Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
File: qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft (raw, json)
Hash identifier: m1GbNTUlGgnKRhIISZqJvq9YRM7+3/4sNxFi63ef1ls=
Subject key identifier: 59:33:B1:DC:CE:64:FE:E7:62:24:55:D7:8E:D1:77:DF:3E:CF:89:31
Authority key identifier: A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23
Certificate issuer: /CN=a948d011edb8cd33e66767880ca4ab3061d9c523
Certificate serial: 019CAC7DD68CB52D6CB68CA96FBC9DD36542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
Manifest number: 055E
Signing time: Mon 02 Mar 2026 03:00:53 +0000
Manifest this update: Mon 02 Mar 2026 03:00:53 +0000
Manifest next update: Tue 03 Mar 2026 03:00:53 +0000
Files and hashes: 1: qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl (hash: CCVu5MVl2IW7+1DEQl7kkJ2gyp6zVSSFKpaIXMpL2Xw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:d6:8c:b5:2d:6c:b6:8c:a9:6f:bc:9d:d3:65:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a948d011edb8cd33e66767880ca4ab3061d9c523
Validity
Not Before: Mar 2 03:00:53 2026 GMT
Not After : Mar 3 03:00:53 2026 GMT
Subject: CN=5933b1dcce64fee7622455d78ed177df3ecf8931
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:08:69:48:20:f1:cb:8b:ac:5f:f8:9c:ab:3f:
c8:86:3d:b0:7d:e9:84:cc:46:bb:94:b1:74:f3:a5:
e8:31:40:b2:26:8c:d8:2d:e2:38:74:61:12:c8:5d:
28:50:d1:ba:c4:2b:79:63:7a:42:8c:48:7d:d3:d3:
b1:28:4c:68:66:57:c6:c2:03:a1:d1:5f:01:ce:25:
08:4c:38:e7:8a:f0:88:66:32:23:3d:6f:4c:f4:02:
bc:df:9b:33:e2:69:ee:17:61:5f:c8:54:53:4f:b0:
34:25:9b:81:8a:2e:51:3a:d4:3c:83:1d:d6:ad:b7:
f2:06:98:2a:79:6d:fc:7a:57:fa:74:61:bf:a3:c9:
f3:58:c3:61:19:d9:c2:37:4a:47:b3:27:84:eb:09:
ab:54:82:73:49:6d:80:c6:d5:e6:85:21:c2:ba:cd:
84:eb:94:73:7c:ce:2d:45:6e:0b:84:8d:c1:62:37:
41:9e:59:3e:ab:28:b6:66:c4:f3:4f:f2:30:02:39:
58:89:92:e2:89:28:02:0b:1a:65:a6:5e:d0:c4:2a:
25:9e:20:76:5b:e1:d2:b4:6c:12:ac:56:e0:ae:f6:
f7:d8:ec:76:7c:4a:97:cb:5a:62:c6:86:0c:27:a7:
15:d2:08:fb:6d:21:20:c3:4e:a9:09:5e:f3:37:07:
0f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:33:B1:DC:CE:64:FE:E7:62:24:55:D7:8E:D1:77:DF:3E:CF:89:31
X509v3 Authority Key Identifier:
keyid:A9:48:D0:11:ED:B8:CD:33:E6:67:67:88:0C:A4:AB:30:61:D9:C5:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qUjQEe24zTPmZ2eIDKSrMGHZxSM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/9eb3eb-5109-4798-8828-3d549fbb837f/1/qUjQEe24zTPmZ2eIDKSrMGHZxSM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:26:73:a5:f9:02:e5:2d:f6:21:0c:b3:d4:50:67:0b:72:7b:
