Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
File: QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft (raw, json)
Hash identifier: 9q9pkNQ7Oxx/meEuHppdfeHEF4oSCE8sVKZzC6qBAB4=
Subject key identifier: B8:6D:B3:75:92:F7:31:0D:48:54:8C:BE:18:DF:B0:A0:FB:9B:C3:4D
Authority key identifier: 40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
Certificate issuer: /CN=404aabbfab9de7126b7d119db524da4111f04afe
Certificate serial: 019D2704DB75C6560726891588A72C625CE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
Manifest number: 1281
Signing time: Wed 25 Mar 2026 22:02:02 +0000
Manifest this update: Wed 25 Mar 2026 22:02:02 +0000
Manifest next update: Thu 26 Mar 2026 22:02:02 +0000
Files and hashes: 1: QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl (hash: OGoxfIbRMqJC0qPkxDyhVXnm14cnrzwPNE9SE66S62I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:db:75:c6:56:07:26:89:15:88:a7:2c:62:5c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404aabbfab9de7126b7d119db524da4111f04afe
Validity
Not Before: Mar 25 22:02:02 2026 GMT
Not After : Mar 26 22:02:02 2026 GMT
Subject: CN=b86db37592f7310d48548cbe18dfb0a0fb9bc34d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b5:8b:ec:52:fb:41:57:aa:d8:49:b4:7c:38:
4c:be:52:d3:f9:6d:5d:04:97:a4:f0:ac:a7:05:bd:
9a:77:0f:78:e4:25:c1:b7:41:1c:4c:3a:ee:3e:f7:
d3:39:d3:a7:a7:ff:bf:d1:24:02:6b:87:33:97:7c:
81:08:67:0b:ff:5a:df:34:a3:26:b6:8e:9a:de:f6:
72:a5:c1:23:a2:d8:6b:ff:55:6b:89:6f:d7:7d:0c:
df:19:31:3b:b8:11:c1:26:a7:8e:b3:9e:2c:c0:de:
c5:cd:a3:b7:51:da:1c:d8:09:7c:26:ba:66:24:1f:
59:2a:aa:67:54:6b:3e:f8:e1:09:a8:24:ae:7f:aa:
05:9e:0e:d9:b8:f1:ea:64:a4:ee:91:15:df:c7:8b:
7e:d7:e4:97:5f:91:45:84:0f:b1:18:59:c3:e5:31:
b5:b5:9b:38:2d:12:6c:5d:36:27:42:d8:35:0a:7c:
f7:75:b5:a3:70:b0:de:f1:b4:22:fb:92:27:e0:68:
b7:a6:f1:4c:3c:b1:9b:6c:c1:14:12:e9:41:8f:91:
fd:ab:c4:e4:43:eb:4f:8c:02:7b:91:f4:53:4d:44:
33:aa:6c:65:f5:a8:9b:c3:b2:cb:29:10:1f:99:ba:
cb:0b:3a:f1:65:a5:4c:69:24:59:1c:08:4e:41:5e:
42:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6D:B3:75:92:F7:31:0D:48:54:8C:BE:18:DF:B0:A0:FB:9B:C3:4D
X509v3 Authority Key Identifier:
keyid:40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:c8:eb:89:9e:5e:52:e2:fd:e6:94:a2:ba:dc:34:f2:80:2e:
92:8d:19:b2:d1:8f:22:1d:fd:d8:55:4e:6f:4a:43:9e:19:f6:
ac:58:51:ec:97:d1:2b:8a:5c:e1:bd:b7:1f:01:32:ae:3f:76:
12:a8:1d:07:3f:19:ef:99:b4:e8:ee:f5:e2:f6:01:05:44:6d:
08:89:71:98:07:89:9d:0b:dc:a5:bf:86:0b:12:d4:2a:13:bc:
ca:49:b1:5b:9d:0e:5d:62:ee:f8:5d:3f:73:68:af:77:09:bd:
72:1b:1b:91:f5:4a:2b:f8:df:62:33:ba:92:9c:4d:8f:b4:6b:
d8:6f:1d:33:77:9b:a8:d7:75:87:08:12:5d:ed:ed:b6:08:ae:
ea:1c:f3:30:bb:e7:b8:d9:b6:e6:c8:3a:a9:ff:81:e0:06:65:
43:4d:ea:06:47:69:a4:19:f6:9e:51:f4:da:b0:c6:80:aa:a9:
5b:ab:71:f4:27:fc:02:64:b4:97:dd:17:06:7b:a5:60:1d:e2:
18:f0:7f:39:2e:1f:1d:18:44:28:cf:3f:af:ae:bb:5b:dc:21:
35:de:e6:75:c3:f3:9b:13:b7:ff:92:15:71:26:ce:b3:b4:a6:
10:d4:4e:13:74:54:87:05:64:4c:9f:97:c7:b3:80:e9:65:8c:
0f:d4:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:58:39 2026 by rpki-client