
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
File: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft (raw, json)
Hash identifier: oAAn+t7y92mOLRRzXP4j/d1QsE0Rb2Vx2h+6Ik9z7vE=
Subject key identifier: CA:59:02:88:7C:60:5E:08:8A:41:BF:0A:A3:A3:DF:35:4B:04:AF:36
Authority key identifier: A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
Certificate issuer: /CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Certificate serial: 019CAFB5DDE4BA78F93A7AAB41A3EEF3057B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
Manifest number: 1845
Signing time: Mon 02 Mar 2026 18:00:57 +0000
Manifest this update: Mon 02 Mar 2026 18:00:57 +0000
Manifest next update: Tue 03 Mar 2026 18:00:57 +0000
Files and hashes: 1: qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl (hash: mddbWPY+03KXJTrlIXvTscS1WOBEvGwdjlZxn9EYkpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 18:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:b5:dd:e4:ba:78:f9:3a:7a:ab:41:a3:ee:f3:05:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a912787aaa46fb04dacfc5eb6060b0aca0284b71
Validity
Not Before: Mar 2 18:00:57 2026 GMT
Not After : Mar 3 18:00:57 2026 GMT
Subject: CN=ca5902887c605e088a41bf0aa3a3df354b04af36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a9:46:d0:fb:5d:47:c8:cd:51:b3:a2:5d:26:
3b:7e:42:30:35:66:4c:d3:f3:8f:d4:99:72:3f:aa:
98:60:b1:72:7f:42:bc:c4:8d:78:71:ce:5d:1e:0a:
3c:4f:69:42:d1:08:e3:ca:3f:37:cd:da:02:3e:c1:
02:f7:ac:a9:80:ec:2c:20:eb:bb:91:2f:f8:16:f6:
24:b0:e4:10:cb:6b:eb:c6:57:0e:ab:e5:71:76:23:
f0:ec:b0:d6:16:ba:9f:94:dc:23:ea:7a:f5:0f:fb:
ab:74:a6:35:80:a2:01:74:ca:01:4c:d6:f9:9b:02:
a1:f9:77:c6:cd:59:53:6f:85:50:9b:54:89:ae:72:
37:73:e3:f6:ee:fa:71:05:4c:cf:89:ae:07:9d:95:
3a:0a:33:cc:03:b4:f0:21:10:21:9c:09:6e:01:c8:
b9:58:fa:e8:90:51:d7:d6:4c:3d:1c:2f:b7:bc:a2:
09:5c:e8:20:13:2d:b7:97:ea:b6:83:8d:3f:e8:d2:
ef:1d:e8:d9:f5:d3:d9:21:72:66:bf:5b:87:23:2f:
de:18:0d:81:29:79:21:04:46:68:af:98:37:37:93:
b9:45:29:7b:7b:25:a6:d7:d2:41:01:70:79:bc:60:
bf:41:1d:c5:38:35:a0:32:ab:24:47:a2:0f:7e:cd:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:59:02:88:7C:60:5E:08:8A:41:BF:0A:A3:A3:DF:35:4B:04:AF:36
X509v3 Authority Key Identifier:
keyid:A9:12:78:7A:AA:46:FB:04:DA:CF:C5:EB:60:60:B0:AC:A0:28:4B:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/8772cf-dd34-4b81-926c-e81f5fe4738f/1/qRJ4eqpG-wTaz8XrYGCwrKAoS3E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:a0:6d:dd:f6:83:f5:aa:9e:78:1a:74:51:05:d4:96:d0:b9:
