Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
File: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft (raw, json)
Hash identifier: DNoZTGqcwy1i94PMX5CMO4+2EoP/6qbmA+HcsaBt7vw=
Subject key identifier: 15:F3:D9:CA:2D:67:85:D0:A0:CF:BE:18:FB:67:53:6C:72:C0:E9:53
Authority key identifier: 41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
Certificate issuer: /CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Certificate serial: 019D2703E81AA2D9052C5B90CDCAC6D4CD98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
Manifest number: 1884
Signing time: Wed 25 Mar 2026 22:01:00 +0000
Manifest this update: Wed 25 Mar 2026 22:01:00 +0000
Manifest next update: Thu 26 Mar 2026 22:01:00 +0000
Files and hashes: 1: QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl (hash: kZT8j29qotoHAzzU/2jpahmrxVQa0w+jsu7Vd64VrxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:03:e8:1a:a2:d9:05:2c:5b:90:cd:ca:c6:d4:cd:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=419c2c77f44d5ab7c2ac92fd29bab5889a90130e
Validity
Not Before: Mar 25 22:01:00 2026 GMT
Not After : Mar 26 22:01:00 2026 GMT
Subject: CN=15f3d9ca2d6785d0a0cfbe18fb67536c72c0e953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:89:03:74:68:46:fa:a0:e4:cc:2b:b7:09:64:
4f:a7:ba:28:79:9c:e0:1f:46:98:2b:39:56:38:13:
ad:ed:c6:d8:f6:98:33:ac:05:7e:2b:c4:5c:cf:43:
c6:5e:ed:04:a2:c9:7a:0c:17:9b:bb:c6:89:03:66:
e2:c7:80:2f:9d:7d:64:c7:55:6e:2d:29:33:1f:95:
df:ad:c2:61:e1:44:37:48:99:dd:ef:d9:7f:d9:6c:
a5:da:ef:af:f0:fb:24:42:7b:65:19:2f:44:40:08:
ee:56:1c:87:ba:8d:d7:61:a1:67:dd:09:4c:bf:df:
66:c7:e0:54:47:88:bc:bd:98:53:26:c2:57:84:dd:
90:a6:01:97:34:0a:0e:f7:62:2c:7f:fe:2f:52:13:
fe:f2:26:e7:5c:c2:d1:e3:c2:d6:9f:df:40:8e:a4:
bd:4d:ff:bd:eb:50:a2:ad:7b:e5:3d:eb:39:d7:74:
3b:15:ec:f8:d2:05:29:09:fa:d1:e3:4f:ac:e8:a8:
0e:06:99:a7:f0:f7:f8:bc:dc:ee:64:32:2b:3f:6f:
fd:7d:d7:22:e5:8f:07:78:9b:15:c6:a2:5a:9c:8b:
b6:10:3f:14:ba:da:97:b8:7f:50:7c:0a:93:f7:2b:
a8:0c:91:ee:39:e4:be:2e:a3:b4:f2:32:e3:06:03:
38:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F3:D9:CA:2D:67:85:D0:A0:CF:BE:18:FB:67:53:6C:72:C0:E9:53
X509v3 Authority Key Identifier:
keyid:41:9C:2C:77:F4:4D:5A:B7:C2:AC:92:FD:29:BA:B5:88:9A:90:13:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/84880c-5f95-4fbc-9bf2-cf51e036ef0e/1/QZwsd_RNWrfCrJL9Kbq1iJqQEw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:60:2e:22:60:09:af:2a:85:66:96:45:2a:81:68:92:e3:dc:
72:9b:f6:e4:80:6e:3f:66:c3:0e:b2:ef:75:ed:3f:aa:f8:be:
37:20:4e:e5:3a:ed:8c:94:c7:dd:80:b2:3c:b6:a6:09:68:a2:
ec:47:6d:9b:2a:c9:5a:fa:97:4e:4f:00:ab:6e:b7:03:05:f7:
71:2c:00:48:46:ae:12:c5:95:06:c6:dd:39:72:7e:01:f4:7b:
ac:c5:0f:bd:f6:39:52:c0:f0:19:c3:38:ee:4d:b9:14:db:23:
e3:1e:58:05:87:3f:c7:7e:85:bf:5c:f1:19:f0:31:28:cb:85:
85:4f:76:b4:d3:a9:6d:57:8c:68:58:a5:1c:ea:0c:3e:b5:82:
ea:a8:01:f8:16:58:35:f3:2b:2e:a6:84:12:df:96:e6:82:60:
97:aa:d9:7d:aa:5d:d4:1f:2a:24:de:de:48:ab:84:b9:cd:2f:
d6:ae:d0:a0:3f:9f:9c:8f:c0:a4:36:19:17:27:62:d6:4c:8c:
a7:a6:e2:96:36:c5:27:ca:28:b4:22:76:48:d1:cb:75:d2:30:
78:bb:56:ae:8d:b4:16:b4:b5:23:03:49:ce:53:6a:de:c5:54:
31:a7:be:e5:76:1d:44:fc:4e:ec:0c:fc:66:f4:63:fe:ad:1f:
66:8d:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:09:28 2026 by rpki-client