Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
File: QucVYSpqaXFPXj8uTLxI_OhKb1I.mft (raw, json)
Hash identifier: 3Ae+8IhN5xiDKEHurTB/ORZOu/t2oVAuM1fnyWrhTrI=
Subject key identifier: AA:65:20:91:A1:07:81:8D:83:4B:A7:B8:90:3B:9D:46:FD:B0:BE:F7
Authority key identifier: 42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
Certificate issuer: /CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Certificate serial: 019CABDA037F9DC8BC208D31416D2A3095F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
Manifest number: 1843
Signing time: Mon 02 Mar 2026 00:01:57 +0000
Manifest this update: Mon 02 Mar 2026 00:01:57 +0000
Manifest next update: Tue 03 Mar 2026 00:01:57 +0000
Files and hashes: 1: QucVYSpqaXFPXj8uTLxI_OhKb1I.crl (hash: BFN/WF3PBpqYjkKURwP1WjP5qX22Nlh2emZDe8Rm8iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:da:03:7f:9d:c8:bc:20:8d:31:41:6d:2a:30:95:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42e715612a6a69714f5e3f2e4cbc48fce84a6f52
Validity
Not Before: Mar 2 00:01:57 2026 GMT
Not After : Mar 3 00:01:57 2026 GMT
Subject: CN=aa652091a107818d834ba7b8903b9d46fdb0bef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cb:33:c2:80:76:11:e3:ce:9c:bf:ff:58:03:
6d:38:45:e6:fb:1f:78:45:a6:a0:b5:62:b4:d4:eb:
fb:92:8a:2a:3b:69:94:c5:3a:96:25:e2:fd:dd:eb:
3d:8c:9b:e5:b5:9a:9f:e5:24:de:1a:64:1b:37:26:
3a:d5:6c:23:9e:79:48:d1:5c:03:c9:dd:3f:c4:61:
c9:c1:a6:5f:b5:a1:d5:81:05:c8:8d:5d:c7:c4:a1:
15:4d:e5:15:b9:09:9e:c6:a4:4e:8c:41:cb:51:55:
8a:15:ba:07:22:61:18:99:ed:bf:e5:24:95:80:04:
9c:05:40:4b:3b:25:39:80:8f:04:2a:f9:64:a5:12:
3b:dd:7c:c5:66:14:f7:b4:98:90:4c:b1:bf:33:6f:
f1:ed:ac:eb:3e:58:fc:da:8f:7d:b3:77:9e:14:21:
8b:51:94:d0:15:ec:95:21:32:38:f1:1b:53:9e:4f:
85:d5:64:c0:bb:98:fd:9f:6b:55:78:62:47:85:a6:
1a:dd:69:87:3e:fa:fb:f6:0b:c5:8e:81:f8:55:62:
0a:6d:c2:51:01:c4:ee:08:16:2d:47:fc:60:c7:ac:
a1:76:af:02:ed:85:3c:ed:ef:99:ac:f0:fc:d7:99:
f4:a8:50:95:5d:58:93:1f:60:1e:dc:1b:8e:6a:53:
61:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:65:20:91:A1:07:81:8D:83:4B:A7:B8:90:3B:9D:46:FD:B0:BE:F7
X509v3 Authority Key Identifier:
keyid:42:E7:15:61:2A:6A:69:71:4F:5E:3F:2E:4C:BC:48:FC:E8:4A:6F:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QucVYSpqaXFPXj8uTLxI_OhKb1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6fb9c3-6c9c-439e-8cca-d99a2198a68d/1/QucVYSpqaXFPXj8uTLxI_OhKb1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:8b:54:f0:b2:d3:15:b2:0c:5a:59:21:dc:5c:08:ba:95:68:
fd:5b:5d:8f:05:8d:25:37:dc:21:dc:6a:d7:af:d1:75:ec:b0:
78:69:2d:08:05:47:18:d9:59:f3:e2:27:e9:7c:2c:41:f0:b4:
2b:f7:6e:f6:9f:24:96:b8:7c:76:e7:9a:90:18:56:c4:b5:88:
7a:e1:81:fd:d9:2c:89:58:a9:1a:c1:f7:13:15:71:13:fb:96:
8b:ca:5d:b6:49:8e:e3:8e:bf:52:10:c9:a1:e3:1e:fb:bb:80:
7b:91:4b:37:0b:70:9b:89:7b:65:fb:b9:73:23:54:8b:06:ce:
b7:5f:85:0a:80:8a:0b:79:b9:d1:d8:35:99:49:4d:43:24:ab:
39:3c:75:59:b9:88:e0:a6:8a:51:db:05:ba:34:d8:96:e6:20:
5a:13:09:7c:78:6c:7e:fd:c4:b0:f5:c7:f1:55:dc:23:19:9b:
b3:c2:71:4f:53:ac:ab:4a:fa:39:92:a6:3e:d0:13:92:1d:63:
69:7d:17:45:23:1b:a6:ba:6f:ee:83:db:77:3c:b2:b7:c3:6a:
96:f6:36:75:56:6a:82:d1:23:74:9a:dd:60:e2:02:e6:bd:fb:
16:4b:b5:ff:21:95:e8:78:8b:26:38:e5:d3:8c:ef:17:94:ae:
f9:3a:a8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:56:37 2026 by rpki-client