Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
File: qhC-mR89uJUJcQwgZ233qKS_4bQ.mft (raw, json)
Hash identifier: xD5+Y/9xrt3LmC8G/qKm809Qa32mgSXis9aeqgTvVCA=
Subject key identifier: 5F:46:04:9D:E9:EE:5A:E0:32:00:3F:3B:94:C8:66:0B:1E:52:33:49
Authority key identifier: AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
Certificate issuer: /CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Certificate serial: 019CAE356981D6B039CBAC84E39FEA27974C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
Manifest number: 0C54
Signing time: Mon 02 Mar 2026 11:01:01 +0000
Manifest this update: Mon 02 Mar 2026 11:01:01 +0000
Manifest next update: Tue 03 Mar 2026 11:01:01 +0000
Files and hashes: 1: qhC-mR89uJUJcQwgZ233qKS_4bQ.crl (hash: +IDuY00gtAqeeKRSnJEgEcCuCaTnndPgamCuaziH1TA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:69:81:d6:b0:39:cb:ac:84:e3:9f:ea:27:97:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa10be991f3db89509710c20676df7a8a4bfe1b4
Validity
Not Before: Mar 2 11:01:01 2026 GMT
Not After : Mar 3 11:01:01 2026 GMT
Subject: CN=5f46049de9ee5ae032003f3b94c8660b1e523349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:ac:da:61:5b:80:bf:ad:9e:bd:eb:5c:66:
be:74:43:e9:0f:be:86:0c:b5:55:09:0b:18:58:fd:
1a:32:44:2c:4d:9e:4d:fe:85:9b:42:d5:f4:4c:00:
07:3e:4a:f9:1c:12:25:b4:a7:07:e5:b8:32:8e:8f:
e1:0e:ba:b3:4b:2f:db:93:c2:ef:8e:a4:8a:90:5e:
45:81:85:95:11:55:07:c9:0e:cb:34:f5:fe:b5:ef:
cb:d0:0c:b9:b1:c1:73:6f:42:00:b0:70:35:40:03:
5d:86:8b:84:56:7c:5b:8a:0e:3e:9b:be:80:1e:55:
a6:b6:0b:1e:90:da:fe:33:8f:96:4c:e4:a9:91:85:
d8:d7:56:ba:ba:f6:bb:79:1b:85:a4:dc:a9:61:66:
cc:b2:e5:a5:c2:ff:fd:77:a4:d6:7e:0d:7e:32:e0:
07:b5:7d:17:e8:57:ef:aa:cb:bb:68:f7:88:55:fa:
49:34:23:39:c1:4a:e6:d8:a0:e5:40:38:e7:a9:ce:
1c:2f:a9:75:68:41:5c:c1:b0:27:eb:d9:aa:d1:8d:
2a:c9:93:5e:3e:67:1e:c7:5c:b8:73:9a:0c:67:c7:
6a:19:06:26:24:0e:5a:9a:c5:da:54:98:3e:ad:21:
92:e2:7e:d1:ca:7f:51:98:61:4b:14:99:49:60:bd:
e9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:46:04:9D:E9:EE:5A:E0:32:00:3F:3B:94:C8:66:0B:1E:52:33:49
X509v3 Authority Key Identifier:
keyid:AA:10:BE:99:1F:3D:B8:95:09:71:0C:20:67:6D:F7:A8:A4:BF:E1:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qhC-mR89uJUJcQwgZ233qKS_4bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/235365-8d15-4125-9017-183e2e72301b/1/qhC-mR89uJUJcQwgZ233qKS_4bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:47:de:1b:e8:97:40:18:71:b0:2d:0b:3b:47:67:b1:27:79:
22:72:8d:a9:d4:bb:00:11:aa:e3:cc:64:85:28:72:0c:5d:89:
c4:66:ff:a6:5b:d9:6d:ff:89:9a:0e:2b:ea:d8:5d:3f:3c:6f:
8e:16:b8:a3:1a:cb:cf:43:18:7c:ad:32:8d:32:0f:72:4f:ac:
f4:68:36:07:3b:34:a9:00:7f:37:15:88:5f:c3:78:58:e4:35:
a8:95:8a:61:60:3b:ed:01:86:3b:49:50:d9:de:bc:28:62:89:
38:c5:a4:b5:d7:99:de:c7:5f:e4:a7:5b:1e:65:d5:53:8a:ec:
88:12:49:8d:76:3e:8c:81:8b:88:e4:3f:12:b1:cd:30:27:63:
4d:71:0b:d6:a8:fe:3a:67:7e:c5:ca:0e:21:a9:ee:98:15:c6:
8e:73:be:94:ed:0f:d2:ae:42:d7:0f:9f:6a:51:9d:d3:4a:4c:
df:b9:2d:5c:57:7b:07:ea:c9:25:07:18:52:f3:d2:12:54:37:
af:87:3e:4e:77:79:64:bd:65:d3:fa:b0:a3:37:2a:b5:cf:77:
48:ca:af:14:63:6b:d7:b2:ed:ae:5d:98:54:d1:c6:04:71:cf:
e0:33:b4:f0:a2:be:23:65:42:47:fd:2a:10:52:c6:db:cb:06:
69:ae:6b:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:19 2026 by rpki-client