Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
File: QaCIiaXMcoT9MkqZK_qN59bCwYo.mft (raw, json)
Hash identifier: 7q321TN7+Mq2a+Regns+g1N9ydSUO6PdQ/3pwlqm4Qw=
Subject key identifier: B4:34:99:17:7C:C8:33:D5:87:DC:36:20:C5:90:53:8A:05:7A:DC:6C
Authority key identifier: 41:A0:88:89:A5:CC:72:84:FD:32:4A:99:2B:FA:8D:E7:D6:C2:C1:8A
Certificate issuer: /CN=41a08889a5cc7284fd324a992bfa8de7d6c2c18a
Certificate serial: 019D29CE7A6484A3AE43E4872B19D492020A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
Manifest number: 07E4
Signing time: Thu 26 Mar 2026 11:01:30 +0000
Manifest this update: Thu 26 Mar 2026 11:01:30 +0000
Manifest next update: Fri 27 Mar 2026 11:01:30 +0000
Files and hashes: 1: QaCIiaXMcoT9MkqZK_qN59bCwYo.crl (hash: 9vBVxmMqZRPCndN8O9waMWbjDIBBN50gQvLutyrDQps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:7a:64:84:a3:ae:43:e4:87:2b:19:d4:92:02:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41a08889a5cc7284fd324a992bfa8de7d6c2c18a
Validity
Not Before: Mar 26 11:01:30 2026 GMT
Not After : Mar 27 11:01:30 2026 GMT
Subject: CN=b43499177cc833d587dc3620c590538a057adc6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a1:63:c1:62:a0:34:2d:f4:e1:86:5b:84:ea:
13:3c:e1:a5:83:f1:20:76:c0:39:5e:fa:0f:2e:e8:
e4:cd:ef:8c:8a:85:b1:85:87:b3:8f:a1:3b:61:d5:
6f:f8:df:9b:3c:b3:2f:e8:2a:b4:18:1d:1a:bc:03:
98:ac:22:01:8d:eb:f5:e5:43:fb:ff:a7:d4:50:99:
b7:c4:7f:cc:5d:da:83:fa:cd:90:75:23:73:20:a1:
54:38:55:38:20:10:e5:27:d9:bd:16:f6:fa:9d:b7:
eb:8f:b8:82:d6:20:e2:57:27:d3:3d:c7:b4:7a:0d:
db:ce:3f:35:fc:31:5f:38:d2:a0:43:df:0a:00:68:
6b:9f:9d:86:d6:3d:ad:91:85:d5:5c:72:82:97:2e:
b4:0d:90:7e:7c:0e:bb:7d:13:de:d9:b3:e8:c2:f4:
ca:e6:dd:65:3b:40:e8:6b:dc:1d:d3:0c:78:db:0b:
65:d7:cb:67:08:32:19:0c:4d:5f:6f:c8:9d:2a:eb:
9f:90:60:0c:1f:54:09:5c:cc:8d:3b:8e:40:3d:86:
b2:d9:1a:de:ca:d5:67:a1:d9:6e:ce:4e:36:3c:31:
61:7a:16:ad:37:80:a9:3d:dd:f5:ff:ca:f1:50:9a:
54:56:81:9e:21:22:ee:3f:f4:76:85:91:64:b4:bd:
b1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:34:99:17:7C:C8:33:D5:87:DC:36:20:C5:90:53:8A:05:7A:DC:6C
X509v3 Authority Key Identifier:
keyid:41:A0:88:89:A5:CC:72:84:FD:32:4A:99:2B:FA:8D:E7:D6:C2:C1:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QaCIiaXMcoT9MkqZK_qN59bCwYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/ddb5a6-53f3-4d64-bc39-561267a42926/1/QaCIiaXMcoT9MkqZK_qN59bCwYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2a:33:4d:17:45:93:02:c1:d5:11:a0:e1:c2:9b:13:f8:1a:
59:70:54:be:50:79:ea:77:22:c2:fe:e4:b8:e1:bc:56:f9:01:
8a:70:a7:65:f2:67:7b:c5:69:a0:20:84:fb:39:bf:4a:cb:19:
83:40:ae:ce:6f:ba:77:b6:c6:7f:92:a5:3c:a3:2e:d1:e2:90:
35:83:d3:42:48:79:78:50:3b:34:8e:99:4f:c5:38:b9:b6:3b:
8f:6b:e3:54:95:5b:ce:6a:e2:23:46:ed:ed:17:a0:e0:25:d4:
cf:91:93:ee:a1:cb:4b:9d:46:34:ae:a0:93:fc:ea:79:d4:c2:
61:e3:7a:4e:70:08:39:6d:68:7d:c1:64:4c:53:6e:cd:21:39:
60:45:01:11:4f:06:83:56:3a:c5:79:cf:ed:85:6b:98:8c:5e:
db:1d:1d:74:26:6f:7b:0c:ce:22:7b:24:72:f1:e3:7c:5d:91:
de:41:f4:b1:48:64:c4:0b:d1:cb:a0:c0:b0:83:0c:68:08:25:
f4:a8:c7:6c:f3:9c:1c:c4:66:e1:ab:52:8f:e0:69:11:1b:28:
16:47:0f:d1:b1:72:a2:a1:bd:2c:5c:ee:3d:8f:59:36:1c:45:
32:7c:7a:87:27:4b:04:af:c4:c2:0d:26:c1:6c:98:64:88:91:
56:7b:5a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:08:28 2026 by rpki-client