Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
File: rsqu_IRN7K6xKV2CalKOhFurG-A.mft (raw, json)
Hash identifier: Iu09dUP45z+PC/W3+yvPY6W0eVpyOC95DD9UaIiYxWM=
Subject key identifier: A4:EA:64:87:C1:F8:9B:1F:AC:0F:3E:00:DC:13:D0:F2:23:19:99:5A
Authority key identifier: AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
Certificate issuer: /CN=aecaaefc844decaeb1295d826a528e845bab1be0
Certificate serial: 019CAAC6FC296A9DDEAA0D789A92DC841E4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
Manifest number: 1007
Signing time: Sun 01 Mar 2026 19:01:33 +0000
Manifest this update: Sun 01 Mar 2026 19:01:33 +0000
Manifest next update: Mon 02 Mar 2026 19:01:33 +0000
Files and hashes: 1: rsqu_IRN7K6xKV2CalKOhFurG-A.crl (hash: S33fHb7WZk8n/UsPzaGpOVLsgVoRwbVe594bWukJQNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:fc:29:6a:9d:de:aa:0d:78:9a:92:dc:84:1e:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecaaefc844decaeb1295d826a528e845bab1be0
Validity
Not Before: Mar 1 19:01:33 2026 GMT
Not After : Mar 2 19:01:33 2026 GMT
Subject: CN=a4ea6487c1f89b1fac0f3e00dc13d0f22319995a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:e3:57:48:97:e2:2e:b0:3c:15:bd:e8:ac:
67:14:3b:b0:a2:1a:0d:e8:f7:f2:9a:65:ad:20:06:
01:6d:57:10:ee:ea:7e:ee:e0:08:35:15:f4:a1:b1:
75:a2:c2:85:e1:88:d7:e3:bc:4f:98:77:ce:91:c8:
08:bb:ca:42:8f:aa:a9:59:5e:97:da:bd:7e:a7:44:
41:33:14:83:39:2f:37:3d:84:80:61:bb:97:ce:c0:
1e:e2:a9:2f:bb:b1:8f:3f:2f:a5:23:1c:db:d5:42:
ac:c8:28:fa:15:0c:8b:fc:57:aa:dd:0b:60:36:ca:
48:1f:4b:88:cf:45:a0:0b:e1:73:26:b5:09:c2:a5:
da:fc:f6:6d:ba:f3:3c:e1:c9:5b:1d:9f:3c:49:bb:
d4:2d:37:19:47:ca:8a:58:f9:ce:95:17:8c:9a:39:
47:33:d3:ed:92:3c:4f:8f:2e:4d:2f:cd:47:0b:44:
7e:c5:17:71:01:0c:fd:a1:e3:4f:ca:be:c8:f8:f6:
7b:17:8d:04:6c:aa:ad:75:ea:84:de:e2:43:a2:9c:
d5:92:68:6b:5a:12:37:15:57:6d:4d:54:6d:c9:ed:
bf:32:1b:43:09:d2:38:bd:ae:50:71:bd:f6:7b:43:
24:ba:8b:ac:a0:a7:48:8d:54:56:d6:8c:29:31:53:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:EA:64:87:C1:F8:9B:1F:AC:0F:3E:00:DC:13:D0:F2:23:19:99:5A
X509v3 Authority Key Identifier:
keyid:AE:CA:AE:FC:84:4D:EC:AE:B1:29:5D:82:6A:52:8E:84:5B:AB:1B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rsqu_IRN7K6xKV2CalKOhFurG-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a73905-31dd-4401-9d1b-6d8d91c7faa0/1/rsqu_IRN7K6xKV2CalKOhFurG-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:bb:ec:6b:dc:22:43:42:7c:c9:55:06:a6:43:37:20:65:58:
e1:ea:9f:b9:1b:fa:e8:eb:25:b6:17:76:23:19:a1:4f:fb:22:
0e:08:40:3e:20:12:39:93:99:c9:20:15:f0:7b:ea:74:b7:e6:
5a:12:df:cd:e3:06:10:7a:b7:36:aa:da:a2:d5:de:6c:eb:fa:
62:ed:f6:d8:c8:3c:3d:b2:5f:2f:8d:ae:af:58:58:51:14:0c:
90:24:55:4c:a6:3f:7e:d3:15:51:f6:61:06:d0:f0:e2:72:7e:
ef:25:5f:21:ed:5f:c8:fe:4e:0d:3c:f8:73:b4:90:38:18:93:
33:6e:e9:2f:ed:b6:e2:dd:64:5c:1a:cf:4a:59:8d:ed:1b:67:
ea:1b:01:60:24:44:6f:63:52:50:47:50:5e:40:33:7b:4f:a7:
e3:47:bc:6f:8b:06:09:ec:fb:4e:02:2c:29:9a:7b:c0:f7:62:
8a:db:b2:49:26:0d:22:5c:0a:f4:41:08:a4:2e:b5:ce:45:20:
14:6e:22:25:bf:66:d3:07:89:5e:bd:c3:c9:fa:4f:d5:bf:bb:
4d:1d:4e:35:c7:4a:54:b8:30:61:3f:cc:e2:b7:05:20:bc:cd:
e5:1b:4b:9b:b4:6c:b7:07:14:ed:30:e1:79:4d:e3:70:51:01:
b4:a3:f1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:27:54 2026 by rpki-client