffd91c34a37bbed79065c83aaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:b7:7c:cb:be:16:13:1b:a6:8f:cf:89:bb:
7a:27:dd:57:5f:32:91:b2:5b:43:db:4b:77:aa:a1:
38:3a:1c:cd:08:7f:96:df:e2:cc:f7:77:6d:16:e2:
2d:28:e3:3e:95:4f:bb:da:8c:f9:60:aa:ad:7a:19:
a9:80:76:de:6a:58:27:44:92:84:45:01:2c:68:cf:
3c:7e:e7:8e:30:bf:31:d2:9a:3d:4a:75:c8:04:ee:
a0:66:e1:23:4f:25:d3:db:75:3d:e0:fe:32:21:57:
ad:19:d5:c2:b4:c9:f4:4b:76:a9:b4:bb:53:37:0f:
f6:19:c7:72:f4:ff:d7:5b:cf:bc:8c:ff:ab:04:09:
f3:08:83:42:31:97:71:94:ee:95:c8:ee:28:83:4e:
b4:f4:bc:cf:a9:0d:ed:18:d1:86:f5:76:db:c8:6c:
0b:1a:e2:20:5a:b3:d7:3b:02:89:e4:5d:97:97:9b:
48:73:15:c5:63:61:d0:4c:b1:15:b8:43:b5:cd:0e:
26:de:28:8d:aa:81:dd:f7:b9:9a:be:df:ab:f1:d8:
12:6c:5b:33:29:37:b1:b0:80:1b:02:98:d3:38:36:
c5:59:e8:c3:6c:90:86:ad:a9:66:b9:db:81:2a:a6:
f7:9e:21:2b:b6:ad:b4:e7:9c:85:e9:81:98:8b:f7:
f8:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:76:96:8A:E6:4E:CF:FD:91:C3:4A:37:BB:ED:79:06:5C:83:AA:F6
X509v3 Authority Key Identifier:
keyid:41:EE:1E:7E:CD:30:B8:0A:20:06:F5:38:FC:E6:3B:24:20:C5:7B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qe4efs0wuAogBvU4_OY7JCDFe-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/a4785b-7cb6-4775-a8ac-57288f7f3088/1/Qe4efs0wuAogBvU4_OY7JCDFe-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:82:1d:96:88:13:ec:1e:b0:f4:5b:dc:ad:62:b2:f6:a9:47:
94:76:a9:43:dd:a5:8c:b5:45:30:b9:17:ee:e6:ef:c2:49:16:
80:af:b9:bc:d5:11:59:54:ba:b9:1f:0e:e6:48:d8:37:99:ac:
61:fe:8c:b0:ed:0a:17:d9:22:cc:a9:4a:ec:1a:93:7e:35:70:
e1:46:b6:4b:1d:be:fb:f2:52:25:70:7f:a9:8a:ac:5c:0c:3c:
4c:5f:d0:c8:84:36:19:9d:89:bc:93:38:dd:72:6a:e6:16:bd:
88:14:83:5e:98:35:f1:08:ca:58:20:fe:88:5b:3f:e5:c0:23:
f3:4d:a7:37:a8:25:4b:f1:6b:8c:12:a3:54:7c:c7:b2:5b:3a:
eb:b1:d2:a3:11:18:5e:d8:f3:7b:02:d9:be:4f:ce:da:81:2c:
52:73:79:99:98:5e:b1:cb:a9:d4:0c:1a:83:64:54:da:4e:ce:
3b:99:b8:3e:e9:dd:f4:b0:76:69:c0:e5:00:07:bf:92:53:94:
db:a0:f4:58:f9:3b:6f:7d:5e:83:74:65:7d:50:81:e6:81:cc:
50:4e:e8:ae:39:9d:64:c5:01:da:bc:59:94:cd:65:1f:62:60:
ba:da:a1:85:b6:1c:a0:32:91:00:fd:d4:21:88:aa:71:53:36:
e7:47:f9:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:46:35 2026 by rpki-client