aa:4e:29:6b:8a:2a:ba:d2:9b:fc:e9:e6:09:cb:32:35:1e:df:
74:b8:e8:91:15:a7:d5:2c:0a:06:0d:be:8b:9f:5c:0a:9b:80:
c3:0f:9b:3c:97:74:8a:19:ba:c8:20:38:b5:5d:79:a0:7c:dc:
38:71:c6:b9:d0:f9:68:a3:b4:a1:56:77:d6:fc:6f:22:fa:7b:
9e:bd:d3:86:4d:77:a0:3b:45:7e:a9:a7:c8:cf:10:a3:60:1a:
09:9c:ee:6f:16:2c:28:5f:f8:e6:16:9c:5a:30:4f:a9:50:ca:
07:f5:7b:e1:37:cb:a7:2b:ed:47:98:25:f8:27:1a:55:da:e5:
38:0b:e2:48:cc:fa:80:31:02:14:4d:bc:bb:76:8c:05:a0:18:
e4:7a:3a:fc:b8:b2:23:a9:60:b4:fe:95:92:dc:e4:5d:a9:93:
91:0b:21:5d:f1:2a:92:51:f8:27:94:68:f1:16:18:70:19:2d:
82:0b:b1:72:fc:f2:f0:50:4c:27:73:04:60:71:c3:6f:7b:98:
55:5c:0a:2e:32:b5:7d:5d:48:1a:50:f0:d9:6f:9a:ec:88:1e:
4e:ed:7c:8c:64:6a:83:bd:e1:8f:8e:a7:a4:d7:b8:70:a6:cd:
3b:ab:57:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyvtd3kunj5OnqrQaPu8wV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5MTI3ODdhYWE0NmZiMDRkYWNmYzVlYjYwNjBiMGFjYTAy
ODRiNzEwHhcNMjYwMzAyMTgwMDU3WhcNMjYwMzAzMTgwMDU3WjAzMTEwLwYDVQQD
EyhjYTU5MDI4ODdjNjA1ZTA4OGE0MWJmMGFhM2EzZGYzNTRiMDRhZjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqlG0PtdR8jNUbOiXSY7fkIwNWZM
0/OP1JlyP6qYYLFyf0K8xI14cc5dHgo8T2lC0Qjjyj83zdoCPsEC96ypgOwsIOu7
kS/4FvYksOQQy2vrxlcOq+VxdiPw7LDWFrqflNwj6nr1D/urdKY1gKIBdMoBTNb5
mwKh+XfGzVlTb4VQm1SJrnI3c+P27vpxBUzPia4HnZU6CjPMA7TwIRAhnAluAci5
WProkFHX1kw9HC+3vKIJXOggEy23l+q2g40/6NLvHejZ9dPZIXJmv1uHIy/eGA2B
KXkhBEZor5g3N5O5RSl7eyWm19JBAXB5vGC/QR3FODWgMqskR6IPfs2W0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpZAoh8YF4IikG/CqOj3zVLBK82MB8GA1UdIwQY
MBaAFKkSeHqqRvsE2s/F62BgsKygKEtxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni84NzcyY2YtZGQzNC00YjgxLTkyNmMt
ZTgxZjVmZTQ3MzhmLzEvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni84NzcyY2YtZGQzNC00YjgxLTkyNmMtZTgxZjVmZTQ3Mzhm
LzEvcVJKNGVxcEctd1RhejhYcllHQ3dyS0FvUzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkaBt3faD
9aqeeBp0UQXUltC5qk4pa4oqutKb/OnmCcsyNR7fdLjokRWn1SwKBg2+i59cCpuA
ww+bPJd0ihm6yCA4tV15oHzcOHHGudD5aKO0oVZ31vxvIvp7nr3Thk13oDtFfqmn
yM8Qo2AaCZzubxYsKF/45hacWjBPqVDKB/V74TfLpyvtR5gl+CcaVdrlOAviSMz6
gDECFE28u3aMBaAY5Ho6/LiyI6lgtP6VktzkXamTkQshXfEqklH4J5Ro8RYYcBkt
gguxcvzy8FBMJ3MEYHHDb3uYVVwKLjK1fV1IGlDw2W+a7IgeTu18jGRqg73hj46n
pNe4cKbNO6tX2Q==
-----END CERTIFICATE-----
Generated at Tue Mar 3 02:11:41 2026 by rpki-client