Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
File: QurpaJeCnA3hU3K6GMRA9oeasZM.mft (raw, json)
Hash identifier: 8VyNbMMy2sdivrXS33YkFAQFw/n06yaWEwwNepeElZM=
Subject key identifier: 94:7F:E3:26:7C:24:84:50:D6:89:13:7D:C5:E4:D1:B3:F4:10:98:F6
Authority key identifier: 42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
Certificate issuer: /CN=42eae96897829c0de15372ba18c440f6879ab193
Certificate serial: 019CAC0FE8FD8F96E798CD545BDACA7D3AE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
Manifest number: 08B7
Signing time: Mon 02 Mar 2026 01:00:49 +0000
Manifest this update: Mon 02 Mar 2026 01:00:49 +0000
Manifest next update: Tue 03 Mar 2026 01:00:49 +0000
Files and hashes: 1: QurpaJeCnA3hU3K6GMRA9oeasZM.crl (hash: +sUkFiFEdtyIk/k5Il12FaW9/JwgLQWWdoa3xoBzNUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:e8:fd:8f:96:e7:98:cd:54:5b:da:ca:7d:3a:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42eae96897829c0de15372ba18c440f6879ab193
Validity
Not Before: Mar 2 01:00:49 2026 GMT
Not After : Mar 3 01:00:49 2026 GMT
Subject: CN=947fe3267c248450d689137dc5e4d1b3f41098f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:69:be:ae:e5:1c:ab:b7:ae:f9:95:ec:47:79:
07:16:cb:0c:9c:4f:34:41:a1:cd:22:41:b2:f6:78:
b4:58:51:a4:a5:a2:8e:73:f8:05:54:95:04:ad:c0:
ad:3e:9b:79:51:23:22:10:d1:8d:a7:75:9d:7b:73:
c5:f7:d4:c0:ab:06:a0:f5:84:76:a1:05:9c:83:cd:
16:37:75:74:65:63:8f:51:e7:8a:5d:9f:c3:fe:c3:
a5:2e:ef:0a:08:a3:58:68:15:92:02:40:ab:0f:4f:
e6:47:5d:27:a6:7a:a1:71:f4:40:72:a5:80:7c:59:
39:a8:43:80:53:88:78:bc:ce:2c:28:08:2f:39:08:
69:35:02:54:35:a0:af:29:0e:25:1e:ab:d4:b6:4a:
59:b5:5b:7d:35:4b:43:12:bd:b0:18:02:00:5a:da:
f7:4b:71:f1:a4:fe:2e:bb:9a:70:86:2e:89:30:04:
5c:31:da:ad:6a:e6:fc:3c:9d:16:0f:48:27:99:dd:
ef:92:55:c9:a2:51:f8:f1:41:20:e1:0d:18:d1:6b:
b5:6c:cf:88:1e:ee:2e:08:a1:ae:5e:03:db:70:77:
55:d0:75:07:20:6a:56:85:5f:7f:0d:c4:1e:e1:83:
88:48:82:db:9b:c6:cb:6a:f4:e1:d3:b0:4c:c0:88:
c0:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:7F:E3:26:7C:24:84:50:D6:89:13:7D:C5:E4:D1:B3:F4:10:98:F6
X509v3 Authority Key Identifier:
keyid:42:EA:E9:68:97:82:9C:0D:E1:53:72:BA:18:C4:40:F6:87:9A:B1:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QurpaJeCnA3hU3K6GMRA9oeasZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/a05a2b-e335-496d-a413-5b301856e4b3/1/QurpaJeCnA3hU3K6GMRA9oeasZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:1f:09:3a:76:15:85:5e:ef:c8:99:cb:15:a5:7d:fc:d8:0b:
9d:ae:34:cc:8a:e8:6a:7f:67:30:cf:ac:dc:20:d2:46:9c:9d:
ac:05:61:80:c3:cf:38:a7:ff:92:47:32:21:20:fe:d9:bf:ec:
3e:46:43:3a:41:ab:07:6c:bd:9d:97:1f:bf:5e:9e:23:43:aa:
f9:40:73:b9:89:da:e7:5f:f1:95:f3:15:af:e6:e7:a5:b4:01:
f8:02:1f:ad:26:17:83:e8:42:88:4b:3c:0e:9e:fd:04:c9:14:
55:2d:e2:28:94:0c:91:70:9a:b7:13:d3:31:26:a5:97:f4:d8:
ab:27:e3:a5:8e:f0:c0:14:7d:44:37:f0:d3:74:13:ea:65:61:
5f:2c:6d:99:64:2a:0b:16:81:10:9d:82:cc:12:22:9c:28:c9:
fd:7a:98:72:6a:f0:6c:9d:f4:f4:d9:8c:d0:cc:34:64:c3:fb:
b9:4e:33:23:71:3f:66:2f:6c:c6:f8:b5:26:d4:d9:a3:1a:f5:
8a:8c:7f:21:ed:0a:42:b7:e9:a8:a5:e7:3c:49:a9:47:d8:4d:
4e:67:9d:51:48:b9:07:2a:56:da:8e:80:89:b9:c8:fc:fd:c6:
54:ea:cd:54:76:c1:14:0b:c0:77:04:5b:33:f0:26:88:c4:40:
0f:ad:03:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:41:16 2026 by rpki-client