Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
File: QurpaJeCnA3hU3K6GMRA9oeasZM.mft (raw, json)
Hash identifier: 6tRz/0pS1u/kwhWTRs/maq/+rhrX6w1ZSiJAOLe8F00=
Subject key identifier: 33:8A:09:CC:D2:E7:EA:E0:4E:65:F4:27:56:2A:A6:87:BB:22:BB:1F
Authority key identifier: 42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
Certificate issuer: /CN=42eae96897829c0de15372ba18c440f6879ab193
Certificate serial: 019D97AAE6AB0588B7AED91D305F95B9A894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
Manifest number: 0931
Signing time: Thu 16 Apr 2026 19:00:52 +0000
Manifest this update: Thu 16 Apr 2026 19:00:52 +0000
Manifest next update: Fri 17 Apr 2026 19:00:52 +0000
Files and hashes: 1: QurpaJeCnA3hU3K6GMRA9oeasZM.crl (hash: zvWAS7mAPCr3o6kJx12NORMbo/NzkTQ+6lduVQRxG08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:e6:ab:05:88:b7:ae:d9:1d:30:5f:95:b9:a8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42eae96897829c0de15372ba18c440f6879ab193
Validity
Not Before: Apr 16 19:00:52 2026 GMT
Not After : Apr 17 19:00:52 2026 GMT
Subject: CN=338a09ccd2e7eae04e65f427562aa687bb22bb1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:80:ca:86:f3:65:6a:fc:e8:9b:46:cf:36:94:
e5:ef:58:f8:c4:84:8c:86:51:34:d2:93:0e:52:cd:
e3:d1:2b:52:04:87:41:c1:98:3b:de:31:b6:4a:fa:
41:07:60:31:bd:44:74:e5:c6:4e:5f:14:3d:a2:22:
d0:44:f0:e6:19:f3:ca:76:71:2a:8a:5c:4f:84:8a:
9c:e4:57:d5:55:b5:c5:dc:34:4c:f1:5b:14:cc:61:
8d:2b:4c:fa:e2:59:f4:ad:89:f8:96:ae:2d:9a:e7:
0a:93:79:b9:10:a7:eb:53:1d:4e:e0:ac:2d:8d:b4:
7a:89:f7:89:7e:2f:ed:64:23:4b:44:da:7f:bf:82:
af:51:14:1e:0e:ff:62:0b:57:d6:19:2c:ef:75:8b:
21:ab:99:c0:89:8d:8d:47:a6:ec:0a:2d:6b:27:7e:
2b:72:9d:34:c3:6d:33:75:e6:ed:eb:0a:72:c9:1a:
a4:62:a8:fa:53:c3:2c:93:41:6c:3c:62:ed:3e:b2:
f3:0c:22:5a:09:fa:d0:78:9c:fe:af:88:6f:52:5d:
e5:3c:15:0e:d2:1f:de:a3:3f:d2:9a:36:b3:aa:6e:
a6:a1:85:39:fd:44:5c:ee:bb:c0:16:fc:b2:51:bb:
2b:b3:9a:eb:80:fc:18:0f:7c:be:b9:7b:80:90:5b:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:8A:09:CC:D2:E7:EA:E0:4E:65:F4:27:56:2A:A6:87:BB:22:BB:1F
X509v3 Authority Key Identifier:
keyid:42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:51:bc:5a:d2:b5:dc:24:44:ae:fb:4f:41:b6:c9:6f:dc:e9:
30:96:af:31:c9:b6:a4:37:eb:ae:be:1e:b8:b8:9e:40:28:33:
14:19:9a:d4:67:0d:1b:b4:b8:40:a8:2b:84:65:f9:72:f8:9b:
55:b5:05:27:e5:13:2f:30:24:35:2f:19:9f:35:bb:94:5f:b2:
a6:70:e0:4c:2c:fb:29:9d:ee:cc:14:6f:b9:63:24:17:a1:93:
c0:5d:ca:ed:11:7c:2c:07:78:61:32:e9:77:00:30:66:42:92:
be:d0:1b:1c:04:a6:2f:6f:dd:88:f4:0c:28:88:07:00:45:08:
6a:81:7a:f2:8f:2b:25:f4:c4:0c:a5:d0:96:e4:a9:d3:9a:49:
f7:34:a8:9b:a6:ae:86:8a:e7:5e:11:86:de:d5:37:20:31:51:
37:e6:07:ba:bb:16:d2:86:fd:4f:f5:fa:0d:a9:a2:1a:3c:fc:
ab:69:59:cb:f0:07:96:ec:f7:f3:ea:3c:68:6f:bb:36:16:b5:
af:d1:7a:e6:d3:62:57:f8:05:51:26:c1:d2:dd:00:cc:45:2c:
ac:34:c2:13:f1:de:b6:d1:63:94:df:ce:c1:1e:78:6d:a7:bd:
17:cd:25:42:c2:6c:be:15:4f:5a:a0:79:1c:7b:51:77:0a:26:
54:df:12:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:13 2026 by rpki-client