17:1a:d3:5d:00:79:0d:42:85:34:1a:df:2b:b9:fe:74:9a:ba:
6a:88:d9:c7:e4:a0:5c:1e:b4:32:93:0b:79:08:8a:ae:30:15:
3f:8c:7d:35:8f:bd:6c:51:88:fa:65:4f:bc:ab:66:8e:a0:a9:
e8:0e:9f:a7:4f:c8:3e:53:92:e6:e1:fd:da:67:7f:7a:da:6c:
d2:2d:28:3d:b5:cc:01:b8:68:7d:39:13:a5:8b:62:01:3f:5f:
69:2e:2e:16:f1:29:c8:f3:4e:66:6d:73:16:b0:b0:17:ca:45:
48:a5:d1:a2:5f:45:51:49:3b:76:2d:8e:3b:a8:b7:0c:1a:dc:
51:7a:e8:b9:25:b9:69:3b:0f:a1:83:33:f2:c3:a2:80:f2:31:
ad:04:9d:4f:0f:d1:29:10:79:e1:e7:5e:9b:15:0b:c7:b2:41:
aa:8d:b6:8a:60:66:e8:49:fe:df:95:9b:6b:50:5c:16:2d:12:
8b:65:bf:22:6c:92:7c:d3:94:2e:8a:c6:14:94:b9:aa:c8:e0:
ea:99:11:05:64:3a:0b:44:ef:7b:e2:09:a6:52:f2:20:39:e9:
8f:f0:00:f2:94:d1:1e:fe:32:2d:42:90:d5:73:87:8a:dd:b8:
b4:3c:d7:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysfdaMtS1stoypb7yd02VCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5NDhkMDExZWRiOGNkMzNlNjY3Njc4ODBjYTRhYjMwNjFk
OWM1MjMwHhcNMjYwMzAyMDMwMDUzWhcNMjYwMzAzMDMwMDUzWjAzMTEwLwYDVQQD
Eyg1OTMzYjFkY2NlNjRmZWU3NjIyNDU1ZDc4ZWQxNzdkZjNlY2Y4OTMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwhpSCDxy4usX/icqz/Ihj2wfemE
zEa7lLF086XoMUCyJozYLeI4dGESyF0oUNG6xCt5Y3pCjEh909OxKExoZlfGwgOh
0V8BziUITDjnivCIZjIjPW9M9AK835sz4mnuF2FfyFRTT7A0JZuBii5ROtQ8gx3W
rbfyBpgqeW38elf6dGG/o8nzWMNhGdnCN0pHsyeE6wmrVIJzSW2AxtXmhSHCus2E
65RzfM4tRW4LhI3BYjdBnlk+qyi2ZsTzT/IwAjlYiZLiiSgCCxplpl7QxColniB2
W+HStGwSrFbgrvb32Ox2fEqXy1pixoYMJ6cV0gj7bSEgw06pCV7zNwcPZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFkzsdzOZP7nYiRV147Rd98+z4kxMB8GA1UdIwQY
MBaAFKlI0BHtuM0z5mdniAykqzBh2cUjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVVqUUVlMjR6VFBtWjJlSURLU3JNR0haeFNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC85ZWIzZWItNTEwOS00Nzk4LTg4Mjgt
M2Q1NDlmYmI4MzdmLzEvcVVqUUVlMjR6VFBtWjJlSURLU3JNR0haeFNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC85ZWIzZWItNTEwOS00Nzk4LTg4MjgtM2Q1NDlmYmI4Mzdm
LzEvcVVqUUVlMjR6VFBtWjJlSURLU3JNR0haeFNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqCZzpfkC
5S32IQyz1FBnC3J7FxrTXQB5DUKFNBrfK7n+dJq6aojZx+SgXB60MpMLeQiKrjAV
P4x9NY+9bFGI+mVPvKtmjqCp6A6fp0/IPlOS5uH92md/etps0i0oPbXMAbhofTkT
pYtiAT9faS4uFvEpyPNOZm1zFrCwF8pFSKXRol9FUUk7di2OO6i3DBrcUXrouSW5
aTsPoYMz8sOigPIxrQSdTw/RKRB54edemxULx7JBqo22imBm6En+35Wba1BcFi0S
i2W/ImySfNOULorGFJS5qsjg6pkRBWQ6C0Tve+IJplLyIDnpj/AA8pTRHv4yLUKQ
1XOHit24tDzX4w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:15:09 2026 by rpki-client