Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
File: Quv9iRe1jwaG2T60jeQh7AE3Csk.mft (raw, json)
Hash identifier: sk5k2l5gMjdG09q9mYinfMQkwtVTj5SKDBkUd48K/M8=
Subject key identifier: 58:05:14:B1:B3:8F:88:FF:22:FB:54:E2:0C:1D:16:13:64:83:46:B9
Authority key identifier: 42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
Certificate issuer: /CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Certificate serial: 019D371B58A31CBDBB684EC0F24C87C35606
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 01:00:32 +0000
Manifest this update: Sun 29 Mar 2026 01:00:32 +0000
Manifest next update: Mon 30 Mar 2026 01:00:32 +0000
Files and hashes: 1: Quv9iRe1jwaG2T60jeQh7AE3Csk.crl (hash: ec/H6tzkMjbQzXdD+Qfi63Y2BOkYUt29tSFwa5S8I2k=)
2: eAsQi27gOXjF_3AkuEMYU4-EJ7s.roa (hash: 0gnlaTOkuhgz//iK3cJQOoROXqgFENfW3q9eAblXZeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:58:a3:1c:bd:bb:68:4e:c0:f2:4c:87:c3:56:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ebfd8917b58f0686d93eb48de421ec01370ac9
Validity
Not Before: Mar 29 01:00:32 2026 GMT
Not After : Mar 30 01:00:32 2026 GMT
Subject: CN=580514b1b38f88ff22fb54e20c1d1613648346b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e6:95:fe:32:aa:81:79:87:c4:54:9c:82:e2:
32:7a:81:ed:cf:53:a6:d6:09:d2:8f:34:05:99:f6:
d9:31:60:86:9c:e0:c5:be:c0:57:bf:33:7d:ba:37:
d1:66:4e:bd:75:ef:36:7f:e5:4c:2f:2d:12:bf:30:
8d:1e:81:b4:0b:da:12:88:ff:ea:37:86:3f:d6:07:
75:65:80:ff:a7:16:f0:a5:57:2e:19:d5:d3:55:da:
55:7c:5b:21:bb:aa:fb:09:cd:e4:ab:02:49:be:fe:
ff:b3:09:0d:83:ad:e4:e6:e0:2c:47:be:20:0f:6b:
b3:4e:a6:c9:43:a2:e2:ee:82:9a:8a:1e:43:cf:d9:
e7:76:67:ae:6b:83:93:4e:6e:94:3e:2e:c0:c0:84:
78:4d:f3:49:14:c1:6c:ed:b4:88:5f:7b:54:26:88:
54:55:ad:7d:a3:4a:cc:7a:a2:ea:25:74:4a:6a:dd:
ca:f3:73:46:7a:2f:f2:9a:2b:8e:7c:69:e8:b3:4f:
37:3f:20:52:ea:77:cc:ba:02:4f:2a:88:f6:ca:06:
29:f3:52:8f:21:ff:a9:06:cb:52:6a:41:fc:93:ea:
27:a3:2c:f3:cf:66:5e:9c:97:96:7b:88:4b:17:7c:
a8:f2:7e:ef:99:ae:a0:47:e5:9b:c9:6d:6f:f9:20:
2d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:05:14:B1:B3:8F:88:FF:22:FB:54:E2:0C:1D:16:13:64:83:46:B9
X509v3 Authority Key Identifier:
keyid:42:EB:FD:89:17:B5:8F:06:86:D9:3E:B4:8D:E4:21:EC:01:37:0A:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Quv9iRe1jwaG2T60jeQh7AE3Csk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/24281e-e1ea-4f69-b53d-7f0338e49ee1/1/Quv9iRe1jwaG2T60jeQh7AE3Csk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:d8:f6:0e:c9:1d:5c:44:95:8a:25:c8:78:33:2a:f6:c8:99:
0b:d9:f1:51:04:07:05:e2:22:79:b5:95:0f:19:d9:58:d6:69:
f4:a5:d2:04:52:3d:80:8f:89:ad:f2:b1:0f:6b:86:1e:08:d0:
3c:b7:78:be:f0:f4:2d:a5:e2:94:4c:38:bc:16:37:f1:74:d2:
77:e1:9a:c8:e5:79:80:65:18:96:96:c3:cb:26:b2:d1:48:87:
17:9e:52:a7:74:97:30:cd:b3:ba:c1:fa:c0:d7:f2:f4:83:cf:
21:89:ba:c2:f0:e6:6a:b2:04:5f:5d:bc:09:ee:10:71:96:e7:
80:31:20:54:74:74:81:fb:a8:0a:30:6b:47:3b:d6:68:1f:62:
66:50:81:40:a9:9f:85:0d:22:ce:c1:7a:e4:2d:7b:06:86:d3:
49:e1:14:2e:7a:60:fc:71:ec:21:63:98:ea:84:e8:c0:b8:11:
54:e4:87:4c:42:0b:75:7d:9a:25:4e:fd:ad:ef:09:ff:c3:08:
73:2e:1d:30:2d:3a:96:ec:b7:cd:df:4d:f1:22:11:83:53:ef:
bf:6a:23:f5:b1:de:f1:33:02:07:ce:00:a0:17:d7:7a:43:ee:
3e:00:a1:85:64:10:e7:5c:29:14:d2:e9:00:eb:b2:a0:66:6b:
75:23:28:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:30:51 2026 by rpki